Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: Xgq6e0ZJCDpD6S9WZkAz1kl06ek6heOvau2G4wclcC8=
Subject key identifier: 5E:80:05:19:1E:04:CD:61:A0:37:11:1B:F8:0D:59:45:42:5C:38:49
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 019D081D85E4E82038B11BAEE13B4E187A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 22:00:45 +0000
Manifest this update: Thu 19 Mar 2026 22:00:45 +0000
Manifest next update: Fri 20 Mar 2026 22:00:45 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: 92JLGUhzs/l7X7oz1BMzsVzgF69Q4gN7Rn+aExhfEPU=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:1d:85:e4:e8:20:38:b1:1b:ae:e1:3b:4e:18:7a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Mar 19 22:00:45 2026 GMT
Not After : Mar 20 22:00:45 2026 GMT
Subject: CN=5e8005191e04cd61a037111bf80d5945425c3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:05:84:e6:90:97:37:f5:27:bd:26:8f:d8:
f2:9e:0f:57:d0:28:2e:a8:1a:26:8e:e1:d9:bd:04:
90:7b:d2:52:65:c1:57:d7:d2:95:99:55:cc:0f:bd:
b8:4a:50:08:40:7e:89:50:34:80:17:03:59:53:8e:
a1:e4:e4:b3:b3:c5:8c:6d:bd:04:10:da:b8:08:16:
f8:eb:22:82:29:12:2e:f0:03:16:87:69:a1:2c:01:
4c:2c:91:87:0e:2b:97:dd:7f:3d:cc:c9:67:c5:7c:
52:46:24:07:eb:95:e1:77:96:99:f9:89:85:fb:5a:
b8:31:be:92:12:e7:5f:02:99:41:60:64:ba:ba:4a:
f2:10:68:08:d6:2c:f1:3b:0b:b6:01:28:cd:a6:cd:
f9:36:cb:03:b0:02:9d:27:73:c8:c4:cd:4d:11:28:
86:6a:a8:fb:04:fe:71:42:29:c8:49:35:ed:a6:d0:
76:b6:53:1e:e4:b0:c7:9e:2d:78:c8:9f:d3:b5:fe:
62:4d:16:0c:ee:0b:02:f3:79:3c:7f:50:ed:60:4a:
3c:0c:77:aa:91:c2:8a:f2:2f:62:a6:02:80:c8:43:
af:04:4c:72:50:88:5c:7b:5a:0a:e9:d0:29:0c:43:
34:f1:1a:fc:e1:91:5f:84:39:19:01:5c:4c:10:ff:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:05:19:1E:04:CD:61:A0:37:11:1B:F8:0D:59:45:42:5C:38:49
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4b:25:b2:b5:cf:09:18:d3:55:ad:ed:1d:07:34:52:1f:a2:
81:75:94:00:ae:d5:3d:a8:87:67:da:07:da:b6:08:fb:4b:c6:
13:03:84:3c:22:c9:0d:fe:1f:ff:d4:77:e6:8e:6d:9b:59:b1:
24:70:78:a6:14:7a:5e:31:9a:83:e4:25:69:14:51:1a:c1:e2:
2e:d2:9b:b9:5e:50:6e:05:0e:0e:f9:d2:52:3a:4e:9f:9c:40:
cf:2d:82:30:be:e9:03:e9:e6:b3:14:a8:c9:0e:c8:67:85:4d:
b6:1f:47:49:03:90:20:77:a6:85:ef:e8:b0:ff:cb:db:7e:85:
cd:c3:ff:d0:1f:93:68:4f:94:2c:84:29:4f:c1:4a:91:69:03:
35:9e:03:5c:c2:d2:91:6b:41:40:d2:cb:6d:98:e4:e3:60:1e:
ef:31:86:1f:4e:5b:ab:cc:e7:91:36:73:98:11:ad:10:62:78:
2e:a3:b0:8b:ee:e9:3b:d0:ee:29:30:6c:de:e1:7d:c5:76:42:
fa:bd:98:96:79:f5:4c:9a:16:9c:3f:65:9e:86:4d:2f:a9:17:
11:bb:ec:f6:33:85:67:17:e2:ee:40:cf:8c:68:dd:a7:c9:12:
ff:ae:96:f2:e0:bf:34:b3:92:25:0c:d1:24:f1:a4:fc:53:95:
21:4d:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:06:36 2026 by rpki-client