Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: hK8q6C0grOpxmMk0xVgAN+EwKQPAIiy3G4HX1nxE+Bk=
Subject key identifier: E4:8D:25:CB:F9:ED:8F:6D:3F:35:98:C8:50:14:71:58:49:C6:23:0F
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 019D37F6F9206DE616C5F40F68B9658DDB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 0ACB
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: HpkHvgv5kARvbehsocJXnLSF5tqkIwpr3bd5rUMOa5A=)
2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f9:20:6d:e6:16:c5:f4:0f:68:b9:65:8d:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=e48d25cbf9ed8f6d3f3598c85014715849c6230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:4a:7b:a3:83:51:65:ce:a8:45:84:fe:ab:
97:bb:ca:3e:8d:82:2f:fe:b0:80:cb:ce:89:ca:eb:
a7:d1:00:ea:21:4a:1c:02:b0:04:34:08:86:3e:56:
c3:3c:c1:a3:9a:db:63:b8:9d:36:f1:6a:d5:8e:19:
88:00:92:e1:11:ac:59:f4:5a:1e:f3:e8:22:7c:5d:
31:dd:26:2a:1b:98:f5:8e:11:1a:51:63:b5:f1:e2:
f6:7b:92:9f:c2:54:0a:aa:1b:88:47:aa:d4:94:c3:
88:47:90:f6:02:ce:d8:e4:ec:47:cf:a1:94:80:4c:
03:0a:ec:17:62:19:35:06:23:d9:c2:52:19:8d:a3:
c4:56:d2:36:7a:46:de:5a:5c:61:41:5e:fe:18:13:
45:6f:f1:78:3b:02:76:e6:56:2f:25:b4:23:9c:8f:
fe:7b:4f:50:b8:c8:00:62:3f:3e:20:75:1e:5b:9c:
aa:d7:7a:01:8e:10:eb:8d:2e:c0:d7:78:44:da:7b:
b3:07:32:aa:77:7a:73:4b:6d:c4:58:16:57:3a:b8:
85:87:fa:b0:c3:8d:ee:9c:dc:c7:27:e6:e5:86:9c:
67:43:72:87:66:b2:de:68:1d:5b:b7:6d:a3:1b:27:
e6:68:01:6d:5b:89:2c:a4:87:b4:12:95:65:eb:34:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:25:CB:F9:ED:8F:6D:3F:35:98:C8:50:14:71:58:49:C6:23:0F
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:53:39:ba:27:dd:db:b5:18:6a:06:59:8a:a9:42:d4:dc:
74:b6:02:06:47:be:bd:5c:39:b5:68:46:96:04:aa:45:93:6d:
aa:55:07:7d:4e:64:fb:40:56:e8:c5:98:2d:d5:72:6b:d5:03:
51:1b:fa:38:18:63:71:de:32:3a:71:7f:09:96:d1:e7:a4:44:
ab:57:90:33:71:45:72:76:e7:27:01:53:32:df:81:cb:b4:a1:
eb:b3:d4:10:4a:53:49:3c:a8:20:4c:bb:5e:a7:f2:80:6e:09:
97:31:41:38:3c:0d:20:4c:5c:7d:2f:cf:45:a4:7b:21:5b:4d:
ad:3c:83:53:37:a3:ef:38:8a:1b:95:35:f1:dc:af:69:1d:7a:
1d:7c:e2:54:69:4b:e0:04:8b:86:e9:4e:37:80:59:b1:ef:93:
85:13:ce:6a:bc:cd:ef:ff:bb:2f:fb:ec:cf:54:ac:8c:68:a0:
3a:8e:53:70:c1:f5:60:88:7d:41:e3:ad:29:fe:de:0a:87:ef:
d7:94:7e:fb:aa:63:98:a0:2d:9c:e2:26:1d:4a:2e:8b:17:56:
02:89:ee:fa:33:dd:ef:fa:32:21:4f:f7:4a:68:21:c8:4a:80:
03:b9:10:19:63:7f:d8:91:b2:f6:04:47:ac:e4:2c:cc:b0:77:
f1:f2:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:39 2026 by rpki-client