Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: g7wIbXVJ+Firmn6wSfoIJ+WILtSxvVtQZyT3As+8ZH0=
Subject key identifier: 2A:42:CC:E9:99:28:D9:A1:00:64:AE:76:23:AD:01:E0:AA:A7:6C:B0
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019D375291B558C6A692DDFF4E0F065376C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 0690
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: Fpp1Hu1ZWzAwnwuK376OAyXWLTM/XDgo4Y+VuigOgjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:91:b5:58:c6:a6:92:dd:ff:4e:0f:06:53:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=2a42cce99928d9a10064ae7623ad01e0aaa76cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:43:32:31:85:68:40:d0:bd:4d:09:fa:0b:
c6:5a:c9:b2:dd:d3:a6:ab:d3:c3:7b:96:ef:e8:2e:
fe:43:a0:61:4f:8b:6e:2e:e9:8f:e0:76:a3:3d:b2:
f2:d4:97:ea:5f:37:e4:4c:5e:e8:4b:55:ed:6e:26:
22:2f:8e:5c:f5:ce:9d:e7:b3:ef:3b:53:7d:21:ce:
b6:6c:08:35:b1:42:a9:5f:2e:c0:d2:4e:98:bc:a8:
04:e4:13:6e:eb:99:4a:34:a1:75:d8:e2:e6:82:10:
74:4b:07:b3:f4:6b:e2:a4:3f:c5:df:09:0b:c2:4b:
22:45:1e:2c:14:6a:f5:a9:4b:83:1a:f4:47:43:ae:
99:fd:f4:11:9c:88:0f:1a:aa:b5:42:c2:3e:a9:88:
6d:e6:d5:e7:79:c1:83:6b:18:a8:66:51:49:a4:13:
04:9d:b3:b6:93:5e:74:bc:9d:3d:51:d6:a9:5f:a3:
74:91:78:2b:d6:8c:d3:fd:70:53:23:b8:c6:fc:3d:
d0:d8:a9:aa:40:f2:85:13:da:a6:34:28:7e:c9:e2:
e3:d2:2c:ed:35:42:31:4f:cb:d8:66:5a:07:48:35:
97:8a:d4:65:bc:14:39:f1:a4:4e:4c:7c:9d:87:d7:
03:8a:5b:e5:d8:dc:8e:f2:a7:d8:fa:16:19:e3:bb:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:CC:E9:99:28:D9:A1:00:64:AE:76:23:AD:01:E0:AA:A7:6C:B0
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0a:c4:fb:4e:01:ec:65:1f:2c:da:1d:7d:e2:cc:53:3e:9f:
a1:21:fc:10:e1:d9:47:7e:a8:49:22:27:56:37:a7:e9:76:15:
dd:6b:e1:17:48:d3:00:b7:21:d5:7e:cf:fe:aa:29:65:bb:15:
35:f5:a0:a6:c4:b3:e6:31:ed:3a:f9:98:36:9c:01:70:79:be:
cf:be:92:df:17:20:e2:f5:da:59:b0:f8:6b:f6:e5:48:fe:8d:
1d:55:7d:c1:fc:d4:82:f2:e3:14:3a:41:c8:f0:1a:e7:26:81:
3b:2f:be:a7:c1:36:e4:56:2c:88:88:4b:29:11:2e:35:5c:b2:
f8:4b:80:60:c9:04:ef:49:85:00:eb:f0:a2:71:cd:23:39:12:
47:75:ed:a4:5b:ff:3a:51:d9:7b:28:68:01:91:94:4f:6d:9e:
69:dd:84:cc:3e:1b:c2:96:2d:90:ed:95:a0:54:12:d9:6e:87:
b5:1b:2c:46:39:74:d1:b7:d7:bf:77:e5:d6:ea:4c:db:a2:6f:
86:3e:fa:15:f6:eb:68:0a:5c:c6:13:62:b8:e6:8d:f7:27:18:
88:6d:b4:f3:c1:94:42:b0:6f:96:8b:5f:fa:59:f4:1c:89:df:
13:00:01:fe:f3:8b:69:08:02:12:dc:08:5a:d5:d7:e1:c8:db:
6c:55:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:59 2026 by rpki-client