Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
File: El8g0e9f8vAdgiSGvZ7or01la38.mft (raw, json)
Hash identifier: SmLy6GFUKH+ryinvoSjLcNBVoeYco0xhvh0+0nAAvhw=
Subject key identifier: 93:54:1D:B5:92:A4:33:78:BB:20:3F:13:50:09:7A:93:EF:DF:D6:90
Authority key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
Certificate issuer: /CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Certificate serial: 019D37C0FF7B2E5118F6CDC6C6F5E8911565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
Manifest number: 01F2
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: El8g0e9f8vAdgiSGvZ7or01la38.crl (hash: 5hAkmdnygcjUzDriu5zPJoW2ovifud/D2zmX7d6E0AY=)
2: yO5VUy12ddh73zDCCV8z_vcmXj4.roa (hash: JXSS7iXS89n3AmF1lMYl9UTKNor1TEXY5nMl7r8w9ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ff:7b:2e:51:18:f6:cd:c6:c6:f5:e8:91:15:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=93541db592a43378bb203f1350097a93efdfd690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:8f:09:03:08:e1:43:a8:6f:df:17:a0:97:
98:29:31:1b:cf:46:dc:78:80:a0:98:c1:87:91:ed:
47:70:f2:0b:ba:7e:a6:b0:5c:e5:ee:04:9c:5d:21:
a9:48:a6:3f:b7:cf:3f:82:ee:23:c1:08:6f:47:54:
bb:ee:04:fa:61:7f:be:df:8d:58:c2:6a:67:5f:13:
48:8a:f3:d2:42:4e:76:ea:90:8d:e4:76:ed:f1:61:
b6:22:f7:25:f8:bd:f5:97:dd:b5:39:6a:e5:ae:d6:
31:06:ad:c0:5f:f6:f0:45:54:7a:5f:6e:61:5c:e4:
36:95:a0:1a:c5:38:16:15:6d:d5:af:aa:0a:50:27:
9b:9f:bd:38:14:fb:29:b1:e3:55:22:82:c6:89:d1:
a7:7b:1d:29:e4:e9:4a:e3:35:15:27:18:6d:8c:02:
28:cd:ad:fd:89:3b:ef:ae:26:86:45:69:13:0c:25:
0a:44:cb:e8:b1:cf:47:10:55:4b:45:a8:8d:12:f3:
29:b7:ff:c2:96:61:9e:54:d1:4b:6b:99:d2:dc:66:
d1:55:4e:fe:27:38:5a:53:b1:ef:35:3f:18:eb:a3:
b8:26:e4:d7:3e:31:9d:e2:a0:31:0a:4d:21:d6:c4:
7f:5b:53:34:f7:64:0a:bb:e6:65:a1:6d:56:f9:45:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:1D:B5:92:A4:33:78:BB:20:3F:13:50:09:7A:93:EF:DF:D6:90
X509v3 Authority Key Identifier:
keyid:12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:56:8b:91:dd:1b:58:17:9f:62:20:be:9d:9e:88:2c:54:26:
d6:3c:7a:44:c2:97:e2:ae:48:32:2d:7c:2f:5c:e6:4a:b0:eb:
43:93:b7:55:c8:0b:43:88:66:4b:49:84:d7:6f:45:be:2c:11:
24:b1:1d:fb:6b:12:a5:cd:44:f7:97:af:2b:7f:36:84:da:79:
4f:25:c1:cb:b3:10:f5:b0:35:ec:99:77:0d:df:bd:a6:de:04:
93:f9:00:e4:22:98:ed:b6:3a:97:20:aa:60:66:5a:86:e5:45:
89:81:50:79:c3:e8:49:82:35:af:14:1b:b9:ab:ed:cb:b8:cb:
84:e0:92:23:cc:ee:01:d7:41:bf:8a:b3:d4:56:4d:34:c4:19:
80:1f:55:7b:cd:b5:3a:53:e7:45:93:46:b0:c7:c5:6a:0e:60:
7d:28:47:e5:7c:30:47:88:0f:f3:57:ff:80:15:32:40:48:a2:
ec:3b:f3:11:ad:d6:9b:8d:6b:fa:08:df:4e:30:5c:03:87:a3:
ef:27:83:dd:56:b1:15:28:64:d6:f3:aa:1f:0b:d3:aa:b8:e0:
78:0e:ad:42:6e:5f:59:25:69:d2:bc:94:4c:32:00:71:29:f5:
75:4b:c3:03:17:54:4e:84:52:7b:70:dc:0a:c3:15:bd:46:13:
9f:eb:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:56 2026 by rpki-client