Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: WoTCbWF8HSU1xkIHIKZKlV8SzGCwwQIKGa0k/Z+xwJE=
Subject key identifier: 21:47:A1:4E:6B:76:01:EC:2C:24:66:1F:0A:DC:2B:FD:CA:CC:00:AA
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019D390A4F5332F2045680716C876763F5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: x5zpc0EFnOgLjxG8cV5ykPtgX/38OOZ8gS0uOLEvR58=)
2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4f:53:32:f2:04:56:80:71:6c:87:67:63:f5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=2147a14e6b7601ec2c24661f0adc2bfdcacc00aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:fc:0c:59:3d:d6:3f:b6:db:47:85:96:c4:
73:20:0b:1b:ef:b7:45:0f:06:6a:65:e0:99:20:53:
0a:57:64:8a:ca:f2:28:7e:a2:89:28:92:af:2d:b7:
2d:7c:c2:6a:28:bb:af:a6:74:6c:95:88:55:5c:64:
e0:d9:f8:b2:05:bb:b9:d2:cd:89:f6:42:55:c2:31:
cd:41:77:c6:49:02:b3:9d:84:8c:37:de:34:28:a5:
4f:c0:7f:fe:14:a3:6f:c4:fc:16:5f:7a:16:3b:30:
5e:63:68:c9:00:89:32:d2:39:67:fe:ec:be:d0:ea:
50:ba:92:c2:a3:41:ff:8e:ae:06:58:d5:65:df:9f:
b8:8b:04:3a:87:44:f1:67:f2:12:39:eb:7f:e5:87:
2e:2d:96:be:db:2f:d6:5a:d1:83:a0:a3:26:b3:eb:
b3:29:3f:15:fb:b4:67:49:24:95:63:b0:31:1a:b3:
05:4d:af:9a:58:03:53:54:46:67:c6:ba:0e:f7:39:
07:35:79:0f:73:58:e9:af:50:30:d3:15:e9:80:c7:
57:90:e5:97:6c:34:a7:69:b5:e6:ca:72:ab:74:1e:
15:ee:ef:a6:68:24:b6:2a:82:8a:89:2e:99:5a:16:
77:31:4a:34:b8:26:fc:a4:33:4e:01:af:4f:cb:8b:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:47:A1:4E:6B:76:01:EC:2C:24:66:1F:0A:DC:2B:FD:CA:CC:00:AA
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:12:c7:29:de:73:2f:5d:ec:12:1f:81:4c:6c:e8:7e:38:
28:9c:a4:1f:76:3b:1c:25:07:75:65:b7:23:48:0f:87:f9:6f:
71:fb:20:6a:cb:bf:f8:53:71:0e:e5:4e:0a:04:c7:71:20:70:
e3:41:2e:42:b8:a9:ab:44:db:ab:05:79:69:76:8e:28:85:f0:
c9:c1:ab:88:4a:be:6f:a0:bd:9a:29:41:2d:1d:ba:18:db:bd:
58:78:b7:6c:d8:5f:1c:4a:ca:0d:34:b4:e4:8a:b2:51:1c:14:
d1:f8:2f:39:88:82:25:ae:77:07:f4:f2:20:0c:48:a6:c5:86:
af:96:f2:29:9c:9f:ed:75:ed:c3:27:b1:13:49:34:08:96:7c:
b4:23:72:15:03:8f:1a:7c:8d:3a:1e:75:5a:64:df:e7:00:26:
7c:81:b8:ab:51:3d:d2:37:0d:94:e0:39:15:f3:bd:88:f4:23:
8d:f9:51:e0:a3:43:d0:b6:8d:02:ce:42:7a:6f:ce:01:3c:86:
92:40:4a:17:e2:26:55:7e:d1:61:bd:55:13:45:dc:dc:a7:72:
01:59:e4:59:8f:af:19:e3:8c:e9:73:65:cd:6d:f1:3a:b8:15:
c4:04:df:a7:fe:b8:0a:7a:c8:ce:3a:e3:f0:c5:de:9e:91:bf:
ec:3e:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:25 2026 by rpki-client