Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: c0bvcGC02grO2tnfzTKMYkQwcNM0qja8kV7JU5glX+c=
Subject key identifier: C2:C8:CF:F3:AB:FD:7F:36:DE:BA:C7:06:80:EF:11:96:79:A2:EF:F0
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 019D38D2EFFE522188D703D02586E504391E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 177C
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: 7KrFxuguLqHFfVcKr4FAcPS6zb9loRadt6tD8qB7fBU=)
2: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (hash: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc=)
3: SFE5HwFeeJrezj4ibh1knL4-c9k.roa (hash: sbuJSFJ3P5x9iliJOK4C/RfPfo5sFVvKp2ueiDAMwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ef:fe:52:21:88:d7:03:d0:25:86:e5:04:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=c2c8cff3abfd7f36debac70680ef119679a2eff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:ce:ae:a3:42:6b:48:49:65:68:3e:4e:ad:
c0:32:f4:cd:22:86:bd:89:eb:a5:b0:f8:d6:b5:3d:
1b:5c:23:3b:57:2e:29:55:d6:72:00:a8:d2:b3:6d:
7a:f6:6b:01:68:d2:63:b6:4e:a0:87:23:fb:7e:7c:
a3:c6:40:43:fb:68:e6:12:91:5f:9e:d1:47:d9:ad:
78:07:9d:1c:0c:29:0c:d1:44:e6:3e:8d:14:1e:3e:
51:ff:6a:d8:8f:6b:c1:34:3e:1f:58:61:e8:74:f9:
6d:4c:98:2c:f6:15:e7:3f:e9:fa:87:cb:aa:25:08:
82:fe:b7:26:28:99:da:a2:94:3b:df:1b:dc:51:59:
4d:b7:8f:23:9b:22:e9:10:0e:9c:ff:02:6c:a8:ae:
bb:bb:00:aa:f0:4a:76:26:2c:ab:09:e7:7e:86:5b:
a9:e9:69:75:03:2f:05:ed:16:e9:d7:ef:d9:23:b5:
11:74:72:4f:03:2c:d8:5c:9f:49:1e:5b:8f:25:c7:
8d:66:08:e0:9f:5d:10:1f:40:60:0b:f8:66:e0:9c:
71:62:99:5a:73:5f:56:b0:9c:c7:e3:87:4e:99:ea:
61:2c:7a:ce:43:95:ae:0a:f9:1b:b3:e0:22:59:95:
84:40:01:84:b8:b4:e9:f9:ab:74:ac:05:65:9b:c0:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:CF:F3:AB:FD:7F:36:DE:BA:C7:06:80:EF:11:96:79:A2:EF:F0
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1c:0d:d8:41:1d:4c:d6:3b:ed:6e:b4:51:61:f0:51:95:26:
9b:7b:be:f6:6a:d6:0a:5c:b7:0b:b4:03:74:41:e1:fb:7e:c2:
7c:3a:b4:ad:95:56:ab:b6:b9:9b:18:a0:9a:48:ef:a1:b5:e4:
7b:b3:2a:d6:4e:87:df:0a:fd:7e:5e:6a:06:9e:ad:b8:a0:3e:
f2:21:62:72:7e:cb:43:bd:f0:05:80:e1:de:34:04:85:2d:05:
e7:4e:93:78:88:9f:6c:83:09:b3:7f:9a:9e:96:e1:a9:ba:09:
a5:09:49:74:01:a0:1f:78:3f:44:e3:15:e9:8f:a4:55:1f:d3:
1e:9c:fe:e4:4b:32:2a:1d:1d:34:5c:cc:74:d9:58:46:a7:96:
62:07:76:59:77:a0:d0:1c:a1:57:ec:70:f2:68:ec:2a:4f:7c:
59:69:79:34:1a:09:44:62:c0:ea:98:84:e7:44:ed:5d:99:33:
0b:b0:12:11:20:3d:6b:e1:bb:c7:1a:6a:a6:04:39:99:e3:9b:
f3:a7:30:cd:7b:49:74:3f:a9:78:0e:07:e5:65:77:56:f9:9c:
02:17:22:ec:b3:f5:ca:e1:0d:93:9e:ae:28:0d:a1:c4:ac:b9:
14:58:51:27:5a:18:cd:fa:e7:55:d3:26:ec:ea:49:ce:67:ba:
40:48:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client