Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: quaba/loALQQ9IfKwBfMYTeivWJTpU+o7g4rBt2LISs=
Subject key identifier: 40:3A:42:4E:59:89:58:6D:BB:90:2C:6B:B1:F2:AE:4F:B8:B7:03:F6
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019D39AE63C30AB7F9467670BE1829FB32E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 01E6
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: Uj2qqP+LTa230wbHRaya+lamXp9dNQNWzv79lykGjqE=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:63:c3:0a:b7:f9:46:76:70:be:18:29:fb:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=403a424e5989586dbb902c6bb1f2ae4fb8b703f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:36:e8:dc:97:bc:52:a0:47:b6:7f:ca:08:
16:24:9e:07:e8:ff:4e:71:3a:91:e4:ce:44:68:3a:
13:7b:f9:2c:c7:83:f9:6d:76:f1:51:2c:e0:b8:70:
1e:08:15:1c:c8:da:91:7e:79:ed:1a:24:bb:dd:b0:
a0:37:8f:b1:c2:9a:5e:66:1c:b5:c7:6f:e8:90:45:
af:67:a3:04:37:5b:fb:10:88:92:04:db:74:c4:1a:
cc:14:e1:f9:70:88:aa:89:7c:0e:cf:6e:e1:a6:fa:
cd:84:12:cb:ec:e3:ff:cf:2a:35:b8:41:30:3a:59:
cb:17:3e:86:4e:84:ca:38:04:45:66:9d:3b:d8:23:
8b:fc:f2:d0:6b:b5:e9:0d:6d:4d:f2:71:e4:b3:08:
20:5e:95:9b:49:cb:ba:4b:7b:2c:9a:ff:39:9d:88:
13:39:0a:fc:b1:21:a6:5c:32:96:3d:ef:54:1c:10:
71:7f:f2:21:56:de:24:f8:c5:01:0b:ac:9b:4d:e6:
9d:42:09:a1:6f:57:0e:34:ec:b8:18:fe:78:ed:38:
56:5f:c4:d1:3b:a3:7d:93:8f:14:5a:bf:67:4d:ed:
43:4c:c0:1c:16:50:74:4f:b1:1d:93:c2:b3:3d:62:
0d:f4:e3:5a:07:78:ff:9c:0f:c3:b6:00:b0:fb:40:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:42:4E:59:89:58:6D:BB:90:2C:6B:B1:F2:AE:4F:B8:B7:03:F6
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:2f:c2:49:1b:35:46:05:a2:c9:03:d6:d3:79:17:68:a2:
1a:72:8f:cf:2a:41:ce:e3:46:1d:a0:b5:3d:d6:e4:cc:60:9e:
0b:10:a5:91:fa:86:57:24:4c:ab:aa:b0:53:ea:7d:d1:d2:6b:
4a:bd:4e:94:dc:91:ed:4e:15:aa:06:74:62:15:2c:a8:cb:45:
00:00:63:6d:82:8b:d1:3d:da:a2:d4:d5:51:8b:56:67:88:3f:
f9:fe:f7:be:02:53:e4:47:9d:24:ba:f9:15:30:f1:0f:96:df:
67:21:f2:8a:0a:9f:93:37:9e:d9:52:68:ca:d4:96:69:e4:b8:
bd:09:46:5c:a1:5e:49:84:7f:16:9f:dd:9d:28:d6:46:d7:88:
b1:d3:74:78:1a:20:b3:e5:15:47:f3:2d:04:22:9d:26:58:20:
ed:98:65:40:00:ea:22:57:3a:94:16:b9:2c:c9:b3:bd:1c:e4:
9f:80:5a:a7:13:f7:63:b7:94:2f:1e:7e:57:02:be:7a:8d:d6:
64:98:e1:b0:c4:3b:89:82:9e:26:f4:13:16:62:66:c6:74:90:
8c:ea:57:5f:6a:90:ec:42:e9:7a:65:58:71:d9:96:a0:5b:8c:
b2:5a:29:27:e9:19:09:0e:65:92:03:6d:6b:78:9c:17:80:07:
fd:50:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:03 2026 by rpki-client