Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: fhQxq0UrP1rSoy9At/coYJHxywimjF0qQaEohALpRy8=
Subject key identifier: 31:FC:9C:02:38:94:D2:77:78:E7:CD:BC:44:CB:1A:0C:BB:C7:FC:E3
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019D3789AAB59E7A27ED6D5DEBBA6AC3B18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 127F
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: wB96aO3Ovnquv8F1L9Xfez8Aouy0v9CgIb9UrHmOWRY=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:aa:b5:9e:7a:27:ed:6d:5d:eb:ba:6a:c3:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=31fc9c023894d27778e7cdbc44cb1a0cbbc7fce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:08:f2:e7:3c:44:6a:de:bc:3b:75:ef:25:
00:15:78:c3:0a:fc:c1:71:d9:51:67:2d:84:d9:36:
61:57:6d:af:69:90:c5:e2:28:a4:9b:bc:9f:13:e5:
43:be:25:f5:54:dc:21:77:49:7b:0e:91:8c:b0:49:
b7:b8:f5:65:2f:68:44:aa:4f:ef:eb:aa:73:d2:3e:
b9:28:b9:9a:a4:ae:4c:cc:a9:07:3b:53:78:22:e8:
2a:e8:aa:1a:22:a2:ac:5c:00:55:89:fd:a1:f3:1c:
ab:d2:db:70:32:01:cf:99:8b:80:32:8d:1d:d3:ea:
ad:42:59:21:58:ad:0f:ad:13:db:cd:4a:a1:52:ae:
5a:35:9b:f2:61:10:5f:74:14:f8:2e:b8:85:c4:4a:
ce:aa:25:f6:ad:11:87:32:ae:7e:70:47:3a:cc:21:
bf:09:09:a0:9c:75:d1:7e:c6:6e:ac:ca:1b:c3:57:
80:f6:a4:23:78:97:ea:7c:cf:a4:33:94:7e:8c:b3:
c2:05:9d:d7:da:f2:ef:61:33:39:b9:91:7b:ec:83:
72:6f:55:98:70:5a:e9:1f:38:b4:2c:ba:f5:64:48:
a9:c5:f1:0a:a7:38:47:30:0e:c6:ec:d6:f9:03:70:
0d:99:04:d5:c9:e2:cf:eb:3a:9b:ce:e1:ea:22:39:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:9C:02:38:94:D2:77:78:E7:CD:BC:44:CB:1A:0C:BB:C7:FC:E3
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:89:4b:06:b0:85:21:93:aa:dc:2d:41:41:42:55:d7:90:0b:
5e:c4:a4:21:91:05:40:ac:c9:75:51:0d:12:20:cd:7c:fa:82:
d1:96:52:3d:09:39:83:64:48:f4:ea:ea:50:33:b4:e2:a7:f2:
a1:ec:32:e9:fb:77:58:a3:09:3e:b5:97:09:ab:99:5a:5c:76:
bc:39:bf:48:7d:ef:7b:28:d7:89:e5:ed:c7:5e:5f:30:66:c0:
6d:63:84:5b:1c:32:2f:ec:c9:55:2d:a4:74:70:a9:91:18:ca:
45:8a:99:ec:3e:62:ce:24:4f:f4:49:12:dc:10:45:62:4e:13:
c1:4b:af:fe:2f:ee:84:fc:06:5c:33:26:72:16:34:7f:7a:ef:
fc:0d:df:28:ac:73:67:06:35:15:0c:ae:8f:cc:24:7d:bb:bc:
a7:8e:b4:03:e7:70:5c:36:b0:60:d0:ea:1f:2c:fa:c4:39:c2:
5e:0f:1f:9c:30:53:31:28:ad:db:b3:95:75:0e:c9:8a:c4:bb:
71:44:cc:b9:1a:62:86:96:3b:9c:2c:83:f9:0f:3d:31:53:a6:
8f:94:91:fb:ca:ac:3e:31:5a:e7:88:cb:94:aa:e2:76:ce:92:
13:24:e7:24:a4:41:2f:d9:14:b5:bc:03:63:32:f5:da:78:2d:
41:b6:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:26 2026 by rpki-client