Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: cdu9j6oeeCcWSFbvqooR7BCcIcyEAdmsV/kNeIDubKA=
Subject key identifier: 21:B3:67:E3:C5:B0:B2:B4:C5:50:38:1C:75:3E:7B:F4:44:11:6B:65
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019E7553575CFD662CCCE834803740D2B3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1935
Signing time: Fri 29 May 2026 20:00:56 +0000
Manifest this update: Fri 29 May 2026 20:00:56 +0000
Manifest next update: Sat 30 May 2026 20:00:56 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: 5KwpPgzHVlXcAdCfhOorh6+U2bMcv1brazVnRve3ZRY=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:53:57:5c:fd:66:2c:cc:e8:34:80:37:40:d2:b3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: May 29 20:00:56 2026 GMT
Not After : May 30 20:00:56 2026 GMT
Subject: CN=21b367e3c5b0b2b4c550381c753e7bf444116b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:93:e6:e7:81:0a:b6:ca:37:ec:2a:d4:a3:
f0:ec:ec:61:6b:46:11:ee:94:80:33:f3:aa:f1:65:
e1:8b:71:a1:8c:89:62:17:e8:26:c9:0c:80:1b:4a:
f7:74:6a:42:5b:51:48:08:58:91:7a:bc:24:a7:39:
c8:77:73:b7:e6:54:9f:2a:8f:8c:16:7a:29:f6:ef:
20:ee:ca:ab:19:9d:4b:a8:cf:40:03:05:2a:25:fd:
b5:85:b7:77:10:1c:30:5f:ee:a3:30:db:b8:50:ff:
dc:15:bb:f7:bd:eb:c5:f0:ce:f6:fe:d6:00:a7:53:
ff:24:cb:88:b3:aa:24:fb:12:78:05:45:ca:7a:8d:
74:95:02:a0:36:67:90:49:0b:84:26:19:09:1d:1e:
29:94:cc:3a:36:73:fd:5a:de:e2:2b:c4:e6:c6:87:
40:93:85:1b:46:97:77:f4:60:a6:55:77:da:d7:b4:
aa:cb:46:8c:c7:24:e0:62:35:fa:c7:3f:fe:2d:34:
a6:86:0d:67:90:3d:2e:1c:c2:db:a4:dd:93:20:7c:
4a:cd:6d:80:af:3b:a8:9d:ed:31:ae:98:0d:fc:43:
13:7c:e7:29:93:71:62:f4:46:5a:77:70:1a:7d:7d:
c9:0a:08:da:77:d5:20:13:09:56:52:5d:01:c4:63:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:67:E3:C5:B0:B2:B4:C5:50:38:1C:75:3E:7B:F4:44:11:6B:65
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:01:e9:68:14:a8:78:45:56:8c:ab:dd:0a:2d:b5:04:1f:2e:
3f:f6:40:da:b1:e4:14:7b:8e:24:1f:a4:82:fc:c8:c4:f1:d5:
35:63:7a:81:46:d6:5a:39:e0:93:e4:ee:56:c7:67:d8:03:b6:
b9:6b:c4:e3:87:c1:e3:32:4b:b5:61:fa:81:fb:cd:b1:ee:23:
cb:7c:37:f2:8a:34:8d:95:be:9f:31:8d:44:70:24:2b:97:62:
87:52:d9:15:6d:55:47:12:16:1c:a4:18:46:0f:86:66:6d:72:
ca:cd:c0:4a:dc:b8:00:15:43:5a:83:79:a3:13:e6:4b:65:ad:
31:d5:7a:11:2e:8f:fb:c4:ab:7a:e9:3e:0b:b0:9f:20:cf:c1:
f0:f2:4e:93:af:a8:0e:c8:eb:e9:54:b3:00:ed:1d:9a:8e:23:
8c:f1:3f:69:d2:9b:6f:6d:1a:3b:f3:c8:d6:51:b8:75:d5:b5:
21:3e:e7:f1:03:19:e7:22:4a:9c:6e:ca:a5:d5:4e:03:31:bc:
98:e4:65:96:06:8e:c1:38:e3:a1:d0:94:40:35:86:bd:43:41:
f4:9a:1f:c1:85:82:67:8e:bd:b6:2a:2a:ef:c8:91:2d:ca:6f:
8b:37:c3:1c:12:3f:f7:ea:d3:aa:8e:93:ff:bf:8d:b4:d0:99:
c7:f5:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:38:01 2026 by rpki-client