Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: BFAP38v14ZPPcDVnTRSDJbVj9rFOvENPysf4wxOTEzE=
Subject key identifier: 2A:92:C5:FB:D7:01:E6:FE:04:E7:16:91:FF:73:B5:BA:49:5C:BB:CC
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019CE55AAEA265897A1B7AE76D9A336AD6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 045A
Signing time: Fri 13 Mar 2026 04:00:51 +0000
Manifest this update: Fri 13 Mar 2026 04:00:51 +0000
Manifest next update: Sat 14 Mar 2026 04:00:51 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: CEUe9pvzjc7AFgK0V3kxuoeDj4QKPEZJ8lp4xJpmVZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:ae:a2:65:89:7a:1b:7a:e7:6d:9a:33:6a:d6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Mar 13 04:00:51 2026 GMT
Not After : Mar 14 04:00:51 2026 GMT
Subject: CN=2a92c5fbd701e6fe04e71691ff73b5ba495cbbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:43:37:31:2c:a2:03:eb:f8:9f:8b:d5:d8:
72:ad:5e:79:24:91:29:f6:dd:28:5b:7f:99:95:07:
ae:4c:c4:3c:31:1f:82:10:0d:af:3e:98:91:6b:a9:
d0:69:11:84:89:ac:bd:2c:fa:93:72:69:1c:cb:3e:
4c:58:c1:a9:c2:4b:55:14:4d:36:52:65:57:cc:cf:
e6:d2:29:1c:72:f4:72:19:81:33:70:d2:d7:b2:a1:
f8:ce:f0:a7:71:72:2d:13:71:dd:4a:b8:fa:cc:7c:
b3:4b:65:f7:10:bc:58:8a:78:29:42:51:db:61:78:
7f:0b:17:07:48:11:18:4a:38:0c:43:10:73:29:60:
cc:35:06:9e:d6:bf:86:c4:4b:d8:31:97:81:ea:9b:
bb:0d:4c:04:a5:e3:62:47:f9:0d:2f:fe:ab:6e:13:
84:fc:4f:f3:17:84:86:62:49:00:a0:50:59:80:0a:
a1:7f:69:67:a9:e9:b5:be:40:ac:8e:f8:2c:ef:5e:
cf:3a:47:34:4c:ef:7e:84:ef:bd:2e:58:fe:81:7c:
d2:2b:5f:ce:35:60:bc:be:23:be:e4:2a:82:be:c2:
b6:36:fc:ef:e9:60:21:cc:16:a2:78:31:10:e4:b6:
41:dd:87:c9:1f:e8:10:6b:9c:02:e5:0c:fd:b9:9d:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:C5:FB:D7:01:E6:FE:04:E7:16:91:FF:73:B5:BA:49:5C:BB:CC
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b5:d8:d7:12:a4:3d:b6:35:56:6d:c4:3d:94:6a:3e:e9:6c:
e3:82:83:27:ba:99:06:06:f3:f8:71:f1:a6:ad:a7:da:6c:fe:
ee:8c:41:45:e7:f1:8a:c2:3b:53:5a:19:42:f4:1e:f9:b6:f2:
5d:7e:20:8f:a4:73:87:14:27:d8:d8:56:20:5f:a2:a9:68:76:
ef:45:a8:93:1e:c0:3a:0b:c1:a5:e7:78:0e:0f:fe:a3:1b:9c:
36:f9:48:c0:37:79:4e:4a:5c:1d:11:f6:bf:79:d5:ac:2e:02:
90:c7:7a:db:2a:31:ca:a2:d8:4f:b4:f1:23:b2:95:f0:6c:a7:
c0:17:6f:ac:ad:44:2f:db:59:9a:3c:a7:ae:e4:ba:da:be:af:
e1:59:db:7d:a1:ad:83:4b:6e:95:1c:05:4a:bb:bb:34:af:4f:
2c:97:4b:c6:39:94:ce:da:77:70:cf:db:e4:4e:90:5e:89:03:
3a:cd:ae:11:68:2d:6f:47:80:c7:63:a6:ce:b2:19:3d:eb:06:
43:5f:0a:16:80:bc:9a:09:5d:bd:cb:fb:4b:04:39:4f:a7:35:
c8:8a:f0:37:18:d1:50:6d:aa:ce:9d:91:a3:6c:af:b3:a9:1f:
f9:0b:68:fe:83:92:d3:00:ae:18:f4:62:7c:a1:1e:18:78:77:
d2:b4:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:40 2026 by rpki-client