Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: QY9Y+Fm4yJLmVLGnWZB7W+u4VQWD73hJ2OBdGI+mvJQ=
Subject key identifier: 5A:75:48:CC:07:75:6F:1E:A7:AC:E4:73:AD:0A:B4:B7:35:2E:2C:0D
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019D38D374CF704D8AABA47916233A9E26BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: hv9hbzBD/wf1FNkB9R+/jDkK2kogQdF3vURWnqO05wU=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:74:cf:70:4d:8a:ab:a4:79:16:23:3a:9e:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=5a7548cc07756f1ea7ace473ad0ab4b7352e2c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:15:26:22:30:22:ba:e2:31:cd:1b:05:17:
bd:2e:61:73:60:83:bf:3a:c4:31:85:aa:f0:24:45:
1b:aa:16:06:c2:7a:77:e7:15:a0:71:59:09:46:fc:
5b:2a:dc:f2:a1:10:1c:13:02:56:77:2d:72:d9:ca:
9e:e1:9f:57:5f:82:cc:f9:06:f6:9c:0d:0a:6f:e8:
a6:de:79:17:00:ee:35:ff:f4:37:54:1d:33:84:56:
f9:87:12:47:5f:6b:cc:9e:6b:cd:4a:67:15:92:35:
56:38:0f:c0:36:db:6c:78:20:51:01:6f:25:23:16:
69:dc:45:26:1f:5e:a9:82:ce:3a:c3:2d:e7:52:e9:
f9:94:77:4d:6b:ae:b0:6f:64:1c:75:db:73:74:9c:
cf:3a:5f:b6:77:c4:66:c6:d6:39:13:a2:5e:c0:fe:
57:32:e2:38:c3:13:9a:66:67:08:d2:8a:20:17:14:
99:c9:d0:e6:33:dc:8a:16:5f:a4:3a:bf:3f:68:37:
59:a8:db:a8:61:56:27:91:e4:2d:9c:ca:b5:56:78:
ac:9f:b2:f4:37:d3:e7:5f:95:39:01:33:8b:9d:45:
de:84:45:15:d0:be:96:9f:6b:6c:fd:90:05:25:5c:
1a:b1:f6:77:22:51:b1:c8:a9:e5:70:dd:50:44:31:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:48:CC:07:75:6F:1E:A7:AC:E4:73:AD:0A:B4:B7:35:2E:2C:0D
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7e:1d:73:a7:8f:95:90:4d:a4:02:d3:0b:20:66:26:ff:7c:
64:ab:fb:c2:f3:62:0f:cb:4e:b7:20:8d:55:22:ac:89:a2:5e:
6d:19:ca:55:cc:de:3d:70:06:3f:05:63:43:38:9c:1a:41:01:
24:7c:a3:28:a2:c4:24:8b:26:6e:78:25:c1:9a:0d:d5:47:59:
f8:8b:71:24:c0:22:e7:c3:48:1a:71:e4:7d:8c:6a:2b:e0:bf:
92:87:86:f0:7e:c8:58:c7:5e:59:df:b9:37:41:50:4a:76:b3:
ad:dd:5a:f3:2e:96:c0:89:1c:0d:80:9f:ea:4a:f4:65:e9:fd:
49:93:c2:73:25:bf:fe:dd:6f:cd:b5:3c:7f:a1:77:26:5c:8d:
6e:13:62:b8:f3:aa:81:ea:1c:73:3b:54:12:a9:a4:f9:19:3b:
c3:da:68:c1:0f:44:68:5d:75:d5:57:41:00:83:2c:99:92:cb:
70:ad:43:0e:41:06:81:cf:8a:4a:4a:e9:8b:9f:41:3e:d7:ad:
55:29:35:fe:7c:ca:d7:ea:7a:ca:54:38:07:be:33:60:8e:06:
0e:61:77:50:4d:77:38:2b:64:90:d9:c1:d7:4a:07:96:22:62:
e1:a7:d1:47:98:ea:97:46:8e:30:68:32:3a:6a:39:53:4c:ae:
f0:89:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client