Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: bLceUg5w7OJ0F7LtHnbyBAFuXRKqR3Xhi3vk4UPjHHw=
Subject key identifier: 90:E5:75:27:D5:5A:46:4B:C4:54:57:D7:4C:6D:FB:DE:CE:D5:38:10
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019D3752305A49D36E6C10B898FE1B1CB86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 02:00:26 +0000
Manifest this update: Sun 29 Mar 2026 02:00:26 +0000
Manifest next update: Mon 30 Mar 2026 02:00:26 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: SLSepMAFaT4E/zAMXDUw1G5d/Ve6Mw7547FAn1tZ9ag=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:30:5a:49:d3:6e:6c:10:b8:98:fe:1b:1c:b8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Mar 29 02:00:26 2026 GMT
Not After : Mar 30 02:00:26 2026 GMT
Subject: CN=90e57527d55a464bc45457d74c6dfbdeced53810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:7d:fa:28:de:99:b7:e9:a5:3a:82:a4:4f:
a1:09:27:e1:ce:48:4a:4a:d0:e6:c2:b4:5b:ba:f2:
1a:4e:01:7d:48:c5:57:a8:3e:63:b8:65:8e:2a:43:
0a:a7:3d:95:42:ea:d5:c5:f3:dd:ec:4c:ba:4c:c5:
14:66:56:e3:90:bb:31:a8:f4:a9:eb:3d:95:d0:75:
5f:46:b9:e8:8d:a4:cb:52:be:c2:dd:16:8a:1f:3c:
ab:98:cb:8f:bc:ec:5a:67:b8:c0:06:d6:cf:d6:5d:
67:fa:e1:19:5a:3e:40:0d:00:60:0d:b3:67:51:0f:
7f:e7:97:35:54:f6:59:c1:04:9a:7d:b4:2c:f4:08:
e4:b2:e7:af:75:91:1e:9c:48:1a:70:c5:67:81:25:
d3:dd:8f:a8:d2:03:58:54:8a:4d:e8:4d:50:72:79:
f5:da:aa:49:94:2a:ba:20:e5:f3:64:48:7d:4a:b4:
78:ea:89:11:84:59:29:5c:c9:bb:7e:4e:f7:8c:5d:
9c:0b:49:26:ed:86:47:55:95:a4:28:58:24:1a:46:
e5:da:10:03:44:55:74:94:fd:ea:1e:be:72:01:e3:
22:91:02:ed:48:af:3f:a0:83:20:88:5f:ef:fe:c4:
50:eb:34:ff:f3:3c:1a:a3:e3:a0:26:5a:a4:cc:ee:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:75:27:D5:5A:46:4B:C4:54:57:D7:4C:6D:FB:DE:CE:D5:38:10
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:2c:75:24:63:12:ec:69:d5:ef:c3:21:4d:c3:6e:8b:1f:
7f:09:dd:c2:08:18:37:de:63:93:41:15:3f:04:56:cc:88:1d:
8e:b9:99:e5:b0:04:7f:ac:f5:0e:45:37:9f:ae:11:73:c4:e8:
d1:96:d8:07:69:0b:56:d4:0b:9c:69:c8:ef:11:fe:4a:54:2b:
52:7a:d1:f3:6e:df:5a:88:db:15:04:70:30:97:e6:4f:ff:30:
80:be:21:de:02:c7:07:00:76:d4:a2:35:52:b6:3d:bc:9d:da:
21:69:23:5d:1f:0b:6f:e9:c0:e8:c1:c5:af:3d:0a:2c:98:e2:
ad:43:d5:1c:0e:57:fa:2b:3e:d0:86:0c:cc:9c:5f:4b:61:6f:
bc:a9:5b:ce:d8:7e:9e:61:5a:69:03:8b:65:0d:d0:d9:f6:ae:
23:26:ed:1c:07:f0:3d:8e:ea:e9:50:a7:c5:18:2f:2d:80:0d:
ca:05:a7:d4:a9:33:a9:b7:84:43:4b:05:3e:d6:82:b0:e7:23:
93:76:81:5a:fc:0d:35:fa:66:f8:21:df:37:b1:7e:bc:d5:6e:
85:de:65:65:83:a6:d8:66:3f:17:29:9e:9d:3e:87:25:68:02:
1d:98:5d:74:39:2a:2f:a6:a7:96:8e:9a:ee:1a:4d:77:65:39:
e2:83:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client