Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: pxw9k/fEV18hPR273NXVvI8awU8W5ELp5hHgVe/GTxY=
Subject key identifier: 5D:FC:7D:94:B5:67:EA:C6:89:4A:8B:5F:96:C3:2D:E9:37:99:32:A9
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019D37C03C97BCA8144BE12A4E6E17844E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: I5Qf0YYQ/9qVnAB0PXdR3gGNcEBDr0Db4cQOgt1IPd8=)
2: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (hash: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw=)
3: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (hash: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3c:97:bc:a8:14:4b:e1:2a:4e:6e:17:84:4e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=5dfc7d94b567eac6894a8b5f96c32de9379932a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:fe:5c:07:9b:19:d0:b8:f7:0f:27:2f:43:
dd:8d:1a:24:3e:09:50:38:59:cd:14:5d:63:bd:ce:
24:51:9b:d1:a7:1a:dd:6d:37:15:16:9d:a3:80:a9:
97:9d:2b:c1:6b:64:8a:d6:91:9f:4d:46:fe:6a:ae:
1b:b9:66:b9:b9:a0:25:6d:05:2d:fc:9b:3e:98:35:
a5:36:c6:f6:e7:71:17:5f:ec:40:1c:e3:78:3a:7b:
58:91:5d:83:4a:97:00:d8:85:2c:f1:a1:61:43:56:
e4:1f:fd:e9:86:31:86:6a:af:36:2c:64:66:57:d5:
81:92:6e:19:a8:29:91:23:b0:ee:15:10:5b:5f:d1:
5f:38:4b:52:86:00:54:4b:e4:4c:4b:c6:78:91:53:
27:25:93:99:e5:a5:52:d7:0c:64:ac:b6:e5:2e:9b:
02:43:24:07:67:7f:6f:f9:a4:f0:c1:06:a4:c4:b9:
48:09:e5:f9:38:f4:8a:c3:49:02:3f:dc:6b:31:9b:
28:a8:1c:ad:41:6d:45:3f:b4:1a:1d:55:36:be:a9:
77:3c:f3:3e:9d:59:5b:99:60:a0:d9:3d:f8:f9:1c:
6a:59:c5:0d:d7:a5:f9:54:e4:c5:1a:11:e1:c5:46:
56:4e:89:cb:5e:92:10:38:55:3b:6e:58:b4:09:b3:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:7D:94:B5:67:EA:C6:89:4A:8B:5F:96:C3:2D:E9:37:99:32:A9
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:fa:31:47:c2:b2:cd:c2:d7:4a:28:99:a2:d1:bd:75:2b:
7d:59:96:ed:09:7c:4f:c5:0b:a9:6c:25:76:ac:8e:c3:d4:20:
08:bc:2d:3e:d6:cd:e5:a0:ed:9c:14:cf:4e:d0:56:ed:20:a7:
a5:35:45:92:1a:a7:f6:9d:f4:43:89:c8:a1:8d:f2:b9:11:d8:
92:87:d9:71:f7:db:95:10:63:fd:d5:9f:50:18:96:66:0c:ed:
2a:51:15:72:8c:ee:35:c3:9c:47:cf:b3:e6:84:d2:c5:6a:d3:
e6:fc:17:ed:5c:c1:b2:56:49:4e:5f:aa:5f:b6:63:3c:61:d9:
5d:0d:ce:6f:f7:6d:6c:49:8c:d4:1e:4a:90:9e:18:9c:f9:c2:
db:59:b5:c2:c0:a0:e5:10:05:04:6d:c3:8c:4a:6b:5b:d3:30:
ba:d8:40:b2:94:7e:d6:e9:94:b4:1d:46:a1:d6:d8:16:07:f3:
8a:ba:7a:fc:f5:7c:8f:06:87:47:60:c8:2d:9c:d9:8e:82:49:
60:43:d8:5f:a9:d1:74:fa:f3:f7:36:bf:09:15:73:be:16:c8:
04:d9:ad:58:d7:03:b0:9b:9f:77:0d:1c:24:40:d7:34:11:f3:
f6:ae:9c:38:d0:a6:8c:68:33:7a:c6:ac:ef:86:cb:77:d4:57:
51:e7:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:40 2026 by rpki-client