Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: J1d9EHyUpd5I1PN92UxiO+HyA9DVo3M/ZruDG6gv7QA=
Subject key identifier: 0F:6D:74:4A:56:50:93:42:F5:8B:7B:C4:DC:14:17:0F:B8:39:60:9A
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019D3909E0E68903344EF2F80392C51BE5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: oCFQ+IhphdeoReZD4qSUJcSdGblbEbGA8vQ0zdATsNY=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e0:e6:89:03:34:4e:f2:f8:03:92:c5:1b:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=0f6d744a56509342f58b7bc4dc14170fb839609a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:a2:99:29:cc:e2:94:cf:e6:9a:87:5d:46:
1d:99:92:20:de:db:c0:67:f9:a9:e3:40:7d:52:ca:
d4:e1:be:41:af:05:ad:90:5b:4d:c9:78:7a:3c:37:
62:c6:58:15:52:0f:39:c6:f6:e7:97:15:9b:eb:96:
5b:0e:b6:4e:df:fa:3e:ac:20:a9:e4:f4:38:79:ef:
92:6a:fb:53:6b:d6:0e:da:51:8f:86:10:1c:24:d5:
5c:60:21:a1:5d:91:32:d5:6c:49:29:66:59:a8:7d:
7e:9a:57:4b:82:95:a5:a5:a4:a0:63:0c:ea:76:52:
5d:bc:da:db:3e:21:b7:a3:fd:6a:9d:9b:95:e2:72:
70:8a:2b:b5:3e:a9:20:2f:73:a6:ab:b8:8a:9b:11:
b2:5c:b9:d6:af:85:ea:28:8e:55:af:7b:78:69:2b:
1a:09:7d:1f:fc:5b:fe:0b:a7:f4:2d:bc:1d:26:cb:
b3:51:c2:69:f9:35:7c:68:8c:0f:77:67:45:71:f9:
52:20:17:ed:db:a8:c7:db:f0:82:d2:cf:e2:3e:7b:
d8:76:85:7a:c8:e7:76:85:57:7b:11:8f:05:38:4d:
f9:40:67:8c:c6:9e:dd:d7:1e:9a:c3:73:02:48:65:
c5:1e:8c:9d:05:2d:63:47:c9:1f:26:d9:1e:33:4f:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:74:4A:56:50:93:42:F5:8B:7B:C4:DC:14:17:0F:B8:39:60:9A
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ca:38:17:a3:eb:de:55:bc:15:89:20:20:b2:ac:56:0c:7f:
81:3e:d3:ec:22:36:6f:bf:01:28:7a:fa:88:ad:6a:63:46:87:
40:a0:dd:6a:8c:fd:f4:42:07:03:88:a5:58:e6:54:16:b6:7b:
39:69:63:91:70:01:e0:81:18:7c:f9:68:bd:67:2a:e6:25:23:
18:32:41:e2:c7:22:c2:6c:4f:d3:eb:b4:4c:7a:4f:33:78:25:
bd:fb:f8:02:f7:ce:0c:07:63:3f:51:37:d7:87:f2:8a:1e:d2:
df:82:7d:ad:5a:ed:a5:51:ab:22:bb:ae:3b:e1:28:23:5a:7a:
bc:07:b6:52:0f:62:33:56:71:9b:13:02:5e:22:59:bc:7f:08:
56:da:52:25:e7:b6:ff:a5:18:0b:99:83:89:d5:20:3f:eb:22:
02:77:3c:a8:11:69:88:5c:f2:5c:2b:d3:2e:bf:8e:eb:8d:33:
82:f7:22:eb:db:a4:9b:4d:90:7c:4f:30:74:45:8a:b8:08:e8:
7d:62:fc:04:26:f4:4c:11:9e:4e:ce:5a:ec:38:dd:f7:e3:43:
11:16:49:6c:79:b6:db:c8:27:73:2f:26:67:86:b2:bd:b7:c5:
24:ee:8d:27:b3:75:70:c9:7d:c4:19:13:06:b9:d6:9e:b4:d9:
36:05:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:46 2026 by rpki-client