Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: XhpMZGc2bEiMFRu2d6T+pMAcSjHGUEayJ4TZVY3oK9U=
Subject key identifier: E7:9B:6F:9F:27:D0:BD:DC:60:3F:6F:F4:9F:2A:9F:1D:0E:85:A9:98
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019D389BF0EAFB797052EF83FC52825B2770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 18C0
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 1-oZ9nA1GvkJpmmO85td9UjPVOL8.roa (hash: WbrVzJ+KKcYmbA1ae+jXGRaz8FSjlb5bMrreVZGWW2A=)
2: 74FH53_qCyxdfdEDKjvoSC_Wclw.roa (hash: AIZwtyfbxw2VOFHLL9K5sj06w7V4DfeUDPOP1/okP6o=)
3: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 0Ij/3x7ndUmjaA4W4BU4FaRK/hEWLRoR3bLsaEIdAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f0:ea:fb:79:70:52:ef:83:fc:52:82:5b:27:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=e79b6f9f27d0bddc603f6ff49f2a9f1d0e85a998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:37:a8:eb:80:c0:8e:a6:81:43:e3:c5:08:
d0:b2:36:fb:74:3e:05:05:99:a4:7d:2b:00:0a:9e:
aa:88:25:02:f4:60:94:e6:ad:b5:c9:56:29:cd:d6:
57:9f:64:75:e3:c5:29:3c:07:ea:d6:44:e6:0b:79:
01:cd:34:df:e3:ab:6b:c9:68:92:d0:cb:87:4e:4a:
74:e9:c9:97:1f:09:fa:41:37:ce:ac:4c:b9:49:4e:
4f:92:cb:1e:d4:a0:24:8b:e9:6b:f1:90:68:98:b8:
10:fd:ac:e0:b0:b4:c5:0f:2e:26:e5:66:4e:26:9e:
c6:a1:86:cb:6c:52:72:cc:6f:fa:0e:d9:76:00:4f:
61:f7:29:08:0b:6e:67:10:8a:e9:c5:7e:d9:c7:81:
8c:76:8e:25:1b:04:82:49:6a:4c:93:15:56:6b:84:
d7:43:5c:72:3a:2d:26:4e:15:23:2d:a6:22:54:81:
1d:59:a2:77:41:6f:d6:2c:9c:9a:f1:cb:e0:b8:9e:
f6:78:91:55:bb:a9:37:17:45:2e:61:c5:6c:b3:41:
20:6b:5e:74:27:0b:c8:04:82:91:0a:62:64:b6:68:
e0:2a:48:15:e4:45:e1:69:3d:84:25:81:b6:c5:17:
ba:99:da:f9:a7:61:78:88:c3:18:3b:4d:53:cc:90:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:6F:9F:27:D0:BD:DC:60:3F:6F:F4:9F:2A:9F:1D:0E:85:A9:98
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8f:85:13:cf:00:fb:71:d2:17:8a:b5:ea:84:bd:fc:f2:b5:
e3:92:c4:9e:30:78:bb:7b:4e:f6:c7:f3:e0:dc:d1:46:d1:33:
4f:b5:cc:06:81:fa:1c:49:cc:bf:cb:0b:d8:0d:47:ad:67:51:
d0:68:14:67:6b:5b:b8:97:b2:cb:25:bc:07:9a:1d:50:29:2d:
00:a2:5d:21:d7:43:98:5a:fa:d9:de:71:94:95:37:a9:75:e6:
44:3a:ca:22:79:41:7e:59:05:21:d2:ff:ef:a4:1e:28:20:eb:
d8:61:51:da:e1:ff:8a:05:83:c9:32:d5:33:76:81:da:86:d0:
88:00:98:51:ca:2d:55:97:04:03:50:79:b5:ed:db:b8:ee:3d:
07:93:7a:6c:ea:b5:bd:e7:58:41:b6:bb:e1:da:a8:85:74:68:
08:26:9c:64:38:60:b1:28:d5:39:2f:4b:78:a3:56:b7:ec:f2:
ed:4b:f6:59:82:8f:66:3e:9e:77:60:9d:b1:e7:8e:79:05:92:
f8:69:6c:10:cb:55:6e:f4:50:c3:ec:3f:a0:4e:a2:54:73:65:
34:b2:19:c3:a7:39:e1:94:eb:37:07:47:aa:d7:10:4c:ed:10:
54:d7:8a:33:a9:61:3b:46:a3:d7:9e:18:fd:53:97:ee:7b:8e:
69:80:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:12 2026 by rpki-client