Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: oEMv/0AC0ZcP4CNvkGWlIHRBba330l5sjzFkdqT1EZc=
Subject key identifier: A8:BC:7B:69:26:9E:1F:DF:3E:61:86:A2:F0:A4:09:60:7D:EF:21:B8
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019F1152AD2BD9DBD575E3B0E8A4EDDC5CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1216
Signing time: Mon 29 Jun 2026 03:00:58 +0000
Manifest this update: Mon 29 Jun 2026 03:00:58 +0000
Manifest next update: Tue 30 Jun 2026 03:00:58 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: Za9vfpouOQl/hAILwF0bexLkvkEsWbj3QbsRZ4T3SmU=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:ad:2b:d9:db:d5:75:e3:b0:e8:a4:ed:dc:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jun 29 03:00:58 2026 GMT
Not After : Jun 30 03:00:58 2026 GMT
Subject: CN=a8bc7b69269e1fdf3e6186a2f0a409607def21b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:3d:6f:b0:7e:98:43:82:90:0d:37:0b:5a:
06:dc:3b:ff:6c:34:72:e8:30:d0:db:ae:c0:ec:a9:
76:8c:7a:4f:c7:80:c8:9a:c5:c0:9e:01:3f:bc:70:
ab:b7:33:7a:36:af:64:67:f0:f1:44:62:b8:eb:a6:
28:d0:a0:67:35:e1:3f:cf:ea:9a:d7:67:1f:38:57:
a1:75:e7:f0:65:24:90:7f:56:a0:d6:34:a7:4e:07:
93:06:a7:91:8e:4c:6d:47:85:02:59:18:75:cc:ed:
d6:02:ed:5e:f6:e2:bd:4b:04:50:5a:58:04:29:4e:
05:ce:7e:75:31:07:9a:34:02:3b:7c:21:e5:3b:82:
1c:d1:a7:9c:4c:e5:1d:a7:6c:38:a7:80:b9:2e:b7:
8d:01:ce:23:77:02:ab:6e:81:39:5a:b8:f2:5e:f6:
51:e6:73:24:db:5e:97:80:aa:0f:48:2c:c1:0e:5d:
9f:d9:e3:b0:4c:52:74:e6:9f:ad:08:f3:44:98:61:
ad:a3:27:a6:de:9e:18:9c:25:8e:b3:72:f6:fe:eb:
95:77:22:0d:0e:76:3f:bb:8d:25:bc:19:74:18:83:
c2:d3:fa:01:5d:b6:3e:f7:f9:1c:75:7e:78:2f:b0:
90:33:c6:40:1d:51:da:c7:b0:38:b5:34:36:f6:14:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:7B:69:26:9E:1F:DF:3E:61:86:A2:F0:A4:09:60:7D:EF:21:B8
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:05:3a:83:08:74:00:40:74:f8:c2:f9:1b:b4:9a:46:1c:
d4:bd:75:60:4c:35:1b:74:2a:0a:21:e0:55:17:34:03:50:07:
1f:20:00:67:34:b3:48:18:43:81:52:09:2e:de:c7:af:2b:d7:
a1:7c:6c:a8:57:78:9c:57:ee:29:95:16:21:66:a8:d5:b4:ec:
3c:25:78:19:51:f8:0d:b9:0f:55:0b:09:f2:01:0c:c8:83:e4:
06:e8:3f:b3:46:5c:27:e5:a8:cc:e3:f3:71:6a:6a:78:4d:4c:
75:5d:30:96:fc:75:53:03:0a:f4:31:e8:51:8a:c6:07:c3:25:
a4:1f:e5:13:e2:d1:d1:c5:19:38:62:dd:50:e9:9d:0d:49:04:
51:c8:df:d1:21:7a:75:d3:0d:3e:9b:70:5e:d4:8d:dc:dd:38:
c7:46:e1:ca:0a:32:b9:ba:0a:51:b4:ed:c8:3e:0e:0e:e3:33:
7a:6a:27:5d:8f:99:bf:c2:77:ca:28:73:8f:59:dd:d6:9b:0a:
9c:22:71:90:28:39:3d:b1:ba:9e:d4:d1:f8:cc:fd:ef:50:c6:
cc:74:35:1f:c9:af:07:33:54:d3:1b:ec:5f:21:13:60:00:9c:
a4:55:18:00:4e:62:1c:cb:55:59:e7:19:40:1a:89:dc:89:cb:
e9:3a:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:43 2026 by rpki-client