Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: HwcvbTxdkdg0Az5xXOw8yFoYm+b+/SCIMcOvaCfkB0M=
Subject key identifier: 8B:B6:85:FC:7C:EB:8F:37:D9:F2:45:CC:78:90:E6:0F:56:52:B5:A4
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019F18D6B85ED04DF4867C491961894B50BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 107D
Signing time: Tue 30 Jun 2026 14:02:32 +0000
Manifest this update: Tue 30 Jun 2026 14:02:32 +0000
Manifest next update: Wed 01 Jul 2026 14:02:32 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: 3r0YpIRP0Y0Evy8aw5u8kzdYOIERx5nTHS3l2n3sTjo=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:b8:5e:d0:4d:f4:86:7c:49:19:61:89:4b:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jun 30 14:02:32 2026 GMT
Not After : Jul 1 14:02:32 2026 GMT
Subject: CN=8bb685fc7ceb8f37d9f245cc7890e60f5652b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:dc:c9:8d:6e:4a:f2:3b:b2:59:7d:e3:ea:
e6:89:69:f9:f1:33:35:3e:b0:27:a9:e0:36:04:2e:
d9:59:73:93:e2:f1:01:75:22:a0:55:41:07:89:9c:
80:b7:5d:65:15:55:ee:7a:65:9e:86:44:38:eb:cd:
d7:51:4b:18:fa:9c:4a:02:97:c5:bf:3a:e6:32:4e:
ac:20:df:5d:7a:0f:44:5e:2c:94:cb:bd:cf:61:93:
01:ec:81:fb:c0:de:06:0b:33:a9:54:0a:72:c3:65:
a4:a5:b2:6f:ac:19:c4:d4:9e:dd:2e:a2:33:27:a2:
72:2b:f2:ee:e8:87:58:8f:26:2a:84:db:30:64:a4:
f4:d1:4d:0c:75:b3:c5:c8:7d:41:a8:91:93:39:ef:
67:4a:f1:c8:73:15:5e:03:49:ef:79:70:f1:56:e0:
29:b4:f6:8a:8d:de:db:c6:e8:b9:03:cd:8d:70:5b:
45:1e:29:f4:83:46:1c:95:a1:4a:cd:c2:b9:52:0f:
c3:c0:4a:44:d4:7e:68:bb:6e:e4:38:96:5a:4a:18:
88:ed:42:39:6c:40:09:a7:09:9f:ea:4f:1d:9d:60:
91:12:a7:88:33:96:e4:57:95:d9:eb:35:da:c0:b8:
d6:5f:84:df:89:6b:ee:b5:1b:48:90:37:cc:3e:f9:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:85:FC:7C:EB:8F:37:D9:F2:45:CC:78:90:E6:0F:56:52:B5:A4
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b1:dc:2a:9d:10:36:e0:a3:a7:33:21:23:9b:f1:ab:4c:10:
62:43:35:88:78:30:f2:1e:2d:62:59:ec:2e:8a:5d:df:c4:21:
fd:ea:bc:13:3d:72:25:7f:48:c6:fd:47:a9:e0:c4:3d:79:06:
f8:ca:23:f5:99:6b:1f:0c:da:48:37:82:bd:40:67:88:fc:79:
cc:6a:11:91:0f:21:47:2e:28:2e:4a:9c:00:e5:d5:79:c0:b5:
c2:28:90:00:41:bf:1c:53:5d:85:4c:d4:c2:4b:e4:87:dc:81:
d3:06:1c:3d:6b:a8:8d:bf:f5:2a:5e:2b:3b:a8:a5:13:6e:d4:
0c:76:ab:bd:72:c5:2c:25:98:a3:1d:63:1b:2b:9a:ed:f6:51:
ab:c0:02:c9:f2:03:12:99:6a:98:62:a9:62:b1:2e:f2:00:34:
2b:1b:d5:7c:4b:b0:fb:19:b6:02:41:aa:66:8c:d7:61:85:1b:
e0:45:6a:d8:2b:a5:2d:75:9a:92:38:c6:1d:57:6f:54:af:79:
50:29:86:fa:66:04:72:13:e2:93:bb:ec:bb:cf:8f:48:7a:07:
9b:dc:a6:0e:3b:3e:d3:19:6c:5b:d9:4a:59:58:86:45:52:ee:
93:69:81:b1:cc:80:37:89:7f:3b:85:f3:31:2d:70:bc:77:62:
53:a9:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:29 2026 by rpki-client