Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: 0AJGmcB7d/JyAx3ZBvhxSRmRH8t7fE5/ELQnV9FSgFw=
Subject key identifier: 0C:C8:CB:62:D8:58:DD:6F:62:10:7D:C4:7A:26:33:44:D7:C9:6C:04
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019CE55B2CEBA3508935FF908643E5885861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0925
Signing time: Fri 13 Mar 2026 04:01:23 +0000
Manifest this update: Fri 13 Mar 2026 04:01:23 +0000
Manifest next update: Sat 14 Mar 2026 04:01:23 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 3s+3kB7l6C36YUcVKC58VX3LuE7sc8y8z8cNKJ/dclo=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:2c:eb:a3:50:89:35:ff:90:86:43:e5:88:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Mar 13 04:01:23 2026 GMT
Not After : Mar 14 04:01:23 2026 GMT
Subject: CN=0cc8cb62d858dd6f62107dc47a263344d7c96c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:55:66:7e:89:bb:4c:27:23:f5:f6:8f:5c:
ee:fd:fc:f2:5a:2d:57:f1:be:f6:60:2a:3f:2c:28:
a7:65:b0:be:6a:da:0c:4c:3a:51:b3:7b:e4:b6:c3:
7d:63:6a:35:b8:d7:2a:a6:67:62:71:47:f8:70:b9:
2c:87:90:41:b3:6d:bf:ea:13:27:f5:d2:bd:d1:08:
fd:88:53:f3:03:cc:d1:59:69:30:73:97:06:48:9b:
81:a7:c5:f7:41:24:9e:ed:b5:c9:db:ff:78:1c:48:
45:7f:d4:46:37:65:2d:4a:c5:f4:67:54:ce:79:df:
28:4e:78:77:e7:4e:2a:d0:a2:52:84:6d:e6:28:b4:
cb:2f:33:96:4c:b5:3c:fb:be:c4:5d:a8:d4:dc:4b:
e4:3f:31:06:2c:75:cb:26:d1:01:d5:d1:a3:4f:03:
d8:44:22:d3:c6:62:1d:8a:aa:ee:87:e5:93:e6:00:
a1:8d:ec:4c:c9:7d:87:8c:02:9e:68:5f:47:c2:f6:
2b:2d:82:5b:85:13:43:2b:3b:28:c5:64:e7:22:27:
79:62:e9:77:8f:ef:86:37:25:3f:11:a0:bb:2a:a3:
f9:04:82:e1:b2:b8:21:a7:ad:08:9f:dc:c9:c4:1f:
f9:24:11:b0:d3:6b:29:79:3d:4e:53:2c:dc:d2:3a:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:CB:62:D8:58:DD:6F:62:10:7D:C4:7A:26:33:44:D7:C9:6C:04
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:62:1b:dc:4b:a2:83:10:5f:fa:24:c2:7e:f1:96:aa:df:5f:
a6:a3:88:fc:6c:a9:1d:17:89:b8:f7:c4:27:2c:53:61:84:f6:
5b:72:34:44:58:85:35:cf:74:b2:ac:8c:7f:e1:78:20:45:26:
6a:b4:56:f9:12:df:7c:9b:28:47:52:ce:fd:c9:2a:5d:52:b0:
1a:c6:fa:69:e7:a9:4c:39:d1:86:d7:04:84:f1:51:8d:56:ff:
93:bf:e0:62:3b:de:9c:aa:5c:1f:1c:89:33:33:bb:a4:2d:27:
5e:e5:fa:70:c5:64:07:4a:15:d4:9b:c8:fa:68:f4:89:00:2e:
a5:56:bc:63:2a:1e:61:3b:87:b2:58:b1:3e:7e:0d:b7:ed:b1:
05:80:e9:5c:44:99:75:02:59:d9:9a:d1:88:7b:82:e5:ee:a3:
7f:7a:aa:b1:85:4e:14:1a:52:e9:0a:29:62:77:63:0c:ae:6d:
5b:77:ee:e8:6a:49:b2:b1:46:86:42:82:8d:31:f6:07:10:0b:
68:50:24:79:55:01:7a:2b:00:46:aa:1e:04:8e:62:ce:cc:54:
ef:99:ed:df:ff:0d:c6:d2:81:7a:90:e2:a1:43:6e:b9:7b:c5:
51:5b:73:50:6e:4c:56:d2:d8:4c:1e:83:76:46:92:b3:e4:7a:
a4:75:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:56 2026 by rpki-client