Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: XnNoF3+wc0wNKAFAszeYEUmy5quCcH7y6fgcrwB60uk=
Subject key identifier: 1A:CF:85:31:58:50:C1:1E:A2:B2:3D:CA:78:4C:98:7F:D9:01:77:5B
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 019D378977E032AAC50DD4AFB542014E8B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 0C39
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: rJk+dIwlTLHgHp8xh0E284f/KXCEK64y0i2Bcfp/8c0=)
2: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (hash: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:77:e0:32:aa:c5:0d:d4:af:b5:42:01:4e:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=1acf85315850c11ea2b23dca784c987fd901775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:79:98:f7:2d:52:95:28:e4:86:27:c6:60:
f2:31:d2:5b:49:fd:ea:6d:ba:64:6c:d7:1d:2f:ef:
0c:4f:47:99:0c:00:24:e8:09:c9:0d:12:89:d6:0d:
de:e4:28:69:eb:e1:2a:8d:b8:2d:0e:bf:93:54:52:
2b:2f:4c:e4:f8:ed:d9:7b:27:d2:a8:7b:e1:ea:63:
b5:fd:28:e6:c7:03:4d:5b:28:36:6c:65:7f:df:c4:
71:76:55:59:49:ab:3d:9b:34:de:15:db:02:c8:00:
d8:a8:b6:f2:d8:c5:67:79:7e:3a:6d:5d:bc:ac:a6:
ab:9a:2e:af:5b:fb:2a:7a:2f:1f:a0:64:f1:26:c1:
ba:af:65:d1:94:7b:6d:21:3c:44:5a:4f:0e:17:80:
bc:83:9c:0b:69:1f:95:86:1e:52:b5:14:3b:f4:36:
19:38:8a:3a:fc:40:9e:88:0b:23:2c:12:5b:93:c6:
eb:4d:c1:bd:8e:7c:d7:0c:0b:fc:17:d7:63:a1:be:
4f:f5:ef:40:02:fc:ef:5e:ae:59:d9:ef:1f:73:70:
dd:23:4a:8e:5b:1c:80:67:ff:3b:50:60:0e:24:1e:
a9:3c:d4:8b:08:47:83:f5:2e:09:02:05:de:d1:6d:
be:51:19:f1:a8:95:e7:6d:a4:16:67:f0:3a:04:fd:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:85:31:58:50:C1:1E:A2:B2:3D:CA:78:4C:98:7F:D9:01:77:5B
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:64:1e:8f:48:f7:7d:12:fc:c7:3a:b5:3d:fa:f7:99:78:
6f:ab:af:be:2b:8e:0d:ed:95:b4:bc:f8:67:3a:36:76:75:a6:
c8:f3:67:e6:c5:5f:c4:78:0a:cd:1b:53:1a:1e:82:e4:41:80:
4c:e7:d5:a5:94:ae:4a:ed:9b:9d:2a:09:3f:3f:9d:de:ce:ed:
6d:11:af:ba:5e:f0:0c:56:70:a8:b2:c5:58:da:7e:1c:d0:14:
6b:23:92:c0:ab:fd:6c:c2:d4:41:fb:91:0a:3e:11:03:42:c8:
97:00:21:cb:85:6f:f1:34:0f:90:c3:4e:f6:0d:a6:41:35:42:
01:b5:00:71:52:1d:2c:3d:95:b8:e5:3d:1d:ab:51:35:d6:fa:
53:ef:34:44:3b:0b:e4:4c:33:15:06:77:9c:30:a2:f9:8a:a2:
34:70:87:a7:2f:89:ea:4d:58:ac:4d:9c:9a:23:44:a7:db:cd:
8b:65:83:ec:62:57:0d:02:1b:be:a5:0e:f9:ea:8d:a3:70:fb:
d5:3a:43:fd:1b:5d:b3:cf:3f:ea:29:d1:3a:33:b8:b6:34:6c:
94:ed:43:5c:68:31:d8:85:77:91:e6:c4:57:cf:81:74:9f:f6:
1d:85:ef:19:9f:be:50:d6:06:d0:6c:e1:fd:f3:da:40:53:cb:
1f:c2:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client