Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
File: 8qrILhYayAqgqo7qnwiE43ONkn8.mft (raw, json)
Hash identifier: ZuwxJ8i4lXqXzrgPFoxK3H5b3msRLpT1PJIKvBcIVP4=
Subject key identifier: 11:1A:C0:65:A4:CB:7B:D9:12:E2:04:B9:5E:BE:9B:81:FA:77:35:1D
Authority key identifier: F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
Certificate issuer: /CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Certificate serial: 019D390A3E2A89826B8A137300A7D2DF4943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
Manifest number: 11
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: 8qrILhYayAqgqo7qnwiE43ONkn8.crl (hash: OHFkr0K5lBHQj8GwRV80TM25VOkPyCqV6f0vfWNdmk8=)
2: p-im3QVnalbsusM3ZnGz60SJPow.roa (hash: Ldo09DRRNUU18hQdQ2aHYFadGWK1+VYL8twJrEqztGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3e:2a:89:82:6b:8a:13:73:00:a7:d2:df:49:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=111ac065a4cb7bd912e204b95ebe9b81fa77351d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:d1:96:e7:d8:75:c9:09:74:5d:a2:3e:4a:
20:6d:86:a3:25:38:37:44:08:73:12:8a:14:88:25:
e9:9d:ab:2b:28:cb:cf:89:2c:d3:86:c2:74:dd:d6:
f9:9b:7f:43:0b:ba:74:36:e4:e0:cc:9d:31:ed:e1:
29:4b:c6:a7:7d:7b:fd:de:7a:77:fb:c5:b7:18:c8:
59:8d:44:80:85:1b:a1:2b:5f:45:c9:f4:20:08:3b:
e0:3c:77:bc:a4:40:ac:c5:03:07:2f:53:2f:e7:ed:
cb:7b:a9:21:f7:f3:db:a4:cd:57:f1:bb:f0:0c:2b:
1f:a3:17:36:f1:1e:07:b2:8c:22:5a:08:d3:2b:62:
b8:05:af:1a:1e:6d:2d:d6:aa:40:94:1e:7d:cf:35:
94:e6:59:1e:9c:c3:17:1d:7e:f8:de:40:24:d8:ae:
4e:14:93:88:56:6d:0b:15:4e:6d:70:00:83:76:0f:
a5:76:e4:6d:97:88:f0:6a:5d:4f:49:ef:bb:42:7c:
4b:3a:0e:15:1e:07:0e:c2:f4:88:b0:1c:3c:8a:90:
3a:72:c0:1c:5a:66:a7:36:d5:0f:c5:c5:a4:77:e2:
04:6d:b5:e4:84:4c:8d:2e:b1:c1:14:5f:65:3c:d5:
c2:9c:3f:41:d0:19:87:aa:8c:be:d9:f0:e0:68:e5:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:C0:65:A4:CB:7B:D9:12:E2:04:B9:5E:BE:9B:81:FA:77:35:1D
X509v3 Authority Key Identifier:
keyid:F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:02:57:1b:be:eb:80:00:f6:26:e0:6a:2c:3e:d0:25:9f:
75:38:09:62:3b:f7:1e:d0:15:2c:aa:58:7d:07:96:46:d2:e6:
f4:17:c1:01:4e:9f:83:2e:3e:4d:3a:e0:16:dc:3a:b3:48:8f:
05:3c:65:66:5f:60:07:b7:c4:eb:c7:69:6a:38:eb:f6:12:75:
16:77:b7:16:f4:b7:4b:e4:5f:60:90:8a:02:61:6d:3b:f8:94:
f2:32:80:6c:00:e5:01:0d:72:26:89:29:e1:75:4a:0c:bd:22:
15:c7:04:ef:f6:f7:72:2d:25:dd:e6:ec:dd:fd:a5:ac:69:a7:
b2:a3:99:85:ed:96:36:df:cd:47:99:b0:82:8c:19:a3:14:dc:
a1:eb:0c:64:cb:0a:df:49:37:bc:57:62:ea:aa:e0:bd:a7:fa:
0e:67:97:81:c9:e6:ef:83:00:93:3e:6e:9f:7e:cc:3a:bc:93:
be:53:e4:23:2b:a6:52:ea:e4:e7:26:62:4e:3b:29:12:fb:c5:
ce:d8:84:dc:f4:c1:9b:c9:8a:69:2e:ca:ca:56:49:fb:d2:36:
26:6d:06:6c:dd:49:5f:f1:37:6c:75:5c:ed:4f:af:24:b3:b0:
f2:1f:13:ac:9c:0a:81:70:a0:38:b1:2f:8c:76:bb:8d:ad:4d:
44:80:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:18 2026 by rpki-client