Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: PBLjlYZmcaGY8WUj7dVTu0h4EKvhk0g6EcuWQg0YRl8=
Subject key identifier: B4:A4:0B:63:46:0E:91:17:35:E6:20:E4:20:50:A0:4B:6B:BF:EE:E2
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019D389C1F247B25E54FCDED168789103151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 12A3
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: ciDDC9O4oVydwIAvK2KrYPxE4RdYOqSBWVWiBJvQ+bU=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:24:7b:25:e5:4f:cd:ed:16:87:89:10:31:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=b4a40b63460e911735e620e42050a04b6bbfeee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:d4:8c:00:b2:74:dc:87:3b:22:41:1b:f3:
79:3e:9e:98:04:aa:71:94:aa:e2:96:03:67:ed:95:
47:87:78:fc:9c:57:0c:63:02:66:69:76:c3:ff:12:
fa:65:0b:c1:d5:c7:90:37:44:3e:da:d6:97:09:4a:
fe:5c:7e:fa:15:c2:6a:48:a1:7a:5c:a4:ad:cf:dc:
03:13:66:94:6e:65:a3:fd:af:d5:1e:55:2d:af:f1:
58:a6:64:b0:73:24:44:92:1e:c3:8d:6e:a3:31:58:
12:b6:81:ff:06:cc:c6:2c:b6:3d:36:30:1c:06:f4:
ee:a9:ee:76:59:e5:21:85:37:25:37:4e:39:37:8f:
69:a2:71:26:f0:11:8c:b1:26:34:03:86:6d:8c:28:
f9:3c:b9:f6:59:f9:c2:cb:79:5c:9c:e9:22:e2:10:
72:97:c0:c2:c3:6a:29:1f:33:72:4c:34:dc:af:7d:
14:bb:54:bf:a2:02:7d:10:86:a4:64:d5:68:bd:6a:
09:f5:83:e7:bf:11:d4:86:9d:69:b2:82:b3:c2:fb:
17:da:f2:af:ef:a9:34:96:9e:42:64:dd:88:54:46:
20:e8:48:6d:4c:ad:66:54:b0:2b:0f:a0:e2:3c:8c:
4c:32:59:fb:bf:9a:36:af:db:c3:12:3d:65:3d:8b:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:0B:63:46:0E:91:17:35:E6:20:E4:20:50:A0:4B:6B:BF:EE:E2
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:76:a9:23:e7:b0:a9:fd:6d:5b:cf:c1:e4:1a:42:1d:47:
36:25:97:77:f1:00:24:c8:86:c6:f0:4e:09:a0:45:db:35:4d:
b5:4b:8b:96:92:09:5e:fc:f9:5a:43:af:73:90:39:db:6e:8d:
2d:cf:64:60:38:35:43:3e:2e:23:9f:ef:e1:a9:15:40:cb:8e:
1a:41:0f:87:93:02:c1:f9:34:f8:fa:3f:53:93:29:8b:7b:83:
04:bf:b0:f7:78:13:ba:c2:c4:71:b2:5f:38:16:f6:19:a6:d3:
e2:8c:16:c0:ba:2f:d5:2b:a2:e1:cd:e0:c3:eb:08:0e:91:fa:
9d:fa:cf:1c:af:81:c5:6a:43:37:bc:a5:7e:8b:67:23:d8:7a:
c3:d0:06:e7:27:96:be:b5:57:9d:59:fd:a5:ef:81:23:94:66:
55:20:05:ea:f7:d7:06:2d:3d:b3:4c:46:a7:9d:84:5a:c7:ff:
90:2d:16:9b:06:06:b5:ee:64:20:b2:5b:5a:96:01:74:ba:d7:
a3:33:a2:61:1e:17:f6:2e:0d:23:10:e2:9c:3e:62:6d:89:aa:
66:bb:7f:4d:20:bc:cd:35:a6:53:9f:82:be:98:2c:14:44:c0:
0f:ca:85:5e:2a:3c:47:f9:84:30:27:57:0e:23:0e:ea:3b:be:
31:11:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client