Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: xzRKJ8rNszWBywNmiBCXpzFEIynmBmAABn8425GJkdw=
Subject key identifier: 1E:31:84:D6:5A:4B:3B:3A:4D:A5:25:F9:1D:36:F9:E9:6C:D2:41:7F
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019D3909E222A9280C69D32ED45E705CAFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0D0F
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: zAFqpZIF191o8nfwXo3GEQ6K6XHBWfm0HI5hFvqjOfc=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e2:22:a9:28:0c:69:d3:2e:d4:5e:70:5c:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=1e3184d65a4b3b3a4da525f91d36f9e96cd2417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:74:e3:a6:55:48:ae:6e:37:0a:dd:c8:3b:
d8:66:57:8e:ba:55:c3:7e:b0:50:56:c3:be:2e:86:
24:c5:14:0c:59:45:b4:52:04:58:49:87:c8:38:c2:
25:16:75:d9:a1:13:86:fc:59:c7:a3:85:00:2c:e9:
85:7b:91:64:c7:a1:78:d5:2a:b3:ed:59:87:77:6d:
3e:0d:48:ec:be:d9:cb:2b:ea:39:99:ae:9a:f0:4b:
9a:da:e0:3a:01:f0:f4:92:d5:69:d0:2b:96:0a:86:
bf:06:3b:58:05:b9:80:7b:df:b1:80:dd:59:55:c8:
08:4d:3c:86:52:f7:61:f1:bb:2a:73:52:63:c6:fc:
e0:27:f7:be:d8:e1:e0:93:60:88:47:68:3c:2f:6c:
65:1b:e9:c5:ce:59:f6:2a:1b:a7:97:1d:33:a5:00:
3f:56:79:33:5f:58:dd:31:91:3c:52:0f:6a:85:08:
d4:96:86:e6:f4:db:59:a1:1a:26:eb:85:87:2a:a8:
aa:37:60:00:23:8f:8c:c1:d8:f2:d1:bd:41:fb:56:
42:68:04:bb:5f:ba:a5:a7:14:dc:c4:2c:cc:04:b3:
e6:96:aa:d7:fa:74:b9:03:db:72:c1:6a:9d:e5:d9:
8e:2c:da:3f:93:68:37:67:a4:11:21:6a:ac:fe:96:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:84:D6:5A:4B:3B:3A:4D:A5:25:F9:1D:36:F9:E9:6C:D2:41:7F
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2f:42:8a:1f:9c:6d:99:32:00:49:66:b3:42:bb:f9:15:9d:
b9:a4:84:88:ff:ad:ba:e2:4c:8f:3c:a3:e0:24:1f:5a:7e:4d:
bb:1c:f0:a3:a3:6c:fe:9b:e5:27:1b:4b:bc:00:82:51:36:d9:
49:19:3b:86:3c:2f:71:7b:1a:9c:4c:e3:00:1d:99:b9:ff:45:
bb:bb:79:ef:0f:99:3a:f7:ce:7e:6b:ae:fd:75:26:9c:f7:0e:
65:8f:e4:c5:54:1b:16:cd:0c:34:5e:62:3a:07:d3:73:bc:d2:
57:fe:60:eb:fb:63:79:b5:67:b2:35:ee:c9:d7:8e:ce:c9:e6:
3b:18:d2:6d:44:1d:f3:86:96:b4:aa:db:83:b8:e7:bc:a6:cd:
b1:c4:12:d9:e9:3d:31:28:bd:b4:93:b4:fd:97:34:a3:f0:f0:
d7:0f:5b:3f:e5:35:5d:b9:8f:a6:2c:f1:bb:02:8d:20:0a:63:
ed:48:69:75:c3:d9:f9:72:2a:6b:e4:e0:dc:01:bf:29:6e:f3:
ae:1d:19:61:bd:73:0f:d2:af:3a:4c:63:18:75:55:80:e4:52:
e6:07:f6:8a:b5:57:7f:fb:72:2c:78:75:b4:27:76:df:ce:44:
ec:a7:6f:42:28:5e:6c:5f:d7:cf:c8:44:61:e0:b5:9c:f8:a5:
28:8c:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:30 2026 by rpki-client