Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: RzoDSIGn0aLE2GvH0JHK4Ca9Jmt+vNzWnt0nGP5oKKk=
Subject key identifier: 7B:AF:D3:0D:1D:1A:91:AA:99:DC:EE:5E:69:A5:FA:D3:88:10:51:F9
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019D3865B13AA76785F1C5A38D27D378A595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0A8F
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: YjPfq8aDsFnPEgQ3ZwgkKTF0L5tqs+ve77Em11HDcrE=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b1:3a:a7:67:85:f1:c5:a3:8d:27:d3:78:a5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=7bafd30d1d1a91aa99dcee5e69a5fad3881051f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:84:a9:26:db:7b:2b:d4:d7:06:a4:08:40:
d2:c5:c0:d6:33:08:e6:e8:36:d0:9f:1e:03:da:56:
20:ff:58:d6:ee:90:5e:4e:54:db:95:5d:cd:d1:c8:
92:42:f9:fa:24:09:81:c0:93:4c:d6:c6:d1:3f:bd:
7b:e7:9f:0c:fe:27:02:55:24:cf:77:41:80:9d:6d:
39:9d:51:87:1b:54:a9:9e:ee:f6:0a:9b:4c:4e:ce:
d9:a9:b6:4b:90:66:61:bf:42:47:b3:5d:e7:b4:28:
f2:b7:b8:c2:26:33:b7:e6:c9:9a:13:09:e3:13:d6:
13:07:9a:e1:52:5e:e5:bb:14:b6:08:da:20:10:26:
b5:b3:fd:97:e5:b2:a8:d5:7a:4b:c0:2a:62:77:79:
9f:56:dc:51:79:57:0e:cb:28:61:b4:72:bf:c5:83:
37:f2:dc:b1:32:dc:d3:1f:33:a5:a9:a5:63:ff:95:
df:f2:ad:a7:a3:3f:57:1d:04:71:e5:4a:17:3c:f0:
29:69:2d:28:fe:32:7a:17:ca:13:5c:7f:ec:60:d9:
46:ae:b0:2a:6e:78:4b:f0:e6:e6:e7:85:67:5f:97:
3c:da:c4:e3:41:af:85:e3:b4:83:57:6b:58:00:fd:
2b:db:8a:ef:85:4f:cf:41:e9:c8:71:01:60:b3:3d:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:D3:0D:1D:1A:91:AA:99:DC:EE:5E:69:A5:FA:D3:88:10:51:F9
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:48:ba:12:60:55:86:29:48:3c:47:77:e5:d9:06:96:af:
18:02:2b:08:79:d9:94:ec:9b:8e:4a:f1:43:c3:01:5f:b0:32:
75:58:c3:6a:6a:d6:4e:c4:01:5b:94:4e:10:f9:55:59:b1:d8:
11:a3:ea:a7:b1:d9:cd:3e:38:c7:26:5b:1c:be:08:89:95:f0:
06:07:4a:0b:19:fb:73:25:47:e0:6b:e6:79:05:10:24:e4:dd:
b9:01:f2:0b:52:0d:c0:7c:ae:1f:59:52:c5:6f:7a:d7:ad:4e:
c9:af:27:b0:e7:78:92:89:9c:40:a9:f8:da:a9:15:9d:f3:54:
92:76:87:c0:db:8d:05:07:b8:cc:74:6b:57:42:cd:52:de:2e:
6f:58:57:47:06:58:67:2f:0d:de:00:9d:1b:88:d3:0b:33:0e:
41:35:2c:5f:99:6d:89:68:ba:24:59:a7:27:3c:c9:23:73:45:
d6:37:44:f8:61:bf:3d:fa:84:9d:3a:0d:06:91:7c:96:05:93:
3b:e7:9b:03:fc:41:58:8c:35:01:c8:f3:4d:e1:8c:ec:df:ad:
ca:d7:84:d8:c2:76:90:f3:34:64:62:9a:2b:3e:d1:82:34:ed:
1f:72:af:7f:b3:6d:23:49:27:7c:46:e9:db:ee:5e:83:82:fc:
53:80:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:44 2026 by rpki-client