Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: iUrQ+nQ577YykuyRkku3AMmC0DtvBOBXTdSiKSZgXgE=
Subject key identifier: D2:C7:10:6B:BC:D9:D5:F4:5B:01:AC:11:80:94:10:13:5E:81:3B:46
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019D39098FC8183125FA02165348F1F758D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 7mV4cfEe3Lz7FN3wulzw04PtIaT9GQ4pI2Z2AjhrZww=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8f:c8:18:31:25:fa:02:16:53:48:f1:f7:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=d2c7106bbcd9d5f45b01ac11809410135e813b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:3d:2c:9e:e6:c1:9e:37:d1:09:1e:8f:c3:
f7:96:d4:60:74:87:b8:a7:ed:b9:56:e3:d8:8a:78:
00:ce:9c:a6:32:df:d2:04:44:0b:84:6d:77:1d:60:
88:34:7a:25:46:42:9e:b2:87:4d:5b:3b:4b:ae:d2:
03:9e:50:22:06:e8:85:a3:6e:84:c9:a3:a4:ab:06:
d6:e4:27:d2:93:a1:1d:9a:8c:b8:b3:9b:4d:bf:78:
68:54:d1:ca:7e:e5:40:b4:5f:1c:44:18:94:e2:de:
54:80:52:04:a3:fb:fb:c4:df:b5:c0:2f:67:84:d0:
cf:c8:95:df:72:83:34:5b:a7:af:82:43:7c:27:71:
ff:0b:b7:d1:25:2f:e3:7c:1f:6a:fd:cf:aa:50:97:
82:cb:7b:a9:61:fd:6d:b3:22:af:78:c5:f8:6b:da:
f7:32:26:84:3e:d8:9b:2b:69:d1:1a:4b:01:66:b0:
bd:9e:b5:38:cd:fd:a7:ab:92:c4:78:8b:a2:94:46:
55:e1:94:94:cd:16:76:e6:fe:2d:51:03:99:7f:4b:
39:e6:c2:9e:34:79:a4:7d:5e:01:92:aa:8a:1d:e8:
a5:6b:70:2d:1f:31:79:f7:09:78:ed:3e:82:ee:af:
25:d4:19:7a:39:fe:f9:c5:0b:06:9e:ed:d2:53:e6:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:10:6B:BC:D9:D5:F4:5B:01:AC:11:80:94:10:13:5E:81:3B:46
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:42:ad:16:97:19:b5:5d:75:d2:e1:89:b3:44:a1:bb:e5:
7a:c6:e5:82:85:a2:d9:bc:b5:b6:7c:25:44:b9:c2:46:e9:61:
8b:c1:47:fb:0c:12:cf:03:af:47:33:5c:b5:d8:68:e6:5c:f9:
9c:d6:3c:26:3d:99:01:44:bc:91:86:60:d5:6c:ed:b4:d0:b3:
df:27:27:78:c6:e8:ca:a6:31:db:ff:3d:f5:95:c0:73:2f:91:
5c:9d:ca:46:66:93:47:03:ac:be:e5:32:07:74:9c:66:66:35:
75:e6:7f:c9:c6:53:5d:8a:8a:46:10:da:7f:59:1b:ad:b4:12:
44:43:25:84:ca:47:18:62:6b:22:0d:9b:53:8b:8c:7a:27:da:
1c:cc:b0:aa:05:5e:b5:b6:85:b6:5d:7a:16:3c:43:49:50:35:
ed:fc:d6:84:cf:ac:49:48:9b:1d:f6:c0:d7:88:d3:ab:d4:f6:
8a:f2:5c:24:8f:e5:44:5e:bf:cd:f6:87:68:24:e6:d3:4e:06:
4e:9b:e9:01:9f:ab:c8:9f:cf:11:a1:63:25:d1:b2:65:55:bc:
5e:fe:c6:65:59:2f:7d:81:a8:0e:7a:01:bd:39:88:ca:10:da:
c2:84:60:41:e6:f1:99:dd:c6:3b:25:45:1f:10:ce:c4:54:16:
8c:7d:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client