Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: ibySLNTZvIymRWiV+87EIwFCem2PsQUeBjAKqGSz+BE=
Subject key identifier: F0:34:2F:5A:9C:69:0A:F0:21:6E:93:1A:BE:D0:E8:A6:25:41:AA:E1
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019D38D2ED5D1B5C508CFFF17C641E7DB011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0B48
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: nuIYRNdxxxeeenAdQItwAkXrdQ5E6pNnOJ8SZ7FrKBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ed:5d:1b:5c:50:8c:ff:f1:7c:64:1e:7d:b0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=f0342f5a9c690af0216e931abed0e8a62541aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:0f:59:1d:60:d7:dd:5c:58:3b:16:14:47:
93:21:48:a5:8c:31:4a:c2:71:f6:72:aa:12:7d:95:
a2:06:ff:31:d4:2a:dd:46:62:87:41:de:03:c5:5a:
bf:42:e3:39:39:bd:ff:29:f3:c1:8c:9c:54:20:1d:
f1:aa:7d:34:06:00:58:06:02:39:0b:f5:25:16:9c:
09:55:45:62:70:7a:16:b1:d5:67:c9:35:60:46:3c:
43:fd:4c:49:f7:02:70:7c:b4:2f:22:bf:66:c5:f7:
02:43:5a:95:c8:c5:47:7a:4f:39:43:26:9d:90:4b:
a6:00:30:b7:13:8b:81:a9:17:ef:63:ee:92:44:62:
05:3c:13:62:7b:39:da:b0:64:96:b3:fa:54:ef:73:
0d:a5:41:6d:7f:8f:a7:d4:61:84:e5:8d:5f:c3:d5:
e7:81:ab:a8:4d:50:43:ac:7a:ed:fd:9e:d4:36:c9:
f8:e1:5a:42:ca:8d:81:ce:0a:b6:6f:b4:d4:08:cd:
07:d2:cb:67:3e:33:aa:19:d3:96:a1:3b:2e:1c:4d:
fc:a3:32:75:0f:9b:13:8d:87:cd:d1:1b:4a:ff:e2:
b2:27:16:5a:cf:95:0e:cc:ba:b0:20:bd:f5:fc:5d:
33:06:90:6b:41:db:3a:85:0c:c8:2a:c0:48:f6:95:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:2F:5A:9C:69:0A:F0:21:6E:93:1A:BE:D0:E8:A6:25:41:AA:E1
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:b6:64:fb:41:1d:32:f9:e7:ec:eb:c8:12:78:2f:25:ea:
64:5a:b0:e4:11:d8:e0:f7:5f:c8:61:7b:6a:83:0e:85:a2:88:
dc:eb:10:8c:69:ce:0c:f1:0d:75:fc:a3:67:fe:16:ea:eb:83:
d0:62:0b:7d:a3:44:8e:61:60:2b:71:56:bb:17:67:16:bf:c8:
d6:89:d8:00:4c:6d:64:3b:22:0e:fb:b3:91:7d:97:ad:b9:e9:
21:46:9e:04:55:cd:44:ce:ae:ab:36:45:7c:71:47:bf:0e:16:
33:ca:92:91:be:f8:53:46:e7:c2:a4:8b:c4:d7:96:1c:27:16:
d0:16:77:fb:5b:c8:bc:95:f8:09:91:06:04:62:05:35:69:5f:
75:c5:91:1d:90:2f:20:45:a4:12:94:7e:c0:2d:27:f9:b1:72:
0f:69:d0:04:29:0a:1d:62:34:a3:65:18:9f:12:32:18:af:78:
e1:c1:f1:f9:81:df:e1:e5:07:f8:17:3f:15:39:99:ab:e4:ac:
30:54:be:05:b9:1e:98:d9:b2:b0:14:fb:c3:67:a6:c1:27:c5:
f6:2f:68:09:ec:0f:8f:d4:ce:2c:24:76:6c:87:1a:1f:45:69:
7f:e6:4f:d0:37:63:7d:ad:44:b4:72:58:a6:a7:4c:17:0a:65:
cf:7c:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:26 2026 by rpki-client