Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier: cRE1PVieHoUf4EGFosx8j9MUEeX+OWF5rJZ3KVL/ru8=
Subject key identifier: B7:9F:6E:85:03:4B:AF:52:73:17:31:C8:22:6E:93:1A:CB:FA:1F:31
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial: 019D37C106A29DB371D5067239A84FDD954D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number: 0BEF
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: an/rei56Glaw+l0pr8u1bL26y3VGyhVAU504emXPZPc=)
2: p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa (hash: ntFwgx0BPmHacsG/x9Fir1C9rUhhUsKeoLiyXbUgSLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:06:a2:9d:b3:71:d5:06:72:39:a8:4f:dd:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=b79f6e85034baf52731731c8226e931acbfa1f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:dc:1b:81:36:0f:cd:1c:14:09:9c:99:94:
91:9e:45:ea:3e:8a:dc:53:c6:1e:c2:f1:c0:b1:f8:
af:b7:41:04:f0:a8:1d:6a:6e:ae:96:5c:e2:04:25:
39:69:7c:73:24:4c:ee:f7:bb:5b:be:26:72:e7:67:
c9:97:a2:3b:1e:b9:1d:42:55:67:79:80:e8:9a:1e:
da:f7:02:fd:ec:f5:bd:fc:08:5e:4a:01:b8:be:83:
4a:11:a7:17:3f:eb:62:eb:f0:22:64:2a:ef:05:4a:
22:87:06:5d:a5:7b:3a:df:88:05:41:17:77:33:27:
c5:7a:13:3c:3b:7f:75:cf:13:32:a8:53:ef:61:29:
63:e9:8b:c3:e0:5a:0a:98:0e:c0:10:3f:d6:9c:90:
94:7d:28:82:90:32:88:79:96:e0:6a:4c:ff:9f:34:
00:9e:8f:5a:61:17:a3:69:49:7f:fb:26:6f:4b:75:
a1:59:32:10:fa:1b:90:31:75:0c:f9:7e:c0:09:70:
2a:4b:36:b2:a5:b0:fd:1e:6a:37:f3:44:3d:2b:42:
7a:fd:f3:ae:15:65:b2:3f:5e:00:49:e5:88:a8:78:
2a:f7:84:5e:8c:70:25:d3:72:22:0f:e6:50:2b:0f:
1c:c1:6a:69:d8:8a:81:42:b3:e7:b3:91:7f:86:e6:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:6E:85:03:4B:AF:52:73:17:31:C8:22:6E:93:1A:CB:FA:1F:31
X509v3 Authority Key Identifier:
keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1c:24:ea:18:d9:d3:08:67:db:78:da:5a:2e:ad:c4:46:0e:
b7:86:cd:aa:9e:59:56:cc:eb:af:7d:3d:e9:47:98:d7:56:ec:
02:35:7e:1b:d5:7b:ee:17:d2:68:d3:bf:b4:09:84:c7:48:6d:
77:c9:07:45:bf:84:c1:08:c6:a8:4f:16:d1:1d:4c:d0:4d:a7:
f9:e0:d0:31:75:63:01:e9:36:c5:d2:01:cc:aa:ef:22:70:f8:
32:27:23:9c:9b:05:97:b7:c7:44:e9:56:25:26:66:08:d7:fe:
57:17:e8:c4:0d:ad:e7:05:6f:3d:d9:cc:e1:02:60:57:2d:ed:
ed:d7:f1:47:4c:e3:57:17:4a:7f:bb:28:8f:50:c5:21:3e:df:
f9:72:2e:31:13:d0:32:52:07:fe:37:6c:62:c3:40:b1:88:b6:
dd:85:5b:dc:5b:19:e8:14:9b:75:b2:96:7f:2b:92:5f:38:9e:
39:a9:f5:9f:77:ee:76:c9:83:4a:7a:48:be:91:65:d2:96:ff:
6b:7b:09:fb:ff:a7:83:c4:d7:e8:9d:2c:ec:50:5f:04:12:32:
79:1c:c8:7d:6b:50:35:a1:13:3d:f7:3f:df:5f:5f:96:26:53:
60:19:fa:f9:7a:f7:3c:d0:62:a0:05:88:d6:8b:5b:5f:5b:64:
2c:3c:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:54 2026 by rpki-client