Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: 2N83xSlPq8eR+KHiPPyBz4r2v46iR1UMkt8ue0dnIR0=
Subject key identifier: AE:F1:58:A1:E9:10:1C:9B:A6:13:F7:D9:66:0F:C1:CA:66:1B:23:01
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019D39098B4D4629DA0B8D13FE688750D25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: tTCw/FpJ8J+mwMWq18/apTmC4m52rvOteOj1G4SPwp4=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8b:4d:46:29:da:0b:8d:13:fe:68:87:50:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=aef158a1e9101c9ba613f7d9660fc1ca661b2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:64:f3:21:62:23:91:7a:d5:ca:54:06:3a:
12:5d:22:41:22:d8:66:9e:23:50:1d:0e:e4:85:2e:
3a:f4:14:42:34:39:1c:35:fa:7e:86:19:ff:e1:4e:
2b:35:99:3b:32:33:27:3b:fd:81:85:11:1d:44:9c:
5f:ad:98:5a:70:f4:30:be:88:d6:17:cc:f7:45:11:
35:44:77:71:9f:24:99:2d:9f:d6:3f:88:ae:5d:dc:
b6:31:b9:df:5a:26:eb:85:3b:eb:11:f4:67:0d:d5:
39:22:c0:e0:d9:af:ba:1a:ba:fa:f5:13:be:ab:30:
dc:f5:c9:07:7e:32:2b:c1:f9:2e:53:df:2d:85:d1:
9e:8b:62:ce:60:55:9d:a5:61:ed:1b:f6:14:ee:55:
43:18:50:fb:2e:cb:8f:65:c7:58:22:b6:8b:84:11:
3e:ea:38:69:25:10:b4:72:35:ff:ab:eb:f6:37:63:
13:cd:1d:b1:aa:0f:06:db:11:2a:e1:dd:a4:fa:e1:
ba:fa:88:e8:fa:0b:86:df:f5:bb:42:4b:ca:64:68:
5b:04:87:a3:da:c2:3e:43:4b:02:be:4a:64:8d:12:
84:09:14:aa:68:f2:98:9b:2f:5b:47:e4:33:b9:f3:
18:06:13:a6:a3:ba:ac:93:5b:5d:52:73:8b:ab:83:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:58:A1:E9:10:1C:9B:A6:13:F7:D9:66:0F:C1:CA:66:1B:23:01
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:d7:88:64:c6:d7:62:21:d7:62:28:ff:7b:5a:bb:02:9e:
f3:ed:48:79:cf:0e:a6:7c:6a:03:e1:11:52:94:82:bd:d8:c0:
88:b5:67:47:39:59:82:2a:0e:3d:84:fb:e9:62:29:de:e6:2a:
6d:ce:24:82:a2:36:5b:8b:b7:85:91:30:4e:78:cc:e5:b2:b1:
69:c5:c9:c2:d6:d9:f2:3d:f1:15:9d:fe:be:c8:4d:0b:e5:97:
99:b1:b2:c7:a6:c0:ea:ea:e6:c3:70:d3:16:b9:61:1f:e1:0b:
98:7a:82:6a:72:4c:1b:1d:02:db:83:47:83:8f:8e:c5:eb:01:
f5:f4:88:2a:1f:af:42:bb:8b:6a:ee:ea:44:f8:28:ab:6d:3e:
1a:9b:7f:f5:6f:82:2d:d3:8b:3b:b1:f0:ba:64:ed:64:0e:fc:
7c:2a:1e:fd:14:94:a3:a9:45:61:74:7e:b1:a1:4e:66:7c:d7:
5e:f7:61:2d:4e:ee:c3:71:05:fe:91:4d:6f:35:5b:bb:3f:82:
db:84:5a:5d:21:20:01:02:73:b8:2e:18:70:4e:36:35:d9:7d:
71:cf:08:2c:9f:26:7e:15:56:f8:0e:78:e2:89:3e:d5:26:b4:
70:83:01:98:08:e0:df:8f:c9:0c:04:4d:f2:b8:d3:42:4d:08:
40:61:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:25 2026 by rpki-client