Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
File: 8-vHwbZUMXYi__kRI0BOtsQnr6I.mft (raw, json)
Hash identifier: QmkCHutuXzoRYMeA/cnuRO8sqg04R9tAIsDYbm78e0M=
Subject key identifier: F3:F1:1A:EF:F6:A9:6B:36:68:8D:97:03:B4:1E:7C:FD:EB:0F:B6:D0
Authority key identifier: F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
Certificate issuer: /CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Certificate serial: 019D390A36612F67691A7ED283E54E4913E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
Manifest number: 6F
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa (hash: +BMKvF15LDUCBxzxeTxtgEpB32mqtwgEcOe7ln9nh3E=)
2: 8-vHwbZUMXYi__kRI0BOtsQnr6I.crl (hash: lGQ/lScZmV6KHUK2fDfw5zPGwrWoPO9Y2P4QxM9m2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:36:61:2f:67:69:1a:7e:d2:83:e5:4e:49:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=f3f11aeff6a96b36688d9703b41e7cfdeb0fb6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d1:08:37:5e:35:c4:09:20:a1:d3:f4:b9:6e:
e3:f8:d8:8c:a2:df:68:09:fd:dc:98:ca:9d:cb:c5:
06:4f:18:8a:fe:c7:77:fd:cb:d6:2b:1d:70:7e:84:
76:e8:6d:5c:55:73:68:16:fd:80:da:29:56:e3:1d:
4d:8a:d7:7f:25:a6:4c:06:21:1e:b8:f1:ac:d8:ad:
f0:57:d9:61:1c:89:0a:01:2b:cd:d5:14:1e:e0:c4:
71:dc:0f:77:30:be:f4:df:88:7a:6d:8d:b0:e2:bb:
56:23:8b:a8:18:da:40:53:9f:0c:4b:9c:17:7f:24:
e9:dd:f4:3d:37:c3:f1:b5:16:15:a4:61:3d:76:a7:
10:db:62:dc:70:e9:a4:9a:1f:77:07:44:13:d3:3c:
46:9f:4a:41:ba:c6:c7:fd:af:4a:da:bf:d8:77:61:
bd:2c:0b:3a:b5:6d:59:97:eb:cb:11:c0:53:bc:43:
f9:f0:31:34:95:1f:11:cc:d3:34:85:ba:85:8b:6e:
18:e3:76:21:a9:66:31:8a:7f:2a:d4:63:13:6a:24:
52:65:3b:e3:cd:c3:2a:e4:a2:5c:87:65:ab:24:f6:
7a:0d:49:3b:ea:95:e2:11:69:cd:ff:75:1a:87:ba:
2d:3b:05:ae:56:a0:9c:55:36:1c:5b:27:e4:be:9d:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:1A:EF:F6:A9:6B:36:68:8D:97:03:B4:1E:7C:FD:EB:0F:B6:D0
X509v3 Authority Key Identifier:
keyid:F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:23:70:30:d8:3e:2a:c6:48:91:bc:55:1e:3a:0f:3d:96:7e:
44:d8:74:34:ee:71:18:c3:90:c4:02:ec:b8:f3:25:94:f6:0f:
1b:a0:54:32:01:81:8d:c5:0a:82:ea:d4:61:62:4e:b1:04:db:
9b:2b:7e:22:72:1a:54:8c:27:3a:74:45:08:b1:35:77:34:06:
05:c8:2e:a3:9c:22:41:a2:24:60:bc:fd:04:ef:72:2b:b7:4a:
55:de:37:50:b7:27:6c:6d:98:78:b9:4f:27:0e:ce:62:5e:e9:
b5:cd:83:b7:0b:97:11:8a:f4:18:df:f5:fc:6d:1f:87:44:7b:
e8:0d:48:f4:81:1f:f9:e5:04:c4:b8:a3:04:9f:3e:a7:c0:d3:
8b:fb:40:90:b6:b5:dd:42:2a:03:cd:e9:e3:83:af:30:c7:72:
b3:d9:04:6e:e6:f0:19:3a:58:6b:d5:07:ac:b6:a3:e5:b1:16:
47:57:36:b9:e0:3e:02:2a:5e:f1:88:1b:7a:ed:97:07:7e:85:
c2:20:44:bc:df:a6:c1:e2:69:16:94:d5:7b:bb:0c:ee:36:31:
03:a0:17:4b:97:e7:bd:26:09:23:ef:c3:59:e5:a8:ff:87:26:
98:a1:2f:fc:fe:f5:44:8a:ed:9c:02:c8:37:eb:ed:bc:ad:c5:
4a:e7:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:11 2026 by rpki-client