Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: kl7z9yZfokygFoJ/pC5VfZfEsz5uq5r1YQijKdNrP2w=
Subject key identifier: 00:DE:34:30:7B:0A:23:2A:5D:DA:F0:86:FC:BB:47:EE:14:AE:69:33
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019CE4113F325F8CCD264208278DF7E2B8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 030E
Signing time: Thu 12 Mar 2026 22:01:01 +0000
Manifest this update: Thu 12 Mar 2026 22:01:01 +0000
Manifest next update: Fri 13 Mar 2026 22:01:01 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 6/V+g1V+nd4hQh0SmpDVL7dpaOe70j0U06JkeFYkJgQ=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:3f:32:5f:8c:cd:26:42:08:27:8d:f7:e2:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Mar 12 22:01:01 2026 GMT
Not After : Mar 13 22:01:01 2026 GMT
Subject: CN=00de34307b0a232a5ddaf086fcbb47ee14ae6933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:56:e7:f8:21:d6:12:83:c4:a0:5b:f3:98:
f6:b1:75:75:10:1a:39:ab:61:f9:cf:db:a2:79:80:
1b:5d:d2:1b:2c:b4:3e:ea:ad:47:0b:bb:fb:cd:f5:
d0:91:6d:15:94:d3:76:ac:3f:48:fa:84:cc:4f:17:
ea:3d:23:7e:fa:1f:e2:33:32:e8:47:48:b8:94:96:
c6:2b:d2:f5:d6:af:b3:56:d6:12:87:2c:78:ca:50:
a3:cd:98:3b:25:7c:a8:af:21:56:44:5b:a8:77:eb:
5d:33:40:29:ba:f9:9e:75:4c:d7:08:91:d6:46:e9:
89:87:65:4d:69:de:7b:dd:0d:8c:3b:63:0d:7a:b2:
fe:cf:e8:9c:2e:08:6d:57:7e:52:5d:55:bf:6a:ae:
f0:3d:25:ae:6c:f1:5c:3e:06:55:ad:43:7f:d9:0d:
3e:c4:27:ac:38:e6:e6:df:e9:6c:0d:b3:a3:9d:16:
f7:c0:bc:22:da:6a:06:14:7b:4f:bf:38:1b:21:16:
4d:48:5e:30:be:75:90:22:e2:28:38:a9:5d:a1:ad:
64:d6:57:93:f5:c1:19:90:db:53:15:41:85:a0:96:
12:a1:89:0f:d5:53:e9:3f:00:b2:03:c5:eb:2b:cc:
5a:47:c6:25:7c:0a:4d:1b:22:d8:32:8b:88:09:3e:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:34:30:7B:0A:23:2A:5D:DA:F0:86:FC:BB:47:EE:14:AE:69:33
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:ad:9f:d4:9b:e2:12:38:70:9b:6a:5f:a3:2c:ef:8d:bb:
bd:32:18:8e:37:73:2a:a8:74:d0:a9:57:99:a0:d1:b4:ba:36:
69:c7:51:ac:00:99:b8:6f:34:5f:c8:f0:f3:16:88:55:0c:5d:
7b:1e:73:6c:16:d4:7e:f1:3b:6a:83:60:4e:24:e1:1e:06:10:
7a:03:9a:f8:83:65:2a:eb:a7:d2:df:d5:8f:4f:33:d1:85:d7:
ac:1a:77:0c:ff:7e:d9:51:66:55:6e:50:b4:f3:de:2d:f8:be:
62:9e:b3:8d:1b:c9:5e:69:72:2a:8e:7d:05:90:c8:e5:24:58:
fc:0b:bb:3e:c1:14:72:03:9f:1a:77:97:d4:68:6f:f8:3d:77:
d2:c7:1b:55:6d:1e:55:b8:26:8c:e6:fb:67:39:a4:c0:05:cf:
4a:be:7c:03:01:51:45:32:a7:d6:95:07:f4:c8:6a:40:70:5c:
6d:51:55:b7:d9:25:f2:01:a6:f3:6f:e1:9e:81:a3:04:87:c6:
af:68:f4:3e:e1:69:0b:a5:cf:0a:0f:93:fc:99:7b:01:96:9b:
9c:da:58:db:43:d5:41:6f:90:a5:1e:f5:ad:47:4b:07:29:ea:
5e:a2:c1:0f:29:7e:bd:7a:cb:ab:b8:bd:92:39:24:22:2a:b8:
4b:a8:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:19:27 2026 by rpki-client