Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: h7hU58YFyGzxG48Uv3YFi60j+ZsjcqCmy55VmdZV0UQ=
Subject key identifier: A2:9E:E3:37:2F:FE:7D:63:F2:5F:C4:C5:D3:0C:24:31:3D:97:EF:50
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 019D3940DB5F4D50480498880FD9E8674381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 044D
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: t7tZuYmztXwxxlnBcs2b97osoO3bp7QLYXBuAGy1Spo=)
2: o8MqcHzucQsFFcM064UV8vGpwI8.roa (hash: 7pKszhiXxG9eq/C8SaAv1aRWIQRMOmuuO6Lbmdi5cKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:db:5f:4d:50:48:04:98:88:0f:d9:e8:67:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=a29ee3372ffe7d63f25fc4c5d30c24313d97ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:5f:58:22:b8:4b:58:1b:71:5b:a6:84:e1:
c2:ee:75:95:1a:32:75:47:4f:8a:60:b2:c7:f3:57:
4c:6c:c8:02:30:84:0b:e9:b2:c8:7c:0e:49:be:8d:
e3:95:4f:07:5b:3a:ca:b7:b4:48:c8:ce:d4:a7:9d:
9d:2a:dc:7c:68:14:51:a6:01:e5:04:52:e5:64:70:
87:4d:b2:45:89:d1:23:4b:c8:c2:23:ba:9b:7b:08:
98:bd:84:c2:bd:01:94:99:4f:f6:3e:cf:29:f6:b2:
bc:53:d7:09:b6:d8:95:ae:bf:14:db:cb:4a:bf:7d:
c2:4b:d7:67:49:f3:89:90:94:6e:31:f4:e2:68:19:
a1:79:39:fe:54:2d:c8:23:98:7f:45:14:36:be:14:
a6:e1:f7:7d:23:e1:e0:12:82:a5:12:a7:9d:5b:60:
9a:fb:93:71:11:5e:b4:8c:9d:5a:4d:60:4e:51:c2:
31:6d:48:1d:36:a2:42:90:bd:2c:79:4c:74:3b:80:
49:31:d1:ad:ef:bf:cf:00:0b:02:b5:4b:70:24:73:
ba:a6:7d:2d:6d:37:c7:46:c6:bb:ea:2d:3b:6b:38:
ef:06:83:fb:51:02:6e:11:eb:ab:91:b7:96:e0:2c:
50:e0:98:57:6c:7c:10:a4:8b:6f:4f:72:3a:91:5f:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:E3:37:2F:FE:7D:63:F2:5F:C4:C5:D3:0C:24:31:3D:97:EF:50
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f2:9b:0e:f9:b1:fe:96:80:ad:b5:98:a1:76:eb:a7:e9:76:
69:72:18:b8:19:c0:78:b6:51:50:4b:d8:85:df:1e:92:88:62:
92:70:38:5f:08:94:f0:70:6a:51:9e:54:9d:04:d8:8d:23:3d:
95:b5:9a:8a:58:76:b8:f0:28:94:89:aa:e6:8c:42:45:9b:da:
30:94:ef:93:15:7c:60:6f:47:91:9e:d4:29:5e:81:bc:6d:23:
fe:0e:44:26:35:8e:90:ae:7a:06:36:18:b9:af:01:d6:48:b5:
b6:4b:54:72:88:6e:dd:55:1c:82:cf:49:db:85:ef:ca:13:a6:
5f:ee:17:6c:c1:66:22:b2:3d:8f:6d:9c:2a:e0:77:6d:70:d5:
d6:b9:60:0d:d1:1c:b9:da:5f:d8:ef:dd:0d:1e:d1:82:d4:a7:
2a:bf:14:cf:de:81:5b:fe:2f:fd:c1:e2:fd:0b:78:c3:8d:5d:
ad:a7:47:43:82:17:d3:66:9b:00:5e:55:9c:42:d2:e9:d7:0d:
1e:7a:4e:7d:9e:3e:d9:12:5f:fe:bc:f0:66:01:c2:05:fb:c7:
f4:bb:c7:1f:f3:4d:1b:d8:78:6a:76:4a:7f:18:f5:a1:dd:94:
0d:c2:58:eb:05:74:e8:47:c4:78:cc:31:79:70:dd:7f:73:37:
1e:66:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:48 2026 by rpki-client