Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: eOMw0vPyqzs2cIFYwyMVAN941Wr0PWfQtALlnyMDYwc=
Subject key identifier: 0A:44:AF:AC:4C:35:88:D0:25:0D:4A:DB:38:C3:9D:F9:F6:36:96:3F
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 019D37F75D6CDAE43989AE422FD24E83E40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 08EF
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: d2syhbRGjfsN5yzQTVhqqvsyH9HaBWhk7MKvZl6AVT0=)
2: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (hash: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5d:6c:da:e4:39:89:ae:42:2f:d2:4e:83:e4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=0a44afac4c3588d0250d4adb38c39df9f636963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:47:1f:14:26:2b:d8:91:c4:b7:d2:c5:2f:
aa:d3:e0:45:39:a0:38:cd:8d:91:22:c9:2b:15:30:
84:01:4c:42:1f:aa:91:21:aa:14:1b:b6:c4:3c:52:
c4:f2:23:2d:9b:73:f1:c5:87:51:eb:21:33:46:1d:
a6:77:37:aa:86:c4:ba:e7:ca:94:29:c1:d6:12:00:
c7:2b:5e:6a:97:63:0c:6b:4e:61:62:62:9b:2c:06:
76:f1:92:cf:38:26:3d:fc:d1:d0:32:41:37:50:30:
08:16:84:a9:29:d5:dd:9c:ce:40:a3:b4:d1:f7:ca:
4b:a8:20:d4:32:72:3a:5d:2a:f8:a6:bf:5a:93:e6:
2d:11:a1:71:d0:56:2a:43:56:a4:9f:c5:b9:e2:4b:
31:a8:bc:64:5e:ea:03:08:9c:d8:c9:b2:de:0d:b1:
ed:93:6f:7a:aa:94:97:39:8d:be:60:7c:8e:8c:d7:
97:4f:1b:e1:56:1e:cf:d3:58:33:28:36:75:b8:f7:
b6:be:b8:4e:98:22:5c:ec:fe:0f:61:d7:0c:43:94:
c8:a5:35:3c:f2:e7:bb:15:76:e6:a2:bd:47:61:a4:
6f:82:11:94:53:67:c0:a4:23:a1:56:c6:0e:9a:40:
49:32:af:45:d2:77:86:e3:9c:93:51:16:9d:85:02:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:AF:AC:4C:35:88:D0:25:0D:4A:DB:38:C3:9D:F9:F6:36:96:3F
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7a:3c:13:36:ba:18:68:21:99:5b:aa:60:48:28:65:94:b4:
1a:7a:ea:60:dd:20:c0:41:4f:95:74:20:07:a3:13:15:99:9c:
81:0d:66:b0:82:2d:d7:3d:9b:5d:9d:80:db:84:55:16:af:08:
b8:e7:c1:68:51:27:04:4b:a1:72:87:96:b0:34:eb:42:87:42:
b8:6e:42:24:62:2d:7b:ae:15:a8:bf:b0:fd:49:9f:a1:45:a8:
10:3a:1d:c3:3d:d9:62:b2:01:da:a9:1e:45:aa:5e:03:ae:24:
28:8c:39:cc:b3:11:b3:2c:e5:47:e3:aa:89:80:40:3f:e0:a4:
38:55:09:f1:2d:6b:ed:46:69:79:f8:3d:fe:79:4f:54:37:f0:
59:32:b9:a8:fe:bb:0b:ed:08:9f:e2:01:00:38:8f:b5:93:4c:
a2:06:35:c8:26:9a:90:0d:2d:32:67:de:b8:c5:e8:50:e8:2b:
96:7f:0c:b7:58:00:96:f0:96:4c:eb:1b:73:f7:03:fb:aa:62:
23:69:8c:a9:71:5f:47:9d:4e:ce:c2:ad:fb:ae:f0:d8:53:16:
6d:da:b6:41:f2:6d:5d:0d:21:53:b4:d8:9e:f4:88:1b:bc:49:
4d:20:0b:c6:c9:a8:1f:ae:dd:c9:43:fb:1e:ac:16:06:42:16:
fb:45:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:35 2026 by rpki-client