Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: CxUZYENzglxV5Srrgz45BH5AHtxnyAqN8M5nsYvnDXY=
Subject key identifier: 34:16:35:29:12:28:D1:30:79:30:A6:DE:71:43:92:F4:C7:33:69:43
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 019D394074276B129160CFCEC3FA1F200F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: mnV5Bg3dtZ6hSCgGP6/zMicQD3ouKO3jF3mUvGF5hvM=)
2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:74:27:6b:12:91:60:cf:ce:c3:fa:1f:20:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=341635291228d1307930a6de714392f4c7336943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:8d:86:14:d1:4a:a1:98:d6:b5:d4:ab:ad:
d6:24:63:8e:6d:2c:c3:16:90:4e:10:94:c9:ea:98:
9f:9f:b2:16:00:39:36:2b:20:6e:87:28:d6:a1:c7:
ba:e8:5b:0e:33:e2:70:68:b1:0a:f8:2c:5f:bd:8e:
3c:9d:af:99:92:da:e0:c5:83:3e:fd:07:e1:08:6a:
43:d2:c2:a7:1b:72:9a:74:71:b7:dd:6d:91:30:25:
9c:ee:09:ef:81:6b:30:05:1c:0c:9e:b8:7d:59:57:
80:55:27:46:b6:c9:92:0d:e3:d7:3f:ce:6a:36:9b:
f0:13:5a:30:e0:c1:6e:83:ea:d3:9f:13:65:5f:08:
8d:be:f1:01:0f:8f:b7:06:2f:2d:35:df:71:1c:88:
60:58:ff:dd:fa:2a:2f:90:95:0c:ac:f1:f3:00:5e:
a2:7c:e7:9e:f6:3d:67:db:7e:00:82:ff:85:bb:78:
92:c5:5c:10:df:b3:d6:0c:71:4a:a3:86:21:70:a2:
d8:bc:44:1b:9a:02:5b:19:10:22:22:21:7f:51:4f:
32:93:85:ca:80:26:cf:22:37:08:ca:9a:0e:80:b0:
58:36:b6:ce:57:b9:0b:9a:f3:f6:1c:19:64:87:f6:
ad:2d:0e:ee:02:db:44:6f:c8:81:e2:2a:f5:a1:35:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:35:29:12:28:D1:30:79:30:A6:DE:71:43:92:F4:C7:33:69:43
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ea:74:8c:8b:93:56:0d:77:89:04:bd:d8:1e:c8:02:1b:ab:
f3:0a:0a:5c:8c:ad:a6:8f:f6:0d:4a:56:a9:cd:cd:dc:1a:7e:
81:ca:04:31:43:fd:37:b1:8b:49:cb:c1:40:c8:be:af:87:c6:
fe:cb:70:61:24:46:4c:87:d9:88:7c:29:e5:d2:36:53:a3:93:
85:c5:2a:d1:ee:c8:d3:b5:af:98:2b:40:39:08:e2:51:41:c8:
f3:59:0a:c3:45:49:89:ec:f8:9c:f5:75:f9:42:77:58:c3:30:
eb:69:16:47:55:09:27:be:cb:99:be:94:0b:78:2f:f3:62:64:
70:a5:0b:5d:48:7f:97:89:bd:b7:38:d4:7e:54:06:f2:ad:e6:
4a:7b:8e:94:af:65:d0:1b:2f:6c:24:2d:4c:26:59:6d:9d:0b:
0f:01:e1:8c:99:50:15:19:7a:9b:78:dd:53:69:72:f8:44:4a:
cf:b1:34:45:56:58:b5:1b:16:5a:7d:ec:d8:f1:93:78:ad:29:
43:d1:9a:73:a4:d6:34:83:5d:c7:92:45:43:5d:ba:58:8e:3e:
2c:e0:43:d6:cb:a6:a5:07:8b:50:37:f5:09:4c:df:25:b9:c8:
8b:dc:be:65:76:ab:6e:28:c7:74:4b:0d:32:67:bf:d3:8e:b8:
88:0a:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:41 2026 by rpki-client