Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: Go+T/N0hX+gCYQrUo2EZw2/W6rAqjPS8maB5nJwG5sU=
Subject key identifier: 52:36:84:BA:A8:BA:53:3A:5D:B3:23:7C:8C:AE:98:B5:2F:17:0F:6F
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019D397796EC44CBDE2DAD0C402B5E7EE142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0CE9
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 7HYHRC0OnBiL0mN67n682STh3Is6D3Lf47SwQso2QYw=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:96:ec:44:cb:de:2d:ad:0c:40:2b:5e:7e:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=523684baa8ba533a5db3237c8cae98b52f170f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:a3:84:6b:2e:3d:76:9e:70:14:2e:a2:15:
d7:1c:f2:a4:53:c1:f9:8d:2d:f3:87:1a:7b:02:23:
91:df:52:59:56:48:a4:01:14:a5:05:02:b8:d2:e9:
5b:79:a5:e9:e5:7c:69:96:4e:1b:d4:6d:e2:00:b6:
2d:26:9d:31:4c:37:a8:68:f2:32:a0:a3:01:41:2b:
d5:26:30:d0:e3:3a:27:79:60:c6:f6:f1:e1:63:6b:
f8:8e:04:ca:75:9e:ae:bd:7c:7c:76:2b:01:5f:91:
38:e2:5f:05:72:93:83:f9:e7:3b:85:08:04:ad:29:
1a:65:4c:14:11:14:f3:c1:37:dc:c7:e7:1b:7f:42:
93:49:10:e1:79:9c:2b:da:c3:2f:e1:c8:72:f3:d8:
ab:50:22:dc:65:21:98:6b:12:48:2a:22:95:c2:51:
89:1c:11:7e:f8:7d:30:cc:a1:76:50:da:4d:e6:82:
5d:4c:a4:ba:59:7e:61:c6:e2:fa:0f:91:23:d2:5a:
2b:03:d8:81:bc:38:a8:5a:d2:d1:11:e0:12:2a:7f:
01:9f:85:a8:94:74:8c:90:e0:77:a1:3f:cc:16:f6:
ad:4a:27:f7:32:c0:3b:51:65:94:77:21:14:c5:42:
81:3a:e6:7e:1a:2f:8d:3c:2e:21:d0:98:8a:e2:9d:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:84:BA:A8:BA:53:3A:5D:B3:23:7C:8C:AE:98:B5:2F:17:0F:6F
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:72:3c:11:c6:11:72:0c:f1:ef:3c:40:c8:c8:78:35:50:
83:89:db:c0:f4:b8:e6:10:4b:cb:54:f4:48:9d:36:66:9f:f4:
39:41:58:6b:b6:5c:fd:56:13:13:52:65:c7:7f:24:d9:13:7a:
13:36:e7:71:6d:7c:77:52:fc:1d:2d:e5:cb:63:2b:b2:90:4c:
c7:71:fa:7f:96:80:c0:76:d5:09:57:a9:f7:36:fb:e7:2c:dd:
d9:5a:bf:ec:67:39:91:fa:13:c3:fe:21:bd:53:91:54:67:30:
3e:9e:df:96:18:25:14:74:17:4a:a8:38:f6:e9:3c:3a:dc:72:
21:ff:fc:3b:c4:ca:79:cf:d7:12:d0:6a:21:77:95:4c:62:4d:
64:78:77:ef:dd:2c:e6:23:bb:f9:91:58:79:b7:8e:92:aa:db:
6d:94:80:2c:dc:15:40:b9:7c:c8:2f:5d:48:27:c5:b9:f0:7f:
9c:15:9c:76:66:7a:c8:b8:6c:be:2a:7b:e5:67:ed:ce:a5:32:
fa:5d:03:0e:73:c7:39:4a:76:75:fb:b7:12:8b:a1:8f:21:f9:
5b:e9:83:d2:50:d7:4a:9b:60:32:fe:db:1f:b9:93:4d:1e:e9:
fa:92:0a:0d:32:c7:d4:47:67:d7:bd:67:85:81:79:e2:51:5b:
46:eb:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:36 2026 by rpki-client