Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: dEdbHedyc6/4WSEMlIrGdQ3gPXif6CIUklveBDlOHNs=
Subject key identifier: B0:70:E2:B3:D6:54:04:85:E1:B5:D0:D1:00:95:B1:3F:C6:69:2C:44
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019D37C0CE4CB12440CCCFABF3B7B5A6E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0A34
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: 60bPI0Q9m+5hiYZBmf4DcmPRIPMD0MZA+4pWjuQMGBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ce:4c:b1:24:40:cc:cf:ab:f3:b7:b5:a6:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=b070e2b3d6540485e1b5d0d10095b13fc6692c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:2a:f1:e3:9d:56:30:33:c6:df:68:d3:b8:
79:91:96:13:de:26:99:07:04:54:c0:49:86:3f:d5:
41:54:75:66:ee:39:2d:5d:90:82:28:b2:15:32:b6:
4d:aa:de:fa:2d:9b:e3:b5:18:7f:74:df:b9:9a:34:
1f:aa:19:8a:71:d1:92:3d:eb:a2:b1:c9:78:58:28:
3b:b6:99:54:36:34:f8:35:97:f3:e1:0e:f1:28:31:
23:2c:ca:16:d5:5d:a4:52:be:fa:29:09:25:73:be:
68:6d:7a:ca:56:14:a0:c9:05:f8:26:51:49:c6:39:
68:c7:14:b9:4e:2e:0b:a1:44:ea:01:2f:9a:41:cb:
10:be:79:e2:9a:a7:5e:fb:32:e8:74:a1:38:40:a4:
57:98:fc:c6:a6:ac:8b:36:4d:ea:e7:40:e4:25:30:
d1:61:15:75:24:9e:05:c2:7e:23:14:e4:0a:78:e0:
a8:92:da:cb:0e:fd:ac:c4:ed:b3:2e:8a:59:00:40:
3e:c5:d1:ee:ae:e0:24:64:c3:cd:81:fb:0f:84:53:
31:b1:10:34:78:50:34:87:e6:81:e2:0a:28:52:13:
53:3d:94:a6:13:00:43:bc:4e:a0:e0:6a:ec:74:08:
35:c4:89:2d:27:0c:c7:dc:ac:b9:7b:35:4f:02:77:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:E2:B3:D6:54:04:85:E1:B5:D0:D1:00:95:B1:3F:C6:69:2C:44
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:77:5f:ec:4c:1c:a5:82:d7:fe:60:3c:4a:6e:bb:08:82:
33:38:e3:78:dd:1b:b7:79:7a:d5:68:c6:bc:7d:1d:b8:8c:6d:
d2:f8:3e:c1:39:3e:68:86:08:d1:c3:80:54:89:12:68:2a:a0:
4c:5d:ac:20:c6:93:e9:16:85:5c:c1:67:c0:e2:6e:19:74:fa:
ba:41:ad:01:18:65:fa:48:2d:4f:db:cd:f5:8c:94:83:44:86:
08:1e:ac:97:f7:51:47:71:89:00:ce:7d:dc:b5:34:90:ca:d7:
59:a5:ba:77:36:7c:10:94:01:81:47:97:68:e5:79:c0:a9:48:
88:32:de:6e:2c:f0:40:cf:90:d5:17:56:57:c6:51:c1:f8:93:
74:ec:ed:15:bb:a7:96:49:a3:c0:9f:71:31:6e:70:94:d1:68:
30:9e:a9:4b:4e:ba:7d:24:47:58:33:2c:8a:c3:a8:12:21:e7:
cc:45:c7:03:12:89:cf:9d:c1:95:e3:e7:1c:a7:34:c7:fe:c6:
18:ad:68:d9:c7:12:59:7b:d0:ac:52:81:fb:07:6f:ed:76:2a:
96:71:fd:7e:d8:9a:04:33:24:c5:86:97:92:53:20:60:1f:55:
8b:45:00:ec:5f:55:32:77:3b:70:2e:18:e0:01:63:8f:fd:6d:
55:be:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client