Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: yrf9rGBtwNtSGTU407yjP5PIf9lwc32bm3h85HQggPg=
Subject key identifier: 22:18:98:5D:7D:D6:A9:71:05:C4:FA:01:DA:5A:4F:4E:96:0B:33:BC
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019CE523665376AED5F02C8E1366AD9E19CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 03C7
Signing time: Fri 13 Mar 2026 03:00:28 +0000
Manifest this update: Fri 13 Mar 2026 03:00:28 +0000
Manifest next update: Sat 14 Mar 2026 03:00:28 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: e6WwUXBIj/pgQrKvFOHLnzE9ZQUYzBmXlyQfhQfc04k=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:66:53:76:ae:d5:f0:2c:8e:13:66:ad:9e:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Mar 13 03:00:28 2026 GMT
Not After : Mar 14 03:00:28 2026 GMT
Subject: CN=2218985d7dd6a97105c4fa01da5a4f4e960b33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:d6:c0:70:22:a4:7b:9b:6b:cb:63:05:6c:
d8:06:62:dd:bf:1e:ce:a9:67:a7:16:84:4d:db:0b:
52:50:3f:bd:4e:fe:4c:cb:82:87:60:2d:bd:14:2d:
19:a2:60:07:51:27:13:65:45:e6:25:6d:06:f1:8d:
23:20:4c:e7:cc:52:bf:0f:18:88:f5:aa:8c:70:8a:
f4:da:68:c4:c7:a9:e5:97:07:9c:d7:17:78:a3:69:
f6:7b:48:ec:38:4c:01:20:d4:c6:4a:57:5f:95:0f:
48:ac:11:f4:8f:17:56:3d:7d:34:ce:81:92:20:17:
be:c7:0b:c3:98:5c:f7:ab:86:10:2f:fb:a8:00:e7:
ab:9e:fe:da:96:f0:b9:f5:df:fa:34:a2:30:32:6a:
41:8e:0f:48:b7:d2:21:e6:58:b2:55:32:cd:87:6f:
f7:b5:bb:dc:6e:7a:b3:01:77:c3:0a:91:c3:dc:ee:
ea:27:44:46:d5:df:b0:e0:d9:2f:c6:41:79:ab:bf:
3d:10:f2:00:75:ec:01:0a:ab:9e:3e:a2:42:e4:c1:
1d:5a:07:4b:4d:60:5c:f7:96:82:42:ef:df:9a:e4:
98:30:e2:93:e6:56:1a:a3:49:5d:43:31:1c:f2:83:
e4:6f:1f:93:dd:51:10:fd:2f:a2:d2:6b:d0:c2:49:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:98:5D:7D:D6:A9:71:05:C4:FA:01:DA:5A:4F:4E:96:0B:33:BC
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:c9:03:61:a4:32:f0:59:40:8b:30:02:ef:39:37:bd:9c:
f8:a1:b7:f3:cb:cb:e6:25:d5:81:f4:30:5e:dd:af:5f:14:3a:
99:60:82:86:fb:a3:7b:74:e3:81:73:a8:12:11:2c:ae:37:f1:
de:2a:39:e5:c0:c1:e6:d8:b8:87:92:66:cc:9b:e4:ce:f1:1f:
bb:c5:c7:36:80:ca:a2:df:88:98:1d:d4:f7:b2:aa:9f:68:90:
da:ff:ca:38:e9:b6:56:13:15:f8:60:98:41:a9:d5:77:3d:25:
32:98:31:7f:94:35:d8:0f:29:3b:2b:3f:8d:b0:8d:ce:b6:67:
c0:83:44:3d:7e:8d:00:93:ce:5f:28:0d:76:79:c2:9b:1f:55:
92:34:41:cd:34:23:b8:d2:92:0c:fc:a2:07:52:91:3f:93:1c:
6d:ea:3c:65:cd:08:b8:20:e1:82:78:55:47:fe:3f:7f:8d:f4:
51:0f:8d:a5:fb:08:02:49:78:ef:61:13:1a:f5:12:be:fd:b8:
82:3b:09:06:48:e6:b2:b8:71:66:2a:70:5c:69:48:ac:87:0f:
51:2b:2d:94:e6:73:ba:08:84:d3:4a:6d:98:a8:78:23:a5:8e:
ef:8d:38:e1:19:94:cd:21:e6:04:8f:25:4f:2e:61:9f:d2:48:
7a:0c:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:25 2026 by rpki-client