Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: 38aMIYwsijs8n55EiMpryCWj5Tlx0nOMqNVdsT61ldo=
Subject key identifier: 05:76:2F:91:DC:9B:85:66:A6:98:8A:D8:AC:19:98:9A:4F:7C:0D:19
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019D265F8D3D96ED5A5327A905E0F9117E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1875
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: SbYRGN80OoCNURsIuXPMKqC+a0ZwsYNI5hyXKSrcV6Y=)
2: NaRt1HVL2Kx-sncfnj_qlUg6AzA.roa (hash: eMNf8UixOg4CJ2lG1Z2ydmE1AwqLlbPFY92TlJawe5o=)
3: h71Yv2JT78lZ32-boHdqirguohk.roa (hash: lsiFcaLhUojE1P30MtDW0JIDCpauP4wSFeSBzKbGvF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8d:3d:96:ed:5a:53:27:a9:05:e0:f9:11:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=05762f91dc9b8566a6988ad8ac19989a4f7c0d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:57:30:73:20:1e:51:fd:4c:36:df:7f:ba:
64:79:01:51:fd:50:ef:3a:9d:f2:40:a9:b6:b1:06:
c1:71:f0:2d:39:c7:50:d1:4d:b8:19:b2:6f:74:27:
10:62:8c:65:f0:7d:ce:a9:86:5c:0b:a3:0e:85:98:
32:bb:7a:df:cc:fa:ea:c1:f7:ba:35:a8:48:5c:f5:
10:0f:e0:21:23:4a:1c:07:ae:eb:3f:88:12:3c:0a:
76:be:77:eb:94:1f:81:2b:12:43:c5:32:eb:3d:36:
2d:bc:18:fc:93:84:a7:0b:32:6e:f8:d8:c5:12:c5:
fe:ac:c3:78:46:11:ab:e1:95:03:d0:3e:c1:fe:4e:
db:f8:d2:46:3c:64:78:27:ff:4e:c2:0e:76:6f:1b:
7b:7e:55:39:3d:99:63:a7:4e:2f:a5:f3:60:ae:e0:
b6:1e:90:46:d7:9e:b9:5b:8f:93:ad:14:8e:bd:9d:
c1:47:35:a5:55:fe:cf:b2:90:ff:91:80:a5:43:52:
fb:e5:93:af:85:a3:36:ff:02:89:90:53:28:f7:a7:
d3:b5:ee:92:c0:9c:01:ef:81:d8:7b:66:7a:5f:98:
b0:1f:9d:8a:47:41:f6:1a:78:2e:15:c7:90:ee:c5:
7e:71:79:af:94:30:bd:67:29:34:5c:37:9f:ad:9b:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:2F:91:DC:9B:85:66:A6:98:8A:D8:AC:19:98:9A:4F:7C:0D:19
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:62:cb:54:d9:ca:76:66:71:d9:f8:e8:2e:89:10:dc:23:18:
0d:0d:bb:70:da:04:03:57:b7:51:b6:c7:b4:62:da:22:87:c0:
0f:52:e7:06:75:2f:fb:ec:60:6c:6f:52:bb:9c:48:91:6f:f8:
7c:1c:2b:e7:fa:15:dc:1f:19:8c:cb:a0:48:d2:df:d7:fb:3f:
07:12:3d:17:7c:f8:64:c8:6f:8f:8b:f1:f6:b0:be:cb:7f:7d:
10:c0:0e:20:09:b5:09:e7:10:41:2a:2b:f1:9f:23:6a:ea:29:
4d:e9:45:d6:f5:62:7a:7b:e1:6b:e2:b7:82:89:d5:fc:a4:2e:
11:cb:10:de:6b:b6:3b:a9:f1:fa:fb:43:94:f6:15:08:43:3a:
26:6c:67:26:e9:7f:4a:d7:e5:11:9e:89:3d:c4:c9:34:07:70:
73:f3:d7:41:3b:8a:ca:73:9c:b9:9d:d2:4b:55:e5:ca:de:77:
61:d0:3b:19:0f:f5:89:0e:23:de:dc:14:b4:0d:1d:06:c0:9c:
15:71:c9:e8:75:bb:ff:7e:8e:26:e4:d5:eb:81:e8:29:9f:c5:
04:14:c2:bd:f8:1e:dd:c7:d9:57:9a:dc:5a:73:a1:4e:7a:2a:
64:fa:fc:f2:e3:3f:65:1e:ef:b4:d4:64:84:0c:c7:1c:ce:8c:
66:12:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:32 2026 by rpki-client