Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: aFxUOp1xSLHW7UCO2KJHciXY+D7E1OJj8MhxkDHHEFg=
Subject key identifier: B0:87:CC:CF:A2:B1:D6:79:8E:D3:8C:E5:64:81:FB:0E:63:BC:23:00
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 019D37892B410473316E3D41F553266C1A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0678
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: PcghHKC5U89K+8le7a5yOEtgantZFwCg6LXwWKTMTLI=)
2: a4XNDj5KBUiCw6Y9PE9_OHh03CE.asa (hash: 6Ea74joQApWeaiFS62DqckBP5FeCv4s4l+v1lODuQ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2b:41:04:73:31:6e:3d:41:f5:53:26:6c:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=b087cccfa2b1d6798ed38ce56481fb0e63bc2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:a1:75:d3:0c:f5:98:71:48:63:3d:dd:1d:
1b:e1:82:15:ac:82:af:9a:66:9f:25:48:80:f2:b9:
34:d9:3e:c9:bc:be:76:c4:88:3f:43:06:a0:3b:a4:
a8:4a:b4:40:b5:2a:1f:7a:0c:df:30:68:cb:12:db:
86:9b:41:77:a3:45:20:c0:e3:8c:03:db:68:23:6a:
14:53:b6:da:1b:79:1f:8a:5d:ad:b8:4b:7c:4a:b4:
69:85:77:b2:c8:d7:bd:88:50:66:ec:52:63:d6:57:
56:79:ec:28:55:2a:c9:6c:b6:ea:f8:f0:2f:b5:41:
b7:ac:44:70:ac:c3:e3:9e:8a:fa:05:1c:8f:06:5c:
3e:21:5f:2f:15:f3:a0:09:db:98:83:0b:6d:db:ca:
5f:58:da:ae:0b:79:b0:d3:6d:97:2d:d3:da:c2:4d:
f7:c6:36:41:1b:d2:e4:08:04:54:42:fd:58:cb:89:
5a:b2:22:f2:f6:89:36:2e:dd:2c:78:b7:02:6b:38:
a3:c1:3f:34:9b:61:d2:1e:ac:30:b8:04:95:3c:4a:
4d:02:ca:6b:c1:50:7f:c5:af:13:60:b7:39:a6:b7:
df:47:b5:11:ff:a9:91:c2:df:31:94:27:14:ea:a9:
a6:fb:4d:a7:10:c1:e4:fa:f8:21:d8:7e:71:8c:09:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:87:CC:CF:A2:B1:D6:79:8E:D3:8C:E5:64:81:FB:0E:63:BC:23:00
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:a7:0f:94:4d:2b:45:3c:0b:b3:5a:a4:13:d7:36:13:e5:
c0:b0:43:3e:5d:4e:c0:83:5c:45:e0:c5:3a:2d:b5:12:8b:a8:
0d:fe:c2:91:87:39:a0:23:a4:9d:b4:c1:d3:8a:b6:ae:f2:df:
d6:33:6e:0f:cf:eb:53:7a:4a:32:39:86:2e:33:23:c4:54:f4:
64:4f:d1:fc:42:f3:6f:d3:45:17:17:ef:43:ee:27:df:b9:d9:
25:7b:82:2b:1d:ad:5c:a4:31:22:4b:8e:e2:b4:6e:23:73:77:
51:6c:39:04:53:91:ea:db:33:18:dc:12:79:fa:a0:9c:2a:8d:
82:52:ed:c4:db:2a:d9:d1:2f:1a:88:82:c8:41:0b:9c:89:fb:
bf:c6:da:3e:8a:6e:1b:48:d4:d0:14:3f:96:22:92:88:ff:5f:
41:f3:c6:01:6f:63:76:ec:89:94:8d:ec:19:ac:df:90:b2:7f:
80:2c:4a:13:2a:2f:33:2e:67:c8:5d:1a:67:e0:87:fd:8b:9e:
ab:bc:5f:c8:3b:d5:15:a6:3b:08:4d:f8:1a:dd:1e:d6:8d:21:
99:32:4f:9c:90:9f:3a:dd:f1:ae:dd:07:bb:e0:13:02:f8:f8:
66:de:e3:c4:67:cf:b8:bf:97:18:a7:02:09:83:6a:39:72:04:
3f:ff:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:06 2026 by rpki-client