Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: 48lPdXW9lZSOltflaBXHgMUGAam6w/80LSYnvHYFgHo=
Subject key identifier: 16:A8:FD:0C:55:DD:64:AD:03:1E:A2:D5:9A:36:5F:13:38:1D:B0:F0
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019F18D6C2E2A150A09293B7BB581BF65DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0AFA
Signing time: Tue 30 Jun 2026 14:02:35 +0000
Manifest this update: Tue 30 Jun 2026 14:02:35 +0000
Manifest next update: Wed 01 Jul 2026 14:02:35 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: qVljKq/16SCGhxb+ly20QrHJBOR+2JMHuUFNDQXKFQk=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:c2:e2:a1:50:a0:92:93:b7:bb:58:1b:f6:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jun 30 14:02:35 2026 GMT
Not After : Jul 1 14:02:35 2026 GMT
Subject: CN=16a8fd0c55dd64ad031ea2d59a365f13381db0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:b1:ee:55:8e:9a:5c:25:d0:87:81:05:78:
79:9b:19:57:5c:e6:be:a8:1c:b0:e1:2c:3a:9e:26:
98:19:73:a6:c5:67:71:03:b0:54:55:6c:97:96:bf:
77:0a:cc:bb:26:57:f3:2f:73:29:00:9c:dd:fe:bd:
f7:f8:f2:d4:ce:ec:d4:a0:2b:ab:71:c4:c0:af:8d:
5c:82:84:7e:db:3c:0d:c8:06:bc:a0:18:d3:55:46:
b1:4c:a8:f7:b2:8e:b3:e0:93:33:93:a5:0c:e3:98:
97:8e:e7:38:d6:54:1f:dd:b4:d8:df:03:66:67:92:
11:40:19:39:eb:ec:a4:d0:2b:56:dc:34:cf:ac:07:
e4:b0:ba:ba:3a:45:20:9b:fa:2f:bc:02:4e:c9:81:
b3:2d:c0:05:ad:60:dd:68:f9:24:2b:17:3d:93:de:
68:8b:a9:77:79:c2:01:7e:bc:4a:76:36:cf:f3:b9:
aa:06:a4:76:2f:77:97:7d:e1:11:65:44:b1:c2:ab:
4d:cc:a5:33:9a:e6:d6:2f:9d:a9:d5:ed:06:72:8a:
15:d1:1a:fd:d5:36:ae:ca:19:50:ec:cd:0f:2a:16:
45:2b:13:fc:73:ab:1d:eb:d5:83:e3:c5:a4:d3:d4:
b7:3d:92:cf:a1:d1:29:7d:16:13:d9:13:c2:44:62:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:FD:0C:55:DD:64:AD:03:1E:A2:D5:9A:36:5F:13:38:1D:B0:F0
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:bc:6a:da:9b:79:8b:2a:9b:c8:53:fb:02:00:e4:c9:6f:
3c:c9:df:a1:3b:0d:67:ef:e9:69:fe:f4:e3:d0:57:cd:6e:f8:
15:72:6a:bd:68:7d:fc:9b:f4:9c:78:ac:bf:27:0e:c4:28:8f:
72:e0:f8:b1:1b:15:2c:bf:d8:8b:eb:cc:f1:1e:4c:24:4b:50:
c5:ec:6c:5e:c4:46:54:15:67:29:79:b0:f3:d9:61:f8:5f:29:
e6:29:cd:e8:4b:47:47:d9:6b:2d:a0:2b:a3:dd:7a:64:f1:92:
85:9b:ea:1f:55:7e:5b:f6:88:d5:dd:d6:8d:ef:93:d4:91:8e:
5a:91:ce:1a:bd:91:82:48:a3:f0:65:03:d8:5a:dc:ba:82:c6:
f0:16:7f:61:0c:ba:88:28:1a:a7:6a:ba:f4:e3:82:2f:31:a6:
58:b9:06:2e:cf:ba:e1:28:c0:44:06:a5:8a:ff:27:59:71:6c:
10:4d:be:9d:68:15:ce:b7:15:d9:ac:05:55:23:9a:9c:1a:f1:
a1:65:23:e6:08:af:08:0e:08:2e:4a:a6:48:4a:e1:c1:e0:98:
66:3e:81:2d:50:97:c0:91:95:a4:51:f6:98:5f:80:27:2e:6a:
ab:a0:c2:2b:00:25:df:e2:29:cd:d3:0c:2d:25:58:ef:7b:54:
61:18:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client