Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: QmbuTaoMYLVhmmJx+gFyndvbtoImo3etsmdD2eO6i7w=
Subject key identifier: DD:C1:AD:36:35:FF:6F:65:ED:BD:BB:9F:C9:66:68:40:E5:32:B7:0E
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 019D3909BB418C90A15772EAD3CFAB7B078D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: TNVBulmeRjtcaf8RGmA2b8DQg6sdgOgaG3XgT11yVJY=)
2: G0gRp1hMj3IVrRMDtVlrM5GgoMQ.roa (hash: sfK58h/s6Lw9x7/XNuXAh6Lj4orMmzdUBf2OZPGupM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bb:41:8c:90:a1:57:72:ea:d3:cf:ab:7b:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=ddc1ad3635ff6f65edbdbb9fc9666840e532b70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:be:b9:12:0e:e5:84:4e:66:51:4d:e7:54:
9c:e8:ef:99:d2:f2:09:2d:8e:14:75:58:32:3b:e1:
c4:1a:70:5b:cd:6d:36:65:fe:4d:a1:84:0b:03:99:
42:b8:e1:d2:61:2d:3c:05:90:af:c8:4a:f1:d0:12:
36:e1:1e:ec:a1:ac:1e:b9:4d:fa:88:51:e4:1f:57:
b3:0f:ec:cb:f2:28:05:7f:11:4e:ef:d2:38:e7:58:
d3:d0:58:7a:76:32:3d:d8:45:2a:e9:ab:8f:ac:fb:
48:2c:38:fa:9e:a7:b1:78:db:79:7c:a6:4c:7b:ce:
cf:7d:de:f3:b4:8f:78:b6:25:4d:0c:56:1f:fb:9d:
71:52:77:87:04:2b:7a:a3:58:fc:8e:23:7c:01:0c:
08:1d:c7:fa:b5:0a:ac:55:a8:5e:b8:00:44:4b:e8:
d1:7b:06:ee:e7:84:1a:49:0d:5d:7b:8d:8a:1a:ce:
76:19:87:86:31:53:b6:d4:8e:ae:d5:59:c2:d9:30:
c7:77:36:08:dc:63:97:fd:af:ef:ec:4a:25:0b:cd:
01:a0:c0:f7:b6:87:e4:12:bd:6e:5d:dc:73:73:18:
78:47:4b:5e:36:69:3e:e5:54:e2:2e:5d:ac:c9:a5:
9d:b5:9c:28:88:72:f6:0a:19:15:aa:9d:19:b0:d8:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:AD:36:35:FF:6F:65:ED:BD:BB:9F:C9:66:68:40:E5:32:B7:0E
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:0d:11:ac:20:4c:f2:e7:39:bf:eb:51:0d:f8:92:f5:ee:
3e:ab:cc:b8:90:92:6d:cb:2a:e7:3f:61:f2:ad:07:76:bf:43:
59:db:94:8c:cc:a0:d6:a3:47:75:6b:fc:ac:9d:4a:ad:6b:f1:
47:59:c7:9b:d0:71:9e:d6:8c:71:36:30:76:b4:09:40:81:e7:
d4:06:78:8e:0b:6b:12:3a:af:94:f7:9a:c3:57:d1:82:82:fb:
71:47:ff:b8:56:f8:99:e6:50:d9:fc:9c:01:01:18:ed:9a:a5:
69:1a:df:a6:5e:f9:90:9a:69:be:11:9b:02:47:02:1f:a6:a9:
4e:e5:4f:57:19:05:f5:e2:38:7c:f2:cf:6a:8d:35:68:25:a7:
76:9d:21:62:d9:92:16:ac:d6:5b:88:38:66:87:98:c6:2d:83:
f3:a2:e1:94:bc:bd:42:06:cc:19:af:b4:fa:80:d1:87:b1:1c:
2f:3d:f7:20:63:e1:2b:f2:8d:4c:60:a8:c5:e8:ea:ab:45:b7:
5b:b3:3e:fb:00:eb:31:e3:74:94:46:e6:b3:09:03:89:66:49:
d2:9c:40:14:5a:88:a2:19:6a:72:2e:83:d0:d7:b4:72:49:c1:
1a:aa:a7:d6:34:47:34:81:be:87:c1:c9:d5:db:25:32:25:83:
c0:b1:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:18 2026 by rpki-client