Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: 9CP4UwhOYp9+fmAGWj5wu0KODY97SmuibfloT0R89Uo=
Subject key identifier: CA:4F:01:7D:88:CA:58:5A:BF:11:FA:B7:69:03:0A:4F:7E:93:ED:E7
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019D3941938EEEEC12372D8026738D782848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0F88
Signing time: Sun 29 Mar 2026 11:01:32 +0000
Manifest this update: Sun 29 Mar 2026 11:01:32 +0000
Manifest next update: Mon 30 Mar 2026 11:01:32 +0000
Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: oqL1UF2AuGYtj9LMvkaFid93Gnq0StR64zZ4nTT1oQY=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:93:8e:ee:ec:12:37:2d:80:26:73:8d:78:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Mar 29 11:01:32 2026 GMT
Not After : Mar 30 11:01:32 2026 GMT
Subject: CN=ca4f017d88ca585abf11fab769030a4f7e93ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:35:ee:47:a8:97:b4:64:cd:2c:b0:68:80:
72:a2:f4:70:7f:36:fa:99:ff:67:88:e9:3b:f8:a8:
f2:e3:93:e5:35:b2:00:02:58:54:48:d5:d3:fa:cb:
93:ca:66:f3:5a:98:46:8a:93:2a:8c:4a:a4:5a:61:
77:3a:fb:6c:06:6d:23:91:50:1e:64:be:98:2e:b0:
a0:6c:5c:62:a7:6c:60:e1:9f:6e:64:8e:0e:24:46:
b5:5e:61:56:67:c8:59:f1:60:cd:90:7a:1e:c3:1c:
fa:41:e5:ba:91:cb:8e:8d:6f:b5:69:e9:3c:b7:bb:
73:59:6d:d2:bc:c3:df:b4:28:ae:17:b2:7f:33:f0:
e3:d8:7f:0f:e0:66:35:86:38:35:7f:6b:07:89:d9:
3a:85:e3:43:1e:75:85:f1:02:d9:9b:4e:28:1c:b6:
0a:7f:e2:b0:95:fd:26:52:ee:98:77:22:ef:b3:84:
1e:2b:1e:3f:e9:c3:9e:7f:9d:5b:98:c1:9f:cc:37:
32:4b:fb:a0:fc:b7:7b:4f:ec:85:29:15:9b:4f:8f:
0f:e7:43:35:76:04:eb:8b:72:43:e5:e6:f2:cf:c7:
c3:e0:6f:ca:56:7c:1f:dc:d5:57:ef:bc:b2:30:7b:
bd:f5:71:45:2d:fb:00:16:08:4e:61:ed:ac:5e:dc:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:01:7D:88:CA:58:5A:BF:11:FA:B7:69:03:0A:4F:7E:93:ED:E7
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e0:9e:eb:28:43:9c:91:00:de:6b:d9:94:3f:7f:61:04:9c:
e8:69:e0:7d:ed:e6:aa:17:59:e7:41:49:66:5b:1e:16:f8:35:
85:d7:c3:ce:36:de:44:2c:54:17:8a:0b:ca:ea:a9:b2:51:f5:
c4:98:75:96:b5:44:0b:1b:73:db:d3:2e:15:56:37:dd:ce:04:
96:03:bc:a4:f0:72:42:5c:3c:43:6f:cd:61:6a:1e:c4:c5:8b:
c8:34:33:e5:a7:8f:93:92:2e:93:fa:29:97:c7:c1:01:03:c6:
6c:44:49:97:81:7b:3f:9e:11:7b:76:2d:60:50:db:e0:4b:03:
3c:ef:31:14:f2:57:87:b9:2d:7c:18:29:e8:50:a6:5b:cd:0c:
e7:cf:b4:44:fd:9f:de:ec:b9:45:7c:c1:a1:8c:70:05:bb:2d:
56:3e:c0:e2:c0:79:70:0e:02:a9:96:8c:31:55:a7:00:f3:24:
20:58:1f:61:a8:1a:64:05:38:bc:55:3d:3b:93:5d:27:85:3d:
a0:08:29:fb:8f:27:4f:55:cf:d9:8c:1e:07:a1:d7:41:cf:4a:
8b:f0:80:e0:e9:9e:1d:1d:ee:50:0d:24:21:ab:90:83:c5:eb:
90:ab:5f:17:a8:d9:12:19:92:77:0c:ed:79:39:89:62:08:8c:
77:67:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:07 2026 by rpki-client