Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
File: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft (raw, json)
Hash identifier: rdK0s3F0hJzhDJa0Szv+mnY5QnlDAwuoWlfIcDOqa+k=
Subject key identifier: 33:62:40:4D:09:E3:FB:D2:1C:51:08:94:C6:4A:AC:BC:BB:0C:49:02
Authority key identifier: F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
Certificate issuer: /CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Certificate serial: 019D382E5C100C50293D7A00C7E4DAD3AAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
Manifest number: 8C
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: 4hUo9slD_WYqWgnSusuLi5aYgKk.roa (hash: Xmxn5Zro/2pB9LNtV2YLqCKLpWDCyVWpsb7YiPBgbM0=)
2: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl (hash: d7LvlcYPX4iD/B5n1j9os6MK5DajgOGbKNJIZ9PhT7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5c:10:0c:50:29:3d:7a:00:c7:e4:da:d3:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=3362404d09e3fbd21c510894c64aacbcbb0c4902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:2c:18:0b:9e:70:4a:4e:9f:f9:58:a2:aa:
75:7f:72:29:a2:c5:d7:28:3e:aa:9b:e0:74:73:a4:
b2:21:46:e5:2f:ed:42:69:1f:e7:a4:38:20:97:48:
e9:4e:96:22:9a:27:02:70:d4:cd:0e:f4:93:51:49:
74:15:8e:00:df:37:84:b2:d6:48:20:d2:3f:0d:76:
8f:45:ea:3d:22:66:43:da:f8:45:2c:e4:28:8f:53:
24:3c:8f:7e:32:53:62:d8:24:77:d5:c5:8c:8d:2a:
07:34:1c:bd:6c:32:69:76:52:54:b7:e5:52:d0:d6:
41:a3:ce:17:9e:db:88:eb:c4:28:93:9b:35:5b:8b:
86:e9:11:a5:ab:85:27:02:47:95:02:5f:56:30:a2:
c4:08:4f:fc:47:ed:48:37:70:a1:6b:eb:d2:48:79:
17:6f:6b:85:be:fd:2f:23:25:1b:b7:e7:30:ec:65:
99:ef:7c:e7:53:ff:60:44:d4:1a:6a:f3:be:d6:ac:
36:19:84:bb:72:53:b7:29:ad:eb:3e:72:23:e1:46:
0d:95:9f:33:78:4b:db:14:db:42:87:07:76:02:0c:
c1:7e:ac:bd:f1:37:12:28:a8:19:fa:b7:4c:74:4c:
b5:74:4a:c3:45:12:5c:86:57:83:a7:dd:75:1c:44:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:40:4D:09:E3:FB:D2:1C:51:08:94:C6:4A:AC:BC:BB:0C:49:02
X509v3 Authority Key Identifier:
keyid:F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:59:74:b2:98:a3:2e:7a:f6:7b:f6:15:72:b7:ff:09:7b:
f4:b4:9c:45:19:9b:a4:8a:a3:1a:50:d8:0f:94:40:7c:8a:c3:
a2:a9:27:9c:54:db:3a:3a:6a:d8:4e:60:c7:36:95:12:e8:b3:
bd:61:f6:a0:90:e1:ee:ef:46:9a:80:ab:ca:a6:59:35:7a:00:
9d:d1:d1:3d:ea:88:cf:76:9a:df:1e:90:f1:0a:04:d3:bf:97:
89:79:e2:cb:09:da:6a:cc:0e:fe:fe:85:43:95:97:03:a1:e9:
df:b7:13:dd:ae:ac:72:f0:11:5b:fa:08:60:48:c7:00:f0:f6:
83:8a:1a:44:bb:26:ad:4e:6f:62:f1:4a:1f:ca:0b:2c:82:66:
a1:7b:21:43:96:a1:c7:18:a2:c5:94:21:e2:af:5c:5e:d3:1e:
93:01:de:25:60:2f:60:e3:0b:cc:dd:f6:bb:9f:95:b2:4b:11:
df:39:ef:8b:4d:2d:36:48:90:8e:95:73:87:e0:8f:8d:04:36:
b6:87:a6:a8:fa:a6:57:7b:24:2f:e2:1c:4b:5d:24:11:ea:26:
11:b1:58:1c:d7:47:c2:09:a7:31:03:3e:f9:b4:89:55:03:ce:
1b:fa:4c:1b:03:5a:bd:9b:53:03:fc:55:f3:ff:d0:80:3b:3c:
e4:e8:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:40 2026 by rpki-client