Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: PIufU00pcR7cOXhuOw+XIzDCZVXaFUE9kGnM9sWXP50=
Subject key identifier: C9:98:99:FC:0C:7E:C8:1C:5C:A0:C9:DD:14:99:65:64:D0:3B:14:7D
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019CB3257EE1199A024A4EC77A722D726FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0509
Signing time: Tue 03 Mar 2026 10:01:44 +0000
Manifest this update: Tue 03 Mar 2026 10:01:44 +0000
Manifest next update: Wed 04 Mar 2026 10:01:44 +0000
Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: nLMsNjH6cOLE5yjd+Ntxv1SJUzk4AFBwq4L7wlIl+IM=)
3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:25:7e:e1:19:9a:02:4a:4e:c7:7a:72:2d:72:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Mar 3 10:01:44 2026 GMT
Not After : Mar 4 10:01:44 2026 GMT
Subject: CN=c99899fc0c7ec81c5ca0c9dd14996564d03b147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:01:1c:f2:c8:db:95:5f:0f:83:10:18:fb:
2a:15:e8:5c:74:3b:45:ee:94:a0:6d:54:fc:d9:5b:
35:4a:89:34:ea:64:d5:a7:2a:14:3a:ee:bb:c9:5a:
2f:74:1f:87:58:a4:51:c5:2e:60:a9:2a:74:4e:ee:
aa:d0:be:21:ee:b3:b8:97:04:2f:ab:be:37:f8:64:
8c:a1:64:69:30:5d:68:72:ae:2f:ac:84:5d:25:ca:
53:4d:10:63:f0:0e:fe:9d:f6:78:c4:06:0e:06:79:
f5:0b:52:c8:5a:d3:bb:0d:e2:07:d8:78:a1:cd:70:
af:5f:6d:1c:77:e2:90:90:fc:7c:1b:17:ad:dd:c2:
a1:74:26:75:f8:1e:b0:39:ad:7f:54:42:4d:c5:95:
f9:ef:a5:34:8b:ff:ba:2f:29:bc:93:68:14:ed:28:
59:3d:05:3c:de:2b:30:17:64:06:a2:ae:b0:52:5c:
f8:e0:3c:7c:b1:5b:1c:03:34:31:10:c8:0a:3d:29:
85:5f:86:d8:58:7c:f0:ac:be:a1:84:0f:64:dc:30:
d0:0a:63:e2:b8:3f:33:e1:dd:22:e7:3d:d3:86:d1:
f1:37:cc:6c:28:fd:19:ac:7f:7f:b9:1e:c4:9e:95:
fc:d6:ad:d8:75:8d:16:2b:33:49:72:32:65:2d:79:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:99:FC:0C:7E:C8:1C:5C:A0:C9:DD:14:99:65:64:D0:3B:14:7D
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:1f:86:60:15:63:c5:8f:08:63:cd:a2:29:1d:22:35:15:
73:80:36:3c:1a:5d:df:09:53:18:e9:1a:49:ee:b4:4f:39:39:
98:e5:87:07:8e:eb:29:a6:30:33:ae:8e:16:61:f0:7e:ee:ef:
e8:51:f2:a7:e7:96:f7:9b:c3:67:dd:9f:7b:f8:96:15:14:05:
c1:b8:74:ee:98:86:8b:f7:01:0e:5e:64:e4:12:dd:9c:d6:b6:
e9:10:e5:0a:42:a5:71:57:dc:73:7d:b9:6b:74:75:d1:a7:7c:
9e:86:1a:ad:ec:2a:6c:83:19:9d:5d:fa:81:0b:b0:1c:f8:5c:
48:03:93:a2:39:16:75:e0:a0:1b:85:be:9a:0e:89:5f:01:41:
9e:65:4b:1c:c1:eb:ed:a8:6f:a1:a0:7b:28:32:03:a6:b9:62:
02:96:5f:a0:e7:7a:89:6d:27:bb:27:bf:21:38:01:bc:17:f5:
68:54:52:b7:dc:17:56:5f:da:be:ce:96:8f:d0:74:59:e8:e8:
e9:37:77:03:8e:7d:7e:15:03:d8:b9:12:cc:f4:de:cb:c3:6a:
de:1e:6d:dd:c6:39:c8:91:0c:95:64:84:3f:4d:be:b1:82:23:
9a:f8:33:40:11:08:76:bd:0b:02:c7:bc:2a:71:ec:c0:68:a4:
6b:33:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:57:54 2026 by rpki-client