Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: 5efEznl/P942gdilK2/Cf+yVwTeD0ulUXeeFE3JlA/I=
Subject key identifier: 05:49:85:D4:DD:9F:DA:41:FA:E0:7D:96:48:E9:66:CB:E3:32:FF:B3
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019F189EEF2A4BBEC89B019F5B285893CA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 0A22
Signing time: Tue 30 Jun 2026 13:01:36 +0000
Manifest this update: Tue 30 Jun 2026 13:01:36 +0000
Manifest next update: Wed 01 Jul 2026 13:01:36 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: 5TxgLUhYIzwGnKHCo33qhUYfXJf/YO8UsypZWfxYey0=)
2: aHOqp1ZMoDrn_Rz0nU13prJUF_M.roa (hash: aPL+Mw0PwgSles+WTwist9EMPvDKnBfA4ED9lGmk97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:ef:2a:4b:be:c8:9b:01:9f:5b:28:58:93:ca:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Jun 30 13:01:36 2026 GMT
Not After : Jul 1 13:01:36 2026 GMT
Subject: CN=054985d4dd9fda41fae07d9648e966cbe332ffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:d6:a5:30:b8:ce:41:ad:b8:fa:c4:34:e0:
17:e7:13:44:c3:25:27:92:96:77:4c:47:9f:46:78:
34:1c:39:93:33:c0:28:e7:a1:32:66:54:38:cd:9a:
e1:73:25:6d:0f:b1:35:08:e4:e2:6e:53:02:5d:e0:
0a:c2:ce:b8:4c:4a:94:4d:48:98:b4:f0:cc:20:01:
37:04:2a:75:95:7d:9f:65:ac:cc:39:65:8d:39:c7:
4b:dc:d6:45:c2:55:51:4b:fd:5d:ff:e3:65:1b:d5:
13:2a:37:31:fa:16:c7:e7:0b:88:fa:bf:bf:f9:e2:
0a:5d:8f:55:9f:7e:23:ef:b8:c9:43:27:4a:82:04:
ad:e2:33:45:5b:0e:0d:1c:dd:b4:95:9c:12:66:61:
a6:70:3d:bb:31:04:a4:b3:db:2b:ea:ed:50:0f:9b:
f2:7e:0f:54:6d:aa:41:01:26:ce:c3:00:89:65:0f:
28:0e:99:de:dd:36:03:19:82:db:b2:d4:23:d9:a8:
96:31:d7:a6:0a:d4:69:62:a6:a3:15:96:31:13:80:
ef:92:da:8f:80:4c:63:81:cc:a3:ac:12:c6:61:e4:
bb:79:3e:bc:67:2b:bf:10:df:1e:2d:f1:d5:1d:8c:
1a:64:a1:da:a7:3d:66:d4:66:39:10:8d:36:11:45:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:85:D4:DD:9F:DA:41:FA:E0:7D:96:48:E9:66:CB:E3:32:FF:B3
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:6d:e3:21:72:33:a6:2b:f8:55:82:13:50:5f:1c:3d:65:
08:ab:f3:80:2c:77:2f:25:c4:07:97:4d:27:b7:a2:f7:29:68:
92:2a:e3:38:99:06:ac:87:ca:e9:d3:6a:4f:fa:2a:25:ed:e2:
8a:96:cb:af:d0:a0:3c:b5:cf:62:7f:43:d5:42:6d:06:66:ed:
a3:1c:cd:44:12:2c:c2:63:d5:c0:38:ec:9e:80:b0:b6:01:08:
60:e1:18:eb:1e:bb:b9:92:50:e9:b9:b3:21:0d:79:3f:e0:7d:
3b:3a:26:53:c8:ec:58:31:09:3b:4b:51:f1:6f:74:91:c2:79:
c2:71:68:0d:4a:18:94:ae:50:0b:f0:11:04:ea:99:bd:f3:81:
69:cb:3a:92:65:c1:af:75:90:8c:e4:43:6f:47:d4:20:41:34:
64:b2:be:4e:c0:53:ec:3a:59:6e:06:d3:15:27:b4:02:73:6f:
f1:70:4c:d6:18:ef:eb:1e:50:78:ea:c0:ac:1f:43:2b:1d:1d:
85:c9:c8:f1:ae:d2:32:5b:88:17:80:d8:0b:13:a1:6e:3d:e5:
e8:12:3c:df:ee:34:71:d4:a3:da:9f:7d:36:e8:2b:2a:99:12:
9d:d0:ba:60:28:19:02:39:3d:c6:29:f1:3f:be:90:d3:43:f4:
69:b5:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:41 2026 by rpki-client