Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: NUCaOazzom33a4wkawBiw0LQwoVrjKFWDznJn9UAxQ8=
Subject key identifier: D5:44:99:7B:DA:3D:02:13:B8:18:82:C3:0C:84:81:44:5C:F7:0A:A7
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 019D39415540FCEE9ED0BE5B198A54A3CC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 03DD
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: WYQILzhMi/8OC9DhqngTwRJ0YXrlxX/+85kJ2BiEdWs=)
2: BrDWyRlSZn2CXtf4IPz2NecaGek.roa (hash: stEsjXO2Qw6gddDjn4syr8tHdGrYULyxkALHqMMCkng=)
3: UTz-CAu9udrXHC-2_mble0zxioE.roa (hash: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:55:40:fc:ee:9e:d0:be:5b:19:8a:54:a3:cc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=d544997bda3d0213b81882c30c8481445cf70aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:fc:1d:67:48:c7:0f:54:26:18:15:8b:1f:
0d:48:73:3a:aa:04:df:e1:4e:1a:ec:4b:41:9c:d1:
d5:f7:17:1d:d2:f3:23:91:85:2a:1f:0b:37:45:e0:
7c:57:6b:8d:a5:45:f7:85:5c:18:92:86:6e:b8:f4:
42:da:5f:7f:f9:52:e5:c0:46:eb:90:e7:4e:b9:6e:
dd:89:fc:6e:72:2b:1f:6a:a1:f4:4b:fd:4a:2f:60:
78:09:bd:5e:d6:fb:86:40:bb:88:37:56:29:43:77:
43:c1:53:d7:41:00:cf:23:74:36:26:45:74:bb:87:
7c:52:5f:c9:0c:db:ba:84:10:b6:1e:17:e8:94:56:
ee:e8:a1:da:b1:52:df:50:86:7d:6a:10:ee:99:ae:
f5:5a:cb:2f:be:22:31:99:7a:a2:75:e8:e4:4b:57:
6a:84:2b:a1:bc:e5:25:1e:eb:52:e1:56:e7:ce:12:
d6:f5:60:0a:0f:80:2a:42:c4:e8:13:44:a8:11:e3:
cd:37:b8:de:49:13:43:c4:4d:3a:39:8c:7b:45:b0:
0f:63:8b:55:78:8d:01:b8:ba:49:cb:13:8c:31:f7:
7e:94:60:1c:7c:4c:af:8d:8c:31:87:97:40:3f:f1:
ff:46:6d:0c:4f:28:32:3d:1a:5b:fe:0a:24:69:4f:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:99:7B:DA:3D:02:13:B8:18:82:C3:0C:84:81:44:5C:F7:0A:A7
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:08:27:84:86:f1:20:76:e8:15:f6:06:23:d8:3a:98:f6:ef:
1d:c3:b0:ef:12:64:9c:a5:b5:53:f8:4c:7a:99:51:14:b5:b3:
2c:a1:c6:0a:a8:47:87:72:f2:8d:42:15:9d:0b:14:dd:6c:fd:
17:88:fe:bf:08:27:c5:bc:34:9d:3f:c8:21:10:b3:1c:05:2a:
e6:46:67:74:68:4f:25:3c:77:aa:c1:31:1d:81:bf:26:8b:cf:
36:89:4f:35:be:8c:4b:86:b8:07:88:ae:ab:35:60:d7:15:22:
94:5e:a8:64:d9:7b:40:5b:db:9a:a4:61:1e:fc:da:00:e6:cd:
32:2d:fa:49:19:d2:87:96:96:e2:ef:fb:c5:35:55:1c:b6:97:
4a:04:a7:22:dd:51:88:83:73:d7:db:f7:e4:c4:14:6c:77:14:
7a:b3:07:96:b5:bd:fc:a4:d0:fb:ca:a2:08:99:b4:74:4f:39:
06:51:a1:64:db:8e:df:dc:89:6f:9b:8f:9b:41:1f:8c:58:c3:
9f:28:40:d1:46:73:3e:c5:50:2e:c0:f7:40:7d:42:f4:bf:15:
a3:f0:7e:5d:33:a4:f2:9b:6d:14:8a:dd:d6:8c:2e:b2:d0:d8:
eb:ed:d7:cb:c9:50:0a:52:73:82:b8:13:f2:f2:ed:ec:3e:1e:
77:58:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:03 2026 by rpki-client