Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: hvdyvoZhCnHzrTPQm6ndK/S4XdAd0477UeMT1NTZb+o=
Subject key identifier: D1:8D:13:F0:98:1A:87:60:3B:A0:52:4D:3D:8B:69:9F:BA:BC:E4:8D
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019D37C0AE35FB5E294E09A061144EE119E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0C8F
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: dPVGccO02P09hfzEkenvXR8lD2Cjb/yilFqzrUL14ig=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ae:35:fb:5e:29:4e:09:a0:61:14:4e:e1:19:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=d18d13f0981a87603ba0524d3d8b699fbabce48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:bd:d4:38:0c:01:00:3b:c2:17:4b:2e:92:
40:d7:c2:f8:eb:92:fb:6a:ce:85:34:96:6e:88:b4:
0c:ce:5f:7c:ee:76:4b:0c:ab:0a:ee:28:e6:48:d7:
b0:a2:29:df:2d:63:04:8a:95:20:fd:a2:0f:c8:92:
a1:47:9a:a7:e1:ad:82:03:49:3f:56:57:81:30:43:
80:a2:ce:88:c9:aa:b2:d1:59:bc:9f:0d:7a:76:ad:
46:9e:66:3d:6a:25:28:ea:c1:13:79:4c:cc:36:64:
86:5c:d3:31:ad:37:12:f6:13:4d:ab:7f:33:ff:21:
2a:66:a5:5e:63:f6:07:33:8c:f9:7f:45:9d:3b:13:
fc:a2:41:a6:ca:15:ba:3a:44:05:39:98:af:82:b1:
97:33:16:5d:e9:0b:91:08:6b:bc:fa:c0:af:cc:23:
c7:41:fd:d4:92:20:60:cb:d7:5f:fe:af:b0:75:78:
f1:fc:03:84:56:0e:4a:c5:7a:e1:67:bf:0c:27:a6:
80:56:bf:7c:db:d9:78:26:7d:9b:b2:68:86:76:64:
56:95:8d:b4:e9:46:13:84:02:a3:23:1a:7c:c7:71:
a1:ee:4c:d5:09:e6:9c:fb:96:a7:8c:63:5b:4b:27:
c0:87:74:89:fd:33:90:e5:b3:4a:c1:7a:7d:f4:cb:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:13:F0:98:1A:87:60:3B:A0:52:4D:3D:8B:69:9F:BA:BC:E4:8D
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:18:79:e9:8b:bf:71:c4:c4:58:de:82:38:49:d3:3e:b8:e6:
83:89:63:83:58:90:d6:3b:c4:74:8a:38:fa:d6:13:4a:c9:39:
78:86:07:22:29:be:62:ad:35:06:4a:e4:2c:3e:ff:68:5d:32:
c9:8d:40:0f:17:4b:f0:f0:71:78:ec:15:67:be:6c:70:fe:2c:
50:d0:5c:5c:cc:88:d5:28:e0:f5:eb:38:e8:7a:b4:45:98:cb:
b5:3b:6c:f2:99:ba:9a:24:a7:3d:d1:ef:80:ba:91:32:6e:70:
87:87:68:63:f1:84:98:c5:78:15:93:79:b8:5f:d2:ea:7b:29:
4b:50:ec:54:b0:c1:74:f3:04:79:e7:81:09:1d:18:02:a5:da:
93:8f:3d:04:c2:28:34:70:6b:ce:4d:0a:f3:29:e8:f3:96:a0:
79:e6:a0:71:0a:07:63:52:a3:11:d9:bc:76:7f:53:c1:31:4c:
a7:b1:f0:df:7b:f0:46:af:07:a4:ec:96:11:2d:55:85:be:44:
8e:11:d4:f8:d7:3a:65:dc:99:e7:a9:f4:fa:9d:24:1f:55:50:
5e:bd:35:28:14:ae:73:21:2f:4a:fa:83:91:71:67:90:57:0b:
49:24:36:ab:af:08:f1:65:d7:cd:87:ab:22:ab:3b:a2:e8:06:
9d:e5:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:49 2026 by rpki-client