Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: ZjBoNC29zgVIF1t/Ebw+SQOk1x1Ws2vh92+YT8/17a8=
Subject key identifier: AA:ED:2B:72:DD:18:53:96:AE:86:9D:7D:E1:B6:2D:C6:7B:73:4A:2A
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 019D3909B9E557936BE591E81B353786C10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: Cr48_6aAMMr0SIuWYVxX6AJ210s.roa (hash: i884JwTjsmqlJms/xx5tI9EIDwml7a9PXEA4l7IBunE=)
2: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: VT7IFL8fNBS/lBOdXpOUI/k2RCeYm5ihAFk1+lddG1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b9:e5:57:93:6b:e5:91:e8:1b:35:37:86:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=aaed2b72dd185396ae869d7de1b62dc67b734a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:ae:05:db:c9:3e:f1:8d:80:9b:4a:40:42:
50:e9:73:b8:72:e7:cb:45:cf:a9:a0:6c:b7:0b:af:
30:da:30:6e:9b:c1:01:52:5f:96:95:c2:c9:33:18:
2d:cf:81:a7:d8:e1:66:b4:56:8a:37:f8:b9:bc:79:
2d:0c:bb:df:52:c1:02:36:bd:11:69:81:2a:53:cf:
c3:80:1d:06:25:48:8e:3b:9a:ed:0f:81:89:84:0a:
68:1a:5c:c4:ba:d8:d5:9e:8f:da:19:20:aa:ba:90:
47:3e:40:f4:9a:86:d8:09:df:0b:d2:97:20:8b:7e:
63:dc:65:99:82:3f:8b:aa:96:41:ea:72:e7:29:e4:
e8:b5:81:9a:33:99:2f:b1:93:28:b6:68:42:cd:ea:
d7:bb:95:c8:88:97:f3:74:7e:17:da:ef:11:bd:20:
7b:79:d4:61:89:19:63:b8:69:c6:9b:51:1b:12:9b:
56:f7:20:bf:66:4e:89:9d:9d:6d:b9:15:b3:a9:63:
1c:8b:ae:fa:47:b8:4d:c9:b4:9a:93:db:36:e2:e7:
cb:04:92:1b:5d:c7:41:54:83:99:31:6f:16:3b:b2:
67:7a:68:fa:19:ea:5d:b2:f0:09:3c:72:a7:a9:64:
bf:f5:e8:f6:21:14:ca:c3:00:5b:5e:7a:f8:89:80:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:2B:72:DD:18:53:96:AE:86:9D:7D:E1:B6:2D:C6:7B:73:4A:2A
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b5:db:3b:76:21:a2:10:d1:b1:cc:5a:50:fb:15:93:16:86:
22:9b:1f:cc:8e:84:40:e3:4b:00:b5:01:c0:ab:13:6b:9a:53:
88:c5:f6:99:0b:c5:7b:e7:89:91:2b:3b:36:d3:2d:65:25:a9:
8e:56:bc:ea:8e:39:45:78:7a:36:84:00:fc:17:92:d5:1f:e0:
4b:57:7e:34:3f:2c:e4:8b:99:d7:af:50:bf:b2:b2:55:c2:9a:
a8:37:76:0a:32:f4:b3:ed:ce:33:c6:a7:0d:44:dc:47:01:a3:
9b:21:ec:db:9c:25:17:9e:91:33:b2:1d:76:48:53:d3:12:f9:
e0:9b:b3:32:46:9d:26:f2:38:03:97:b2:42:ae:60:d7:aa:8a:
5c:4b:22:ab:36:57:c5:b5:c3:76:52:c2:a1:b4:95:ac:8a:af:
2d:18:1c:61:3b:ef:28:8a:d4:c6:41:d6:e5:ed:07:08:f1:4d:
10:f9:1d:b9:bd:28:54:f7:f2:3a:8a:7a:bb:8a:7f:74:3d:6d:
d3:bb:d3:a1:9f:4a:d3:14:d0:0a:c9:de:5c:47:3c:e4:2c:7b:
15:35:14:74:ce:65:f7:94:56:7e:22:28:23:b3:d8:d1:94:6a:
5f:1e:ff:38:75:38:19:cf:cb:e7:9a:44:e5:0c:70:fe:8d:3f:
60:95:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:32 2026 by rpki-client