Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: PJcXwTMZhjjirVhvhSvHXO7wZPLxpCTfCqZJ7ijMW0U=
Subject key identifier: 90:7F:60:08:53:AB:B0:6D:D6:EA:1D:81:EC:CB:6C:81:AA:5D:2B:5C
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019D0E571077341C83D00892CDE84FC42902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 146E
Signing time: Sat 21 Mar 2026 03:01:20 +0000
Manifest this update: Sat 21 Mar 2026 03:01:20 +0000
Manifest next update: Sun 22 Mar 2026 03:01:20 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: zFYBuK4sQ6Yiw5KZNWwDz8FY+oK2Duz7tzb6S6r15+8=)
2: 8yFq5eCzFqbUHkppnTImyWd7TQ8.roa (hash: cyxrgjDYi2zADRMcxKZcX9vgUVvbqnmcfKimHV7W0bY=)
3: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
4: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:57:10:77:34:1c:83:d0:08:92:cd:e8:4f:c4:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Mar 21 03:01:20 2026 GMT
Not After : Mar 22 03:01:20 2026 GMT
Subject: CN=907f600853abb06dd6ea1d81eccb6c81aa5d2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:15:b6:95:5f:53:2f:3a:3f:0e:dc:80:8b:
8f:d0:b3:c8:9c:45:fc:64:3b:3b:08:ef:cc:c3:1b:
37:13:8a:aa:84:bd:a9:fc:e8:d7:a3:e8:f3:38:81:
75:e1:19:1b:62:de:2b:71:47:3b:37:4c:54:36:d8:
45:fa:ac:f2:3f:ee:1e:17:71:56:3f:0e:3a:43:4c:
95:f4:95:c8:f3:d2:8d:17:72:9e:ff:12:c1:d4:ad:
30:75:d7:e7:08:31:4c:6e:8f:b5:21:54:64:e6:a4:
75:91:dc:88:c9:c3:40:51:31:d3:1f:e8:66:b6:be:
bb:32:03:d6:60:1a:97:52:88:fc:70:8f:b1:31:c9:
19:9e:03:f6:48:2c:9b:63:1c:b9:a7:41:74:b0:43:
4f:77:ef:1b:0f:3a:9a:f7:4f:59:a0:cc:e7:83:d8:
ce:d1:63:ac:aa:c8:25:ce:55:01:53:72:6b:85:01:
b3:78:c0:6f:62:ae:82:d4:06:70:f0:19:54:69:74:
9b:84:6e:9f:d9:5b:62:c0:1f:d9:f6:d0:d7:30:81:
c0:2e:86:32:63:8f:9d:93:d3:ca:a3:f1:b2:4c:1f:
4c:e5:7d:43:c9:cc:3d:ef:5c:37:57:19:c4:be:f3:
75:80:b3:86:94:6b:58:66:2b:f2:49:27:f4:3b:06:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7F:60:08:53:AB:B0:6D:D6:EA:1D:81:EC:CB:6C:81:AA:5D:2B:5C
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:53:8e:bc:56:99:58:b9:3a:7b:12:c1:5a:8f:38:7a:da:97:
8b:95:da:d0:db:5b:ea:ff:3b:9c:30:46:96:cd:08:2b:97:47:
84:56:ab:b8:0e:a6:3d:87:97:87:b3:be:57:ea:92:c2:69:21:
a3:88:16:0b:1a:a2:80:c0:08:6e:58:cb:19:ed:96:b2:71:ea:
94:c8:ac:76:df:2b:bf:ec:47:ba:dc:aa:6d:00:a6:16:62:00:
02:4d:9d:e2:79:4c:59:62:bd:22:c2:4d:1d:b5:e7:54:bd:68:
26:6c:5d:a8:a0:27:78:7e:92:e3:06:62:d7:1e:f8:a2:d7:71:
7b:b9:50:f9:32:4f:0a:a1:d1:63:27:b6:e3:05:ce:a9:0e:1c:
3a:a2:17:c4:fe:3f:53:9c:75:79:2e:54:24:79:5a:70:78:ec:
2b:05:fd:a1:bd:58:41:f8:9c:51:ca:23:5e:ee:75:0b:aa:41:
c4:66:08:26:92:71:cd:68:81:32:b2:8b:27:9b:da:b0:a7:3f:
d0:6e:e6:5d:0e:32:35:0d:8b:fb:07:d9:58:87:c3:da:22:10:
5b:9f:73:a4:b5:f3:ca:e7:6e:14:49:2c:4c:57:36:b8:c8:6c:
03:b2:de:ea:a3:20:8b:a5:90:b4:c3:56:bc:61:2f:f5:bf:f3:
fb:95:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:37:24 2026 by rpki-client