Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: 1qfl5lcXE4fVEsmQ5v5MRIBJ1iU6Cdu84WXs+DvnyV8=
Subject key identifier: 33:23:30:6F:81:AC:88:F8:15:A6:E7:F5:91:B2:AF:39:0F:21:4D:25
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 019D389C0B36BF8F9396F7D5D5BBC814FEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 038B
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: 1VkSj3GMUyskxJKh/TyjTW7fyU46TtIP9LweuklDHz4=)
2: w_cDoBQm48qO3UJDie6dGD-GT6A.roa (hash: 4d0oLWhWZ7o8XZ0xXiTGwVR/Fkht5a6EInFhOOT/M94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0b:36:bf:8f:93:96:f7:d5:d5:bb:c8:14:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=3323306f81ac88f815a6e7f591b2af390f214d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:26:26:2c:de:44:74:2b:95:06:ee:02:b9:
72:0b:cb:bb:ed:86:50:bc:27:3e:90:41:b6:2c:d9:
ee:8a:47:b6:fd:d9:d5:f7:24:8d:cf:7b:07:b9:8a:
02:66:24:61:71:c0:a8:73:be:b7:28:1b:c2:71:ce:
f8:5f:71:36:40:42:e3:27:cc:c1:88:4b:fa:7d:b9:
e7:c0:e5:6e:14:8b:7f:3f:7b:ee:cc:04:da:89:ca:
15:93:13:bb:6e:cc:30:d3:f1:ab:47:87:0c:28:d9:
7b:6f:8c:68:16:61:b7:12:59:b0:69:b2:cb:12:29:
0d:8c:7d:4d:dc:1d:27:01:8b:9d:e4:05:30:3f:9b:
16:8f:62:19:6d:48:45:02:56:44:3b:31:cb:bb:12:
3c:a5:c3:62:a6:81:fe:6d:60:17:f7:d1:14:5c:10:
d7:5b:72:8f:e5:9a:1b:10:a2:27:82:d2:3f:2c:b8:
ab:da:54:ad:a8:69:07:8d:b1:0f:12:c5:06:02:9f:
3a:46:b1:cb:e7:b0:6f:2f:70:5f:68:20:3f:e6:43:
8e:6e:8c:f7:6e:ba:0c:74:9a:32:cf:11:23:99:17:
e2:8b:95:c2:27:8c:a1:ef:32:cb:42:2b:00:5d:67:
da:4a:25:a1:29:7c:f9:48:63:1f:f1:32:f6:3b:77:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:30:6F:81:AC:88:F8:15:A6:E7:F5:91:B2:AF:39:0F:21:4D:25
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:10:40:df:2c:39:45:77:fe:38:37:b1:bd:2c:6f:90:27:
40:5b:b4:98:b3:e8:1d:2d:61:13:2d:19:6f:b6:c1:95:99:be:
5e:46:a3:13:f0:4d:0e:11:b9:58:b2:1a:0f:14:88:f0:4f:df:
f9:e2:76:1d:40:02:4a:9e:a4:31:fd:7d:50:11:1e:15:16:c0:
f6:18:8a:37:64:f7:a2:1c:c2:0a:7a:59:cf:63:7d:a7:2b:60:
a1:61:dc:41:6e:af:7e:46:12:95:2b:16:bb:d4:e9:bb:e0:ec:
c2:c5:28:96:08:b1:01:0e:01:a9:f0:d8:bf:ac:47:81:9b:76:
66:e8:91:2a:e5:b1:df:b7:e7:8c:6f:74:56:9b:57:ff:31:2f:
f8:5a:35:4a:7d:4b:a0:23:46:97:8d:ba:2c:9f:f9:9c:47:2d:
d6:34:3e:45:d6:bd:10:d2:bf:01:a3:91:08:38:57:86:44:d1:
b7:8a:55:b4:7c:cb:4e:c8:2f:6d:ef:6b:53:93:9c:cd:69:05:
36:a9:08:6a:46:8b:2c:30:d2:94:dd:13:c0:b6:34:2d:f4:28:
b0:f8:4f:89:34:36:f5:29:82:8d:42:68:70:e4:da:e2:14:4e:
c9:73:47:ab:ff:12:b6:b8:96:ca:2b:c9:d1:1c:ed:60:5c:a9:
bd:0a:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:37 2026 by rpki-client