Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: bEWQi2f92pBv7Ipt+OkX+Cx/xWUn9MPfVVh7qGzHeuY=
Subject key identifier: AC:C5:B0:25:2E:B6:A5:31:30:B1:32:2B:D9:77:F7:CB:2C:B2:15:70
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019F1867AE17857C8292BA70F4D341C42E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 188D
Signing time: Tue 30 Jun 2026 12:01:15 +0000
Manifest this update: Tue 30 Jun 2026 12:01:15 +0000
Manifest next update: Wed 01 Jul 2026 12:01:15 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: OS2XNiUqXFJXZtsGV+ObAu8nLkH7s19OG95KpHJI6eM=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:ae:17:85:7c:82:92:ba:70:f4:d3:41:c4:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jun 30 12:01:15 2026 GMT
Not After : Jul 1 12:01:15 2026 GMT
Subject: CN=acc5b0252eb6a53130b1322bd977f7cb2cb21570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:1d:e2:e3:7b:cc:fb:2f:89:8e:ee:0c:7a:
00:37:99:7c:2e:0d:69:ae:72:69:f6:f6:dc:78:5c:
23:34:7d:13:54:46:1a:f3:14:9b:8a:23:85:e9:12:
64:9f:7e:e7:b9:06:62:98:f2:0a:10:07:51:1d:38:
68:e1:6b:60:2c:d2:b2:d4:99:6a:29:af:ee:f7:41:
19:9b:96:04:ca:8b:fc:e9:db:9b:ba:64:03:7e:ed:
9e:17:3f:86:ae:0d:ea:e4:ee:88:70:09:bb:11:52:
6e:97:c0:8e:4b:b9:2a:dc:17:b0:a2:d0:6f:2e:5a:
f1:0e:a2:9f:26:13:c4:4a:8e:25:10:8c:3f:27:f0:
59:32:8f:73:2b:b8:7e:cd:61:28:22:ff:cd:7f:f9:
af:3f:46:20:67:0b:12:87:29:f7:9a:c5:ad:48:d1:
ba:20:7a:85:47:c9:b7:65:64:28:0f:3b:77:40:da:
e2:da:25:55:b1:f8:46:8f:40:86:60:4d:b4:45:15:
d2:68:65:21:66:ab:d4:d5:63:40:1a:82:18:39:0b:
05:bb:d4:3e:25:5b:36:8b:11:c7:97:61:68:11:53:
be:68:36:e2:71:45:7f:98:68:3b:16:23:c4:ad:ec:
9c:c6:0e:62:ff:99:38:fe:b8:65:8a:16:9e:17:1d:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:B0:25:2E:B6:A5:31:30:B1:32:2B:D9:77:F7:CB:2C:B2:15:70
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:98:aa:ea:9c:dd:2c:74:98:6d:35:be:d4:9d:be:11:a9:9c:
19:bd:54:22:75:76:be:2e:dd:eb:64:c6:ab:b4:e0:99:57:a7:
f1:16:93:ed:ab:92:46:87:4d:be:9b:cc:24:5b:92:0d:96:b7:
e3:cb:66:40:19:8e:cb:06:1f:36:82:13:01:51:8c:8e:bd:e3:
a9:82:d4:9f:68:e2:71:ca:22:a8:6b:95:6c:28:a0:56:11:9a:
17:7f:fd:c2:87:94:7e:37:b5:6b:63:19:3d:2c:ad:02:28:21:
82:c0:f4:41:b2:c8:90:cd:e7:0d:17:9f:d3:d7:e9:fb:34:d2:
48:45:1f:75:26:80:1b:7d:c0:30:dc:dd:c0:a7:e1:1d:86:2a:
e8:ba:7b:5d:40:a0:24:aa:c5:95:9a:72:f8:51:5e:ae:b1:d9:
30:77:22:5f:63:90:68:98:cb:9f:64:e9:69:6e:3f:ca:21:9a:
22:14:db:37:c9:46:e1:56:b2:c1:26:97:a8:10:df:eb:30:18:
d2:b5:b4:db:08:1d:71:7a:2c:34:38:7f:4e:02:03:39:d3:c9:
52:dd:8d:42:b3:d2:47:16:c5:e6:b3:b1:6a:1f:14:f2:48:25:
98:a1:a1:06:46:98:c2:d6:29:7b:21:48:e0:df:3e:4c:5d:19:
68:ff:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client