Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: LsLruj6BJVEXvsp8CCyoQz8yWenTargNN0Oja1L2KuI=
Subject key identifier: 83:04:1B:AC:B3:E6:DD:ED:93:37:A0:BE:43:CA:AB:CC:24:C7:33:DE
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019D39AEB610B38A479ED0F4C7C750DF6DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0A25
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: oUiUIQQbRxNpKJSHSiWqScycItboDreljso+FIXw8GM=)
2: bZwoK81zuxGi2G9X1qgk4iSNx3g.roa (hash: dPpJ67SvgOVz0s7ktnLlDsBfdNzlyXGXd70CftWD+Gk=)
3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b6:10:b3:8a:47:9e:d0:f4:c7:c7:50:df:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=83041bacb3e6dded9337a0be43caabcc24c733de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:8a:a2:a3:f7:fb:9c:e1:7b:58:61:66:51:
04:e2:ce:4f:b4:12:90:d6:24:f9:7f:fb:4d:03:d2:
a0:d5:69:d6:3a:dc:8a:ab:3a:3a:ed:ec:0e:13:2d:
14:23:ef:85:01:7d:b7:e4:1e:b1:c1:4c:07:6a:05:
d2:61:ca:36:71:5f:6a:43:1d:ec:fc:11:f8:20:20:
3e:89:d5:b0:b6:bd:74:d8:25:a8:eb:1a:7c:12:87:
98:1b:a4:f7:b0:d6:de:3e:2c:ec:15:bc:bc:81:f5:
17:32:98:53:37:f7:38:1d:0c:c1:d1:b6:5d:9e:e2:
13:bf:5b:7f:4d:66:d8:bf:68:7b:7d:a7:d2:c9:56:
8f:9d:ea:98:f8:b0:c2:30:35:00:02:f4:1b:1c:77:
1d:dd:e4:12:e5:46:ae:7a:92:52:67:16:0f:ca:4b:
d6:32:0c:a4:79:af:e1:6d:09:a5:de:3d:2f:a6:7d:
7c:36:25:33:76:26:b8:a4:b8:2a:db:20:12:12:6b:
85:3b:a2:9c:b3:32:3e:1f:f9:12:6f:a0:1d:bd:1f:
7e:d4:8e:f4:fb:16:7c:38:21:68:0c:86:ce:73:c3:
60:7b:29:4a:7b:ad:46:d6:18:b8:b2:e0:fd:c8:0c:
0c:8b:f3:55:94:5b:1b:cd:66:b8:be:02:16:0f:16:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:1B:AC:B3:E6:DD:ED:93:37:A0:BE:43:CA:AB:CC:24:C7:33:DE
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e8:ff:07:14:c7:ac:fa:b1:89:77:52:18:c0:c2:48:5a:09:
8c:18:53:67:fe:40:bc:f8:1e:15:c6:28:97:b9:a5:d1:17:4f:
a6:84:d9:d1:27:e7:6f:31:f2:28:f3:c4:ef:dd:2d:8e:d5:59:
ed:df:90:3e:7c:7e:47:18:a8:a3:71:b7:20:4b:c9:90:22:2d:
be:73:69:8a:34:11:e2:e9:50:7a:29:a5:0d:95:9a:a2:9e:5f:
25:3f:a6:83:c3:93:c9:0c:4b:16:70:af:72:62:d3:e8:93:5a:
b4:48:2c:d5:0a:ec:e6:bc:33:b3:b3:e1:b7:39:d3:c3:0a:fb:
50:b2:aa:ef:25:94:98:2b:57:84:56:30:a5:f2:52:6c:54:bf:
53:da:a5:be:7e:3b:4e:da:e4:c1:37:d8:28:7b:41:6b:6a:b7:
5a:65:e5:6e:6c:44:19:91:c0:fa:15:20:e7:0e:1d:66:35:af:
1b:5d:f6:13:c0:1d:9c:d0:6b:da:82:99:8e:56:da:61:8e:a5:
12:6c:c7:5b:dd:be:bf:73:6c:73:c9:8f:f5:73:e4:ca:56:e6:
d8:dc:57:a9:9d:a8:fc:65:8e:93:2a:f7:77:56:4d:89:1f:89:
5d:5a:aa:4a:4a:f2:c7:43:93:ce:09:a8:51:7c:37:f3:27:2d:
dc:7b:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:43 2026 by rpki-client