Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 7REW41bbgfGWHkMNqS0LIcTxq6Zpm5u86+yKh0ZYX7c=
Subject key identifier: 0B:61:82:0E:76:70:3B:3F:F6:2B:1A:1E:FD:C3:D2:31:56:AC:BA:10
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019CE66CFD6B98A7185F9D2F8EA90F43AC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 09:00:28 +0000
Manifest this update: Fri 13 Mar 2026 09:00:28 +0000
Manifest next update: Sat 14 Mar 2026 09:00:28 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: FNselymuLqM5sV0ySycqwCi2hAg+1Qet71DKfqBO6EY=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6c:fd:6b:98:a7:18:5f:9d:2f:8e:a9:0f:43:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Mar 13 09:00:28 2026 GMT
Not After : Mar 14 09:00:28 2026 GMT
Subject: CN=0b61820e76703b3ff62b1a1efdc3d23156acba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:24:f8:b4:e6:0d:62:44:ff:fe:ef:c0:ea:
60:f2:e2:a2:ea:56:14:fe:d7:74:32:26:44:7a:2c:
18:68:36:bd:39:56:c3:05:f6:49:6c:96:bd:9f:f2:
93:19:bd:d1:7c:0a:f1:9e:44:44:d9:fd:0b:fc:29:
84:09:55:31:b8:52:d5:93:13:42:c5:03:9f:63:70:
29:b8:87:d2:0b:30:08:6e:f4:a1:8b:4d:81:4b:39:
4b:36:65:91:59:e6:03:5f:dd:d8:ac:6f:96:fb:9b:
3b:ea:b2:7b:c2:7b:88:19:ad:9c:3a:1e:f1:61:2c:
22:d5:c3:5b:d9:a7:ac:07:3b:e2:22:f5:11:5a:d8:
ff:80:23:b2:f9:21:01:d7:06:e5:f0:ac:68:ab:0a:
fa:0b:92:11:a2:5f:39:ac:a2:a3:23:ce:ef:11:bc:
24:f5:57:56:83:5c:5c:6e:2c:e4:91:18:d5:62:f1:
ff:91:12:81:2c:c4:da:bb:6b:d1:58:e8:4e:88:e3:
3c:16:ef:f8:19:eb:65:62:29:cd:5d:aa:a5:ff:2e:
cb:f4:14:61:27:ed:e4:80:1d:66:71:bc:c3:60:3e:
95:07:0e:df:f9:5e:55:4f:c0:f3:37:80:81:95:d4:
ee:68:73:b7:9c:4c:b1:c9:51:50:38:be:9a:d2:d2:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:82:0E:76:70:3B:3F:F6:2B:1A:1E:FD:C3:D2:31:56:AC:BA:10
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:59:2a:4d:80:f6:66:76:3a:07:f3:67:5f:8c:7c:e0:a1:c3:
b0:39:cd:83:55:eb:50:cf:51:84:58:88:a9:c0:79:52:bd:93:
17:40:9f:c2:bb:2c:ab:6e:45:ff:8a:3a:5f:29:da:91:ce:2b:
e5:ea:47:37:2d:7c:6f:07:4a:04:b7:ae:8f:bf:e0:c2:60:ea:
61:a2:f9:4c:e0:c2:b8:9c:0a:5c:1f:13:e0:f5:3b:6c:27:58:
7c:92:d9:9d:01:24:a7:87:bb:6c:dd:1b:07:8b:3d:6a:06:9c:
ce:0a:84:4e:2f:f5:c2:ea:41:ca:8b:9a:03:50:45:0f:cd:5f:
c8:59:27:57:b0:22:b8:f1:bc:6c:28:cd:91:4d:f4:57:10:0c:
f3:b4:3a:d6:a4:86:2c:49:8d:35:57:e3:9c:91:6e:0c:13:32:
dc:55:90:b8:00:9c:b5:e9:09:79:49:60:60:39:36:c2:17:45:
7c:33:3a:6c:97:83:d4:0e:c2:52:22:8d:e7:2a:f6:2f:93:3f:
e5:f0:0b:c5:04:57:98:77:5e:82:38:b2:ed:d9:55:5c:d3:f1:
b0:da:68:a5:8e:7f:5d:3f:aa:1f:95:84:95:2c:d4:16:10:90:
70:dd:6b:e6:6d:e8:22:1d:85:7a:05:45:1e:70:70:36:e3:51:
d7:3e:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:30 2026 by rpki-client