Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: T8F41meE5M8sMDqn/ezqF6+49u8fQwzSFuAD/WXH7RQ=
Subject key identifier: 6B:D4:02:C7:61:D7:DC:E3:F4:2A:5B:6D:40:1E:C3:C9:F6:61:29:74
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019F178B97CAAFD99196160A7254D5DDBE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0D54
Signing time: Tue 30 Jun 2026 08:00:51 +0000
Manifest this update: Tue 30 Jun 2026 08:00:51 +0000
Manifest next update: Wed 01 Jul 2026 08:00:51 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: ZJdbThaCfpOFiRYBXer3vZLh7+qWwPOSyZX89b7qZx0=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:97:ca:af:d9:91:96:16:0a:72:54:d5:dd:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Jun 30 08:00:51 2026 GMT
Not After : Jul 1 08:00:51 2026 GMT
Subject: CN=6bd402c761d7dce3f42a5b6d401ec3c9f6612974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:16:46:3e:76:78:8b:ff:a7:b4:af:9b:c2:32:
be:c2:d0:85:e4:e7:80:e6:4a:72:25:76:76:65:c5:
9e:21:0d:33:c4:b7:5a:36:07:b2:9e:61:c8:2d:a7:
7b:84:14:d1:fa:06:3e:2b:41:cf:c7:14:10:92:34:
6f:cd:2d:0c:00:8f:aa:22:35:7a:4c:ae:e0:de:86:
cd:c9:02:cb:2d:03:2d:73:5f:e7:58:35:6e:c8:d4:
70:ef:12:f9:94:5b:c0:7a:4a:34:58:32:70:ec:e4:
c4:56:ca:0b:f2:e3:2a:2b:78:74:6f:0d:9e:32:2f:
da:27:30:32:a4:00:c1:44:a8:0c:f1:8c:02:f4:0a:
29:6a:aa:c4:e5:c4:59:c4:f6:b9:ea:ef:f2:7d:fd:
27:f0:0d:3c:26:b0:d9:18:6a:63:34:b6:cb:6c:0c:
75:e8:7f:8d:33:a0:31:2d:e8:36:f8:0a:0e:e1:7e:
14:da:1d:76:ee:59:35:b7:02:f2:74:31:00:42:82:
81:34:f1:d8:9c:e0:d8:87:7e:b8:9f:2a:46:ce:ae:
dd:74:47:45:65:2d:e2:e5:9d:08:81:dc:88:5a:dc:
38:a5:82:8c:d8:17:6d:ef:55:95:77:60:a6:f7:0b:
fb:41:e0:73:49:e5:b2:ff:9e:96:57:7e:78:31:92:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:02:C7:61:D7:DC:E3:F4:2A:5B:6D:40:1E:C3:C9:F6:61:29:74
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:24:4f:fb:de:1e:43:ed:82:49:5f:2d:12:eb:ea:87:a7:a0:
a1:33:ba:53:d2:7d:ba:7c:7c:ab:86:9f:ef:0c:f4:cd:8f:09:
18:1b:65:85:e9:9d:dd:17:4d:7b:03:71:7e:ed:b6:d5:9c:56:
5b:c6:7c:6f:c7:3d:c3:83:c9:07:9f:69:a3:e3:b0:03:8a:a6:
b4:d2:6f:f4:dc:13:83:94:1b:51:b2:58:49:dd:64:e4:d0:ad:
4d:9e:12:4b:ef:c9:86:b5:2f:05:19:7b:ad:ff:0f:34:7b:7e:
ce:2f:5c:27:fb:23:07:f6:8a:a0:f0:bd:c1:1f:1e:95:39:aa:
45:64:3f:36:36:f6:4f:ef:8e:4e:4f:60:d4:dd:a6:d0:30:60:
ec:a8:7e:83:69:18:fb:91:ee:c2:da:ca:ac:0c:fb:3c:94:8b:
af:58:77:74:d5:cc:af:60:4f:67:c9:47:6f:42:af:f2:cb:9f:
4f:06:1b:70:d7:07:20:83:7c:d4:c7:22:33:ec:28:63:eb:8b:
0e:8e:50:fa:ec:ae:3a:1d:71:52:0f:5e:d4:ea:b5:4e:ec:cb:
c6:23:51:c7:3c:13:28:69:e9:b0:2e:49:e0:6e:4a:38:c5:1c:
c8:25:92:6a:17:b6:7d:34:c8:12:1b:e6:ee:a4:ca:53:64:c1:
ef:c0:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:21 2026 by rpki-client