Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 34RQBVWoQ49imSkv3oGJ3323u2b0fy//u1XvECKRE74=
Subject key identifier: A4:B8:36:1F:E8:95:07:22:0F:9A:27:E3:8C:8B:97:6C:2B:D1:56:53
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019CE5C8C60E2CEA1C529796D7911F51B3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 12CA
Signing time: Fri 13 Mar 2026 06:01:06 +0000
Manifest this update: Fri 13 Mar 2026 06:01:06 +0000
Manifest next update: Sat 14 Mar 2026 06:01:06 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: hYeFexoomkvRM4R9YzQ7au0H3WNMJkAdTQ5Kk6wGEZs=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:c6:0e:2c:ea:1c:52:97:96:d7:91:1f:51:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Mar 13 06:01:06 2026 GMT
Not After : Mar 14 06:01:06 2026 GMT
Subject: CN=a4b8361fe89507220f9a27e38c8b976c2bd15653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:14:a6:20:e1:43:52:e7:fd:ca:dc:df:22:
c8:09:bf:29:09:a5:d2:8a:e4:d2:64:bd:e3:aa:eb:
b8:f0:a9:d6:01:ee:fc:58:55:e6:6c:34:1d:58:8d:
d2:fc:f2:ec:b6:50:5d:bf:c4:4c:bd:ed:a5:f6:98:
4a:9a:3f:7a:01:02:93:fd:6d:bd:7b:a8:ff:de:5b:
da:01:e7:02:97:1b:e9:ce:2e:3f:22:30:73:00:c2:
93:11:9c:0c:95:94:0d:b8:be:11:cc:36:2f:07:52:
77:23:c3:30:ff:33:bc:7b:cc:e0:9d:20:b2:84:fc:
8e:3f:35:94:76:95:0b:f5:78:3d:71:f8:cb:c3:11:
b5:df:58:a6:f7:57:f3:12:da:d3:75:1d:09:02:c1:
81:de:da:3f:f1:f3:30:8a:6a:26:c7:b4:4c:df:42:
e3:d1:f3:ea:5d:bf:92:8d:2d:c3:8d:2f:9c:46:74:
43:44:62:76:3b:c6:32:f8:66:50:d8:62:da:18:8c:
03:1c:90:e6:4b:f4:cc:f1:f1:af:cc:44:2e:05:4d:
fa:09:a7:b6:e2:a0:0b:4c:1b:b8:02:8b:7b:c7:59:
8e:47:a0:44:36:2a:2a:55:6a:f2:09:43:7e:47:a7:
1a:8c:77:93:66:3c:f9:54:36:6a:28:e1:60:aa:78:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:36:1F:E8:95:07:22:0F:9A:27:E3:8C:8B:97:6C:2B:D1:56:53
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:de:a0:35:55:20:eb:a8:e2:40:cf:ac:ea:21:98:58:63:0d:
dd:fe:8e:60:1e:47:e7:43:44:02:e2:eb:e0:a5:b1:32:ef:8e:
e4:02:42:97:e2:b5:05:69:ee:52:95:a4:1a:03:1f:f0:85:ae:
6a:95:ce:cf:ed:b9:1a:b0:08:75:8e:7a:45:8f:8e:b1:0d:b8:
49:2b:92:5f:53:5f:56:01:7a:bc:0a:c9:b9:dd:b3:26:4b:71:
22:22:fc:65:6b:16:43:41:b4:39:a5:26:79:41:6a:9f:36:48:
d9:50:11:ad:1e:10:02:38:b3:ea:a9:da:57:18:66:66:18:4f:
e0:a6:d5:69:49:84:67:38:c3:bf:2c:a9:9c:3f:84:80:2e:5b:
39:19:8c:c3:17:6b:67:89:b2:2c:a4:c4:af:f4:14:3b:b2:03:
58:43:13:bc:1b:f0:4e:99:b2:3d:38:9c:49:e0:02:bc:3d:09:
90:5c:b7:6f:a1:dc:2d:cd:dc:27:7a:d9:0c:a8:61:a4:1e:b9:
d3:e6:d8:84:f5:26:bc:4c:70:ef:b5:38:e5:c7:b3:8f:42:79:
11:83:ea:a1:c1:70:e9:aa:e4:66:ff:c4:9d:36:d3:af:06:bd:
55:22:3a:61:3d:82:ce:b5:87:de:40:f4:bf:da:71:53:a1:2d:
b2:90:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:55 2026 by rpki-client