Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: pO1Nz7Vkem+1La16GfuG3eHMXGYUx3dtX05gKb1xJ/E=
Subject key identifier: 1A:F9:EF:56:3D:E0:CB:A5:74:ED:10:65:E4:9A:25:AB:2B:B0:85:B4
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019D37C03DAEB417E73AC242350F9C3CFD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 080F
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: aOG4yHLMvWjoZGvDIWWmqMDkqmj7i1iaYGkt2CTkquw=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3d:ae:b4:17:e7:3a:c2:42:35:0f:9c:3c:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=1af9ef563de0cba574ed1065e49a25ab2bb085b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:57:b6:07:43:94:8c:5c:3e:0e:a8:e5:f0:
10:1e:a6:c1:0e:73:5d:dc:ab:f2:52:47:09:2e:1a:
41:5e:3f:83:c9:d4:04:cc:b4:34:3f:83:f1:18:34:
13:5a:26:5b:06:06:28:bc:18:18:f4:b3:f2:4e:59:
c1:0d:16:81:36:51:e7:19:ab:96:43:31:9e:91:94:
bb:45:c6:b3:37:3f:47:81:3d:48:cf:17:40:2d:cb:
fa:03:7d:34:e0:bf:95:58:9f:de:c2:0d:7a:61:74:
3e:54:db:c5:10:fd:95:0f:ba:fe:c4:2a:f5:b7:f2:
79:bc:0c:e3:7a:36:c4:a0:24:f8:ca:4b:3b:59:8d:
a5:76:15:b9:3b:7b:70:50:5c:78:cf:10:03:2f:40:
d8:81:f4:a0:f8:6b:3f:80:7f:aa:f0:ae:65:6a:cc:
62:d8:15:cf:a9:cf:f4:03:6f:16:1c:8c:41:6e:3a:
90:8d:dc:59:dd:f2:14:b2:7a:ae:1e:8b:7f:0d:8b:
e2:93:7e:bc:1e:a0:7d:06:f3:de:fe:49:ed:9a:75:
0e:f3:ec:0f:80:3f:46:98:3e:1d:df:8f:8d:bc:b1:
23:af:a1:aa:15:04:5b:83:4e:94:00:9c:b5:89:e8:
11:81:8e:f0:1b:ad:bb:b8:1c:10:a4:4c:5e:a8:be:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:EF:56:3D:E0:CB:A5:74:ED:10:65:E4:9A:25:AB:2B:B0:85:B4
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:98:7b:54:95:ea:a1:05:13:c3:08:f1:d3:e4:cc:27:69:
c2:5e:95:d9:a6:93:d3:6c:1d:ab:b9:5d:39:52:f0:c1:a5:93:
cb:20:47:3b:5c:79:13:96:84:85:34:93:62:31:e1:98:fa:f8:
1b:04:c7:b0:46:a2:57:b0:7e:b4:4a:ae:45:21:e5:70:45:0e:
19:f1:7d:72:3b:2b:11:89:e1:c4:d2:9d:e4:3e:ad:7a:38:fa:
a0:c1:3f:52:dd:73:9b:4f:39:aa:90:18:45:b8:aa:60:d4:fb:
39:7c:a8:7e:8e:63:fc:8e:86:51:44:c4:c3:53:ac:b2:c4:1e:
d8:e6:6f:c4:b4:ab:2b:2d:6c:c4:e0:bb:00:2c:50:b3:95:b2:
e7:0c:e0:8f:d2:bc:31:49:76:13:c0:f2:5d:59:5d:5b:7d:48:
0f:51:53:49:f2:97:69:71:63:b0:74:04:c8:96:55:8a:66:63:
df:b5:9c:25:8e:d3:a5:2f:9d:ca:74:19:ad:c2:2d:2a:5b:66:
14:6c:74:21:46:e2:5b:8d:0e:3b:28:f3:1c:ef:0a:7e:38:06:
75:eb:17:f1:51:c3:70:ff:0d:f9:c7:c0:77:94:ff:c4:98:41:
00:a6:fd:62:cb:b4:04:2c:1f:da:05:08:d3:1b:5c:03:a1:30:
bd:71:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:05 2026 by rpki-client