Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier: iu2w533+WUwOlWTQOa3BBfVeKLVKqJY4KJfqkMMANM8=
Subject key identifier: 51:FF:8A:22:BC:E6:0E:22:B5:FB:89:CF:BC:FC:8D:5E:77:AF:95:9E
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 019D3A1D05080C9F1A3719D106D359BA40FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:01:13 +0000
Manifest this update: Sun 29 Mar 2026 15:01:13 +0000
Manifest next update: Mon 30 Mar 2026 15:01:13 +0000
Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: 40F0n7KkGpPORkeFRKCaxPUb9VjFHYmQovOqaQrvHy4=)
2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:05:08:0c:9f:1a:37:19:d1:06:d3:59:ba:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Mar 29 15:01:13 2026 GMT
Not After : Mar 30 15:01:13 2026 GMT
Subject: CN=51ff8a22bce60e22b5fb89cfbcfc8d5e77af959e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:dc:da:fe:34:00:6c:dd:9b:74:73:97:ed:
82:a0:de:35:0e:4c:f3:92:a5:89:69:46:ca:33:55:
6b:e8:01:a9:28:f6:23:b8:85:94:4f:70:bc:8c:d0:
ba:07:e1:fe:0c:4d:1e:a3:3a:dc:30:c9:09:2a:02:
69:63:84:ea:c8:f7:c4:bf:96:2d:11:3d:3c:ce:2b:
db:c9:c4:41:a6:48:39:a3:99:c0:49:91:0d:3a:36:
c0:de:94:e0:de:6f:db:1f:31:1f:30:48:9f:d9:f6:
66:3e:c3:a0:76:01:dc:35:81:06:22:b8:7b:97:20:
08:04:03:e1:5c:ec:7e:f6:98:31:7d:db:12:fb:81:
c1:27:2d:12:51:63:e3:d1:1d:3c:9d:59:aa:0e:3d:
5a:77:aa:05:04:d4:16:f4:65:54:2d:bd:d6:16:cc:
54:53:8a:3f:54:be:a0:d4:17:7d:4f:b5:25:7c:be:
99:1b:d5:a1:f4:45:03:54:f8:0f:72:e8:bd:2c:b0:
9a:be:9f:f6:c8:31:c8:a6:da:94:f6:61:b2:7d:bb:
7d:aa:4b:74:22:75:8b:be:e8:fa:98:31:ea:93:55:
3d:9d:af:40:48:a7:59:3c:6b:1a:e7:9a:1b:f3:0e:
1e:2d:34:37:89:4c:95:17:4b:92:df:9e:73:83:b2:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:8A:22:BC:E6:0E:22:B5:FB:89:CF:BC:FC:8D:5E:77:AF:95:9E
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:24:c6:be:7f:ae:0e:7b:02:8e:86:4c:e6:0a:52:6f:e9:6a:
0f:da:c7:22:bd:04:cf:0d:7f:ea:f4:ea:06:c7:5b:be:99:fc:
c6:5b:68:b2:0b:97:bc:a7:09:d0:c2:a1:b0:1d:9e:8e:82:c8:
72:e7:c2:e4:cc:b5:2b:e4:5f:37:c7:38:7b:72:37:d0:cb:b0:
a2:64:7d:40:d5:dd:a5:ae:db:66:06:fd:e8:b9:e1:81:cc:c9:
ff:21:2b:ab:61:ac:fe:11:3d:e9:ff:10:28:f9:bc:65:c2:36:
e7:04:d9:37:38:a8:1d:e7:91:ed:cf:3e:5f:dd:2f:bf:a8:0d:
6a:64:8d:8e:4e:54:b8:d1:96:60:88:24:17:42:ad:94:90:7b:
39:af:0f:4c:b5:7a:67:55:f9:99:ec:d5:4a:3e:cb:d8:f1:ca:
c3:e6:9d:1e:af:d7:d4:82:a4:a9:3b:e3:2b:93:02:d1:c1:07:
db:32:bf:77:ae:cf:ca:03:d9:9d:8c:b7:78:15:0b:47:c2:4e:
ea:7a:f0:9f:a3:52:8a:1d:a9:e7:c8:a8:22:3e:55:34:82:c3:
e5:e3:5b:e1:9c:ba:a9:ba:e2:bb:28:d1:68:a8:ed:2c:6c:78:
aa:1f:69:b4:33:1d:e2:7e:ab:8b:37:05:3a:8c:95:f7:72:65:
e1:d0:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client