Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: xBAfGyWUFUSCZK/AOBS1AA2Jz51Tb52b7eyzla6MfcI=
Subject key identifier: 5F:2F:A4:37:FE:21:AD:A1:34:AA:98:3A:85:23:F7:09:48:7E:7C:D1
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 019D3865DE7FE76B7FB40D43EBE55075E594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 0D8A
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: ywe9vvNmiwIRf41a83+Ue29fMSIsxJ4yTr9iIVWU5tk=)
2: Xo5fFGYUqhi1mHeQLpxNA7Txd2I.roa (hash: 7BEYJ6Z27LV8hRl7JxOpGRBg3lkYZDCNIK4576IwVX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:de:7f:e7:6b:7f:b4:0d:43:eb:e5:50:75:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=5f2fa437fe21ada134aa983a8523f709487e7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:12:d4:a0:75:c9:22:b6:52:15:f5:3d:dc:01:
a6:8e:23:1a:a5:6d:80:09:a9:95:c2:35:27:4c:79:
5b:4f:e8:01:28:12:5c:81:22:51:6d:b2:9d:f3:43:
56:71:3f:92:98:c6:5f:ef:3d:28:10:0c:30:b2:ef:
d2:52:a8:ed:82:1c:9c:03:43:1c:82:b2:92:35:d2:
fc:5b:85:09:3b:eb:bc:43:e5:be:a6:e7:93:0c:1f:
f3:05:e7:90:c4:b2:60:d4:a2:e3:06:c3:79:ab:86:
9b:7f:94:54:ab:1e:c3:65:51:3a:4b:53:01:20:0f:
93:fb:fc:72:1a:c0:62:31:b7:d4:90:f4:e3:77:5e:
a0:e9:2c:5b:36:c2:68:52:9d:5e:d9:c2:95:67:d5:
60:3e:f8:a9:ba:f5:54:20:50:5e:ce:58:a9:e0:76:
5e:2d:68:38:5c:5e:b4:e0:eb:8f:7b:2f:aa:05:07:
18:48:69:4f:3a:ee:9e:3e:6a:00:1b:78:5b:a8:13:
0e:fb:64:f1:34:e6:ae:ad:b6:60:d1:67:a7:b2:8e:
02:c6:7c:80:aa:7f:49:9f:46:cb:fe:00:51:68:8c:
be:ac:7f:71:a0:a3:1c:1f:be:24:6d:5c:a3:a8:9e:
f6:b7:9e:74:d0:d0:36:ad:0b:72:05:50:09:46:bc:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:A4:37:FE:21:AD:A1:34:AA:98:3A:85:23:F7:09:48:7E:7C:D1
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:17:00:e1:4b:b5:45:82:0c:1d:3f:1e:19:da:e5:c2:92:6b:
62:7a:92:25:2c:9b:38:05:02:7a:4c:81:c3:ce:7a:75:f7:ce:
9b:0c:ed:a0:69:78:bd:37:0b:33:38:48:64:73:1e:9e:0b:30:
8e:41:01:13:5e:5e:66:d1:1e:65:02:ef:73:cb:0b:95:8a:21:
a8:f2:f4:27:ef:3e:68:f6:29:9a:c2:84:8c:86:4a:39:b4:ad:
0a:03:81:95:4b:f7:82:51:c3:9e:e5:fc:8b:9f:a9:9d:30:16:
39:cb:e8:fe:2e:9a:f5:3e:5f:52:b8:f3:b9:01:c7:0d:5e:b4:
5c:2f:24:8a:f5:bd:46:96:dc:6b:87:b7:70:e3:f6:eb:7b:c6:
28:35:92:13:35:9f:95:88:53:41:8a:7e:a6:6c:be:a5:de:71:
e9:35:73:9d:15:36:5e:64:e6:9f:61:cc:57:5d:20:54:51:96:
c8:c8:56:dc:4e:64:97:8d:7b:87:00:ab:04:6d:0a:48:9c:66:
21:44:82:84:28:53:e7:9d:bc:e3:ed:14:f9:1e:9e:80:33:0d:
83:88:7e:72:47:bc:0e:00:26:25:d0:2d:fc:42:00:da:ec:a4:
90:d6:3a:7a:c9:37:e6:b1:1f:26:04:cf:18:f8:8a:e6:8d:af:
4d:80:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:07 2026 by rpki-client