Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: XTEcGPP+he4jYatVyCqL3xiEg7l/PHhhdn6KcCtqHqA=
Subject key identifier: 67:24:26:BD:63:C7:4C:29:F8:40:EB:1E:A0:AE:93:9E:23:DD:32:10
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019CE6A3D792408C0DDEF691C46F276771CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 17F9
Signing time: Fri 13 Mar 2026 10:00:23 +0000
Manifest this update: Fri 13 Mar 2026 10:00:23 +0000
Manifest next update: Sat 14 Mar 2026 10:00:23 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: JNGP8VU77II0CH0UAeA2BGzgA263DcfxugFAG0uczrU=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:d7:92:40:8c:0d:de:f6:91:c4:6f:27:67:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Mar 13 10:00:23 2026 GMT
Not After : Mar 14 10:00:23 2026 GMT
Subject: CN=672426bd63c74c29f840eb1ea0ae939e23dd3210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:a6:e9:87:a4:f0:fa:91:67:ae:d3:cb:d2:
13:d5:a8:d1:48:81:26:f4:66:ad:d0:ec:b6:63:5c:
73:65:37:71:18:62:64:07:b4:57:d8:c4:07:60:c5:
9d:94:8a:ea:d0:aa:57:ff:10:c3:69:ad:e7:29:86:
27:1b:db:47:79:d0:22:40:fd:04:e2:07:9a:52:19:
41:cf:62:f1:c3:b0:f7:06:be:f3:a6:21:33:2b:d1:
b6:6c:cc:ee:96:f1:40:2f:28:5b:de:d1:30:4f:0b:
97:c3:f7:7e:52:c1:34:ca:c4:1d:91:2e:07:9a:84:
e9:67:7b:64:ef:d1:d8:68:ed:e4:b6:57:72:0e:79:
8a:28:e1:ec:9b:0e:2e:b0:8e:69:01:f8:4b:b7:9d:
20:33:b8:52:8f:d8:2d:7f:ce:bc:e7:32:a7:16:6f:
db:e0:e3:e9:b8:cf:35:97:58:9a:24:32:d6:58:3e:
7a:f7:a6:09:ef:69:07:d3:c9:32:e5:de:e4:ab:c3:
06:ff:35:de:6b:e7:74:44:f9:6b:b9:48:de:a8:12:
e5:f8:d3:68:08:8a:5a:85:36:3a:b8:1a:e8:aa:cc:
17:3b:10:b4:2d:0c:97:0d:62:eb:0b:da:d0:19:21:
c0:cc:61:82:d6:c0:6f:32:6d:a0:0d:54:ff:d9:e5:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:26:BD:63:C7:4C:29:F8:40:EB:1E:A0:AE:93:9E:23:DD:32:10
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:1c:1d:d6:f9:81:02:a7:f5:f9:eb:8f:82:9c:45:db:42:
8a:e2:7a:fd:a9:91:17:84:56:11:e9:36:2c:93:ec:79:aa:09:
eb:fb:08:c2:27:82:39:f6:af:8e:59:4a:aa:c1:69:08:22:f3:
0b:cb:4d:ac:31:f2:45:f0:24:9f:ee:26:f8:23:99:b2:f0:3b:
9a:10:65:00:b6:1b:d7:be:13:cc:6a:36:05:d5:10:e2:aa:d7:
be:5c:bf:0a:2a:9d:dc:f1:8f:17:6a:07:cb:ee:a0:7f:da:18:
b1:22:2c:f5:03:3d:3e:a5:aa:e0:0e:c3:09:ff:57:ca:45:ff:
86:dc:a3:84:03:3a:30:7d:59:67:9d:6a:fc:f0:c0:91:e7:48:
4b:9a:47:8b:85:7c:7e:d1:04:3e:ef:6c:92:ec:a9:d0:cc:83:
17:2e:ad:43:2a:af:2f:0b:fb:4a:d2:33:b0:ad:29:fd:dc:c6:
c8:83:54:02:67:65:f4:51:76:bd:38:b6:95:07:fe:a7:b5:e4:
8e:c1:5d:af:5d:ec:33:1f:5e:fd:b1:59:bb:c4:7e:e7:a3:31:
a3:35:14:63:c0:3d:d7:32:cf:14:63:1a:c4:fc:d3:17:2b:01:
19:69:d4:84:a6:ae:e8:26:3b:4c:99:2c:94:c3:a1:22:83:47:
af:a5:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:27:06 2026 by rpki-client