Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: ccuyiy2O2nnibV82OuhHWEFNfjBMA+edD2ePY5Ej2C8=
Subject key identifier: C6:B5:25:35:73:FB:74:48:12:FA:0C:B4:CB:6B:FD:34:F9:D5:F0:BC
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019D39AEAE03C02A4D9C847CBFBD686B91E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: ilic++vadmVvyWJJMcngmaNcXYGWnQEc0jSiQMhdcqQ=)
2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ae:03:c0:2a:4d:9c:84:7c:bf:bd:68:6b:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=c6b5253573fb744812fa0cb4cb6bfd34f9d5f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:1f:72:8f:ce:5f:23:55:fa:ca:7e:bc:4c:
f9:c9:e3:0a:99:b1:28:b1:4f:48:6e:6d:f7:08:54:
c1:f5:27:06:14:31:2a:0f:cc:cc:cb:f5:31:58:2d:
16:08:ce:2d:ff:04:04:e6:71:b0:a2:9f:d3:86:06:
3b:c5:ea:38:07:ed:e0:7f:3a:1b:87:9e:17:a2:04:
9e:39:0b:56:50:e1:fa:7c:d4:8c:63:be:ee:1f:92:
00:65:ba:e1:e2:87:fd:4b:1c:cd:9f:fa:9e:2b:8e:
92:b6:9a:4a:c0:76:ee:ff:ff:d5:b8:02:e7:7f:1d:
29:0e:59:17:1c:60:b9:65:ec:44:5c:fe:84:0c:db:
ce:98:46:43:5a:95:6e:69:a2:8c:fd:85:9a:94:59:
0f:63:22:ab:8e:93:0f:e4:9f:41:7c:6f:c0:13:07:
f7:14:89:95:1b:d4:33:18:c9:26:b0:92:25:4a:9d:
24:63:6c:29:96:46:1d:3f:0e:f6:14:b4:65:7f:bf:
34:2d:57:4d:9a:da:a5:2a:08:a8:67:ae:65:2b:a3:
57:6a:0d:b7:8a:aa:44:c0:8f:ef:cb:9f:91:e2:77:
6c:3c:ce:1e:0d:8e:48:39:d3:a1:f0:54:56:19:6e:
5b:88:ef:ff:32:c3:87:ec:6e:b7:8b:c4:17:b6:62:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:25:35:73:FB:74:48:12:FA:0C:B4:CB:6B:FD:34:F9:D5:F0:BC
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a6:f8:ae:86:c3:7f:64:72:5d:60:83:d7:db:27:e4:05:7e:
6e:5f:bb:9a:63:cd:c4:47:5f:69:7b:ef:b0:2c:14:e3:90:1e:
95:90:bd:4f:5d:f7:d5:bb:bd:21:02:72:04:65:7c:c5:3a:de:
2d:26:65:b6:9b:e1:2b:6f:55:17:60:ca:14:eb:d6:df:b4:e2:
25:8f:7e:30:14:fa:95:02:8e:07:b8:27:91:42:85:cc:2b:fd:
60:b1:9d:c1:c0:5f:8c:7a:86:0d:4d:e0:37:bc:30:0a:63:32:
75:20:c7:49:5a:69:8f:95:6d:3c:be:a0:d6:74:d8:8d:32:24:
7f:d4:84:f3:c6:af:d8:76:50:7d:e3:54:55:ed:67:24:31:3d:
94:1c:ea:54:b6:9f:12:55:71:16:95:2b:5d:ca:61:60:0c:83:
a2:11:cc:bc:b0:12:5e:df:f1:03:72:51:de:7a:b4:23:55:cc:
ca:e4:c4:c4:e7:b2:1c:79:ed:a8:ac:ff:a3:58:6c:ae:af:d3:
93:93:2f:ad:60:dc:ea:d1:e7:a3:54:83:09:12:c5:f0:6c:06:
bd:f6:c2:a4:f2:9b:ff:48:86:2a:da:3a:82:a0:43:39:ad:5a:
e1:d6:0c:2e:ad:63:f9:8e:9c:1c:7a:16:2f:51:d2:6d:53:2a:
75:f8:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:17 2026 by rpki-client