Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: wZFDFoAM42+rC7uQUY8gKl7QjP5VX/ua2vqNaAK6pks=
Subject key identifier: EE:FC:79:8F:FD:42:F5:F2:D5:84:AF:7E:E1:27:64:DB:95:5E:E6:B4
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019D382E000FE67139DBF6F37BE995C028E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0E80
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: sLRjZF426n9n92tiNPHFJY8blYyr11cUhYLxtN/uJco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:00:0f:e6:71:39:db:f6:f3:7b:e9:95:c0:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=eefc798ffd42f5f2d584af7ee12764db955ee6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:74:78:b2:ee:bc:0e:01:e6:75:22:a1:48:
14:ab:07:14:27:43:2d:5f:57:6a:b9:75:8b:25:58:
28:c0:76:65:87:13:ed:ab:e1:35:2d:d5:dd:54:d4:
7f:e3:ce:ac:ec:79:ea:2e:bd:f1:d7:bf:5a:7c:91:
e0:07:0b:c1:f8:bb:9d:30:54:21:c7:0a:6c:48:95:
0d:21:6c:6a:6f:d3:d9:02:21:3f:b2:4c:a4:38:21:
56:37:c3:df:6e:aa:38:3c:bc:64:a1:78:f6:00:04:
d7:04:70:56:30:8a:25:13:b9:fe:98:04:f0:47:c3:
ad:4b:70:2b:91:cc:1a:47:22:4d:1c:69:9c:af:cb:
da:fc:9c:d2:54:27:65:a3:dd:53:30:07:04:b7:2a:
e8:14:0b:e3:d6:29:39:7c:9c:20:a4:8f:35:3d:e8:
36:c9:4a:8e:2c:46:d5:84:f1:0c:fa:52:16:aa:b6:
7a:53:b6:2f:c9:b5:f1:32:52:a4:76:12:c0:45:25:
3a:66:b3:cb:79:d3:81:ad:90:1c:35:d4:53:e4:09:
89:c0:10:2e:f9:30:2e:e4:e9:9f:5e:f3:2d:33:e6:
07:f4:a8:55:5d:ce:f2:a5:ca:69:25:34:08:ff:0b:
f9:11:b0:e5:de:62:4d:f8:20:be:c3:d3:4b:f4:cb:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:79:8F:FD:42:F5:F2:D5:84:AF:7E:E1:27:64:DB:95:5E:E6:B4
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6e:4a:ab:f1:15:66:02:b8:d4:25:d1:4c:4e:b9:7d:fb:d7:
c6:dc:13:cc:82:48:53:84:f8:b9:35:08:8f:26:d3:df:38:03:
d0:09:ac:d1:0f:89:39:29:17:08:e6:03:40:55:ce:c0:17:5e:
be:46:28:75:1d:fa:51:82:12:d2:81:c1:2c:24:b1:95:83:2b:
94:4f:ad:0a:32:56:a5:b0:6c:6f:7b:56:a3:c5:1a:de:37:6d:
3b:1b:23:3f:4f:1c:7e:90:1b:63:28:06:9b:be:40:e4:86:f9:
7c:bb:a8:df:e8:b2:34:4a:c6:5e:bf:f4:47:4b:65:f9:46:41:
c5:d7:70:98:63:11:95:8c:1e:1f:f3:ad:03:b4:49:13:c7:dd:
19:50:e7:ca:1d:9d:70:51:23:4b:03:f4:2d:dc:22:b5:62:ce:
5c:c7:7d:8c:a6:86:69:1e:3e:20:e6:5c:b8:a4:30:6c:56:f0:
d6:42:48:7a:c7:21:23:74:c2:79:f1:78:97:bc:9d:81:00:df:
03:c1:62:bd:9b:e4:f3:47:ad:ab:5d:ad:9c:59:8a:2a:23:9c:
94:ea:e2:fa:b2:34:c3:e7:ea:ed:e9:b3:55:0b:5d:b4:8f:26:
77:f8:28:f4:12:2a:f4:20:cd:5a:f2:91:0a:af:ab:4a:cf:77:
88:61:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client