Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: pLuvxVonN34Doxz/1ulbPDIAGX7NCtQLH9rD/NXK8KU=
Subject key identifier: B3:22:76:D8:D1:1D:04:E3:4A:44:BE:79:26:B2:CD:98:20:D5:73:98
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019CE636A397992B73C2DEABBF4A5A6AD0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0E6B
Signing time: Fri 13 Mar 2026 08:01:06 +0000
Manifest this update: Fri 13 Mar 2026 08:01:06 +0000
Manifest next update: Sat 14 Mar 2026 08:01:06 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: TIqiCpkghzPdOgfZkYAEOPpM8P7s8RlXlAWMlpuF07M=)
2: EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (hash: Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=)
3: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:a3:97:99:2b:73:c2:de:ab:bf:4a:5a:6a:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Mar 13 08:01:06 2026 GMT
Not After : Mar 14 08:01:06 2026 GMT
Subject: CN=b32276d8d11d04e34a44be7926b2cd9820d57398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:97:b2:28:10:95:fc:d2:f9:c7:d4:7a:25:
1e:70:63:c7:4c:04:05:f6:be:db:6b:f7:84:37:4b:
ee:3e:c3:bc:6a:ac:13:83:8f:e6:06:bd:39:a6:ff:
a5:7c:64:9e:63:68:9c:ae:a5:6b:68:04:09:32:63:
84:d5:1c:f3:24:38:14:94:69:b1:7c:1a:e6:21:92:
12:66:83:c2:bd:fb:02:7e:1b:28:13:60:12:c1:a2:
b0:d0:91:a1:a8:fd:e9:b6:f3:fc:fa:c1:8a:f1:8f:
3b:0b:c6:d2:76:12:7f:82:d9:b8:82:7c:87:87:b9:
78:37:2f:23:1e:9d:9a:75:6e:51:04:83:f8:b3:f4:
b5:66:b1:e5:24:91:af:99:65:68:9a:68:5d:0e:c7:
e9:7d:15:19:e0:d7:85:e6:e5:92:3f:a4:2a:70:41:
a2:bc:25:53:76:a3:d4:0b:82:9a:43:fa:c0:25:f1:
aa:61:f2:71:d9:68:59:1b:ef:8f:b3:0f:46:04:b2:
b1:23:c0:26:eb:a8:aa:c8:73:be:7b:6f:28:e7:6d:
b7:1c:d2:2d:05:bf:4c:74:ed:4f:78:4a:43:94:ac:
f4:3f:39:c7:43:15:84:18:3d:43:38:06:3c:29:01:
90:d8:0e:c7:a5:64:56:d6:7c:9a:63:e0:e7:d5:39:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:76:D8:D1:1D:04:E3:4A:44:BE:79:26:B2:CD:98:20:D5:73:98
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:58:85:c3:54:14:07:7f:3c:15:01:bb:eb:fc:12:f8:5c:
84:7e:54:72:12:1b:28:52:da:ba:79:fe:f1:5a:09:88:8f:2e:
a4:a6:5b:a5:1f:4a:af:39:9b:c7:4e:38:12:c9:03:a3:f6:bd:
80:93:e1:47:f2:1b:47:d8:13:95:f3:51:da:3d:15:a4:a1:12:
ab:b9:86:01:05:9d:d1:b3:39:36:1f:0a:66:6b:0c:ec:b2:54:
86:1b:68:f0:b7:1d:e7:2a:1d:92:12:7a:ce:e3:de:a4:e5:e8:
eb:fa:f8:0b:30:23:5a:c5:77:60:93:c4:f0:f3:a4:76:b2:cd:
4a:b5:ef:88:f7:9f:0d:39:e1:4f:66:08:fb:5a:99:10:9f:65:
a4:61:82:eb:28:3f:d9:af:f1:9d:fe:5c:f2:35:45:d8:6e:04:
6f:fb:9e:8f:61:a3:b6:22:b2:5f:07:2a:a2:27:91:b8:0f:3e:
a0:66:f3:71:a8:ee:ad:0d:62:71:36:f5:fa:ab:a6:7a:72:e2:
dc:08:2a:4e:40:96:f6:4a:18:a9:25:cd:b6:38:0f:fa:98:77:
30:48:ee:d1:11:2d:0c:08:c9:46:9f:ea:a4:df:2f:9f:75:72:
a4:40:c9:5c:a1:d4:ba:f0:bc:b3:78:a9:90:cb:e1:22:f5:9c:
e4:be:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:46 2026 by rpki-client