Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: Rl7Uh2a7dMO8fjtN/7SDPSZVt8w739MuGLKMd80Pn1w=
Subject key identifier: E6:A9:60:7C:03:15:6C:47:B2:06:7D:56:CD:25:BB:33:80:70:EA:48
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 019D371B8EDCA51D52B9FD4122E05EF97C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 01:00:46 +0000
Manifest this update: Sun 29 Mar 2026 01:00:46 +0000
Manifest next update: Mon 30 Mar 2026 01:00:46 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: bbKsJMrv9P1FpgRq+xtMKzNkvkSnLgKvAkks1tLoovo=)
2: OXg0TjUhSvtV7LtPBTa7S_RSHjs.roa (hash: canGGkhdPWTKzNqqcACagBLpPsyetsivYP+q4meoXFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8e:dc:a5:1d:52:b9:fd:41:22:e0:5e:f9:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Mar 29 01:00:46 2026 GMT
Not After : Mar 30 01:00:46 2026 GMT
Subject: CN=e6a9607c03156c47b2067d56cd25bb338070ea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:4b:47:54:24:a4:e9:f0:85:36:8e:9e:07:
9d:52:28:38:60:92:8d:6c:76:09:d5:e0:09:65:70:
ef:b2:33:33:ff:dc:1f:4f:ea:35:80:12:c8:85:5e:
45:cd:b9:a8:fb:b7:e5:0e:71:f1:7e:7e:64:21:77:
37:a3:7b:04:22:d4:f0:66:90:c1:6a:d0:3d:bb:97:
1b:53:79:3a:e1:58:23:cb:5f:e3:2e:db:53:8f:0f:
9f:d0:11:d5:4d:00:14:04:c1:90:af:b1:fb:4c:31:
8e:4d:a3:9b:09:54:72:01:4d:59:0e:19:c2:e4:1d:
bd:50:06:89:78:af:ed:52:84:d3:5f:43:49:bf:2a:
7d:cb:53:dd:8d:a9:67:8a:73:18:3c:54:8b:c1:33:
5e:ac:da:af:ff:0b:d9:05:d0:d8:35:f0:14:b0:ff:
5f:c7:7f:c8:ee:ce:78:4f:05:56:d1:7e:93:10:fa:
19:92:23:23:0e:90:c9:2b:8f:ce:2c:de:56:42:51:
4e:a0:6f:72:d5:a0:1f:de:c4:49:0e:08:c7:80:97:
36:ee:23:ed:6b:0a:aa:95:a9:9d:38:a9:a0:50:f8:
5c:82:56:72:1b:14:3b:c0:12:02:e2:32:4b:32:3b:
05:d4:3d:ff:36:45:e7:1a:df:0d:83:89:d3:33:80:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A9:60:7C:03:15:6C:47:B2:06:7D:56:CD:25:BB:33:80:70:EA:48
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cb:61:f1:f2:d2:c4:e5:bf:e7:16:1c:60:54:78:90:92:3a:
fc:b0:b0:f5:49:ff:fb:90:6a:f8:cd:98:58:32:93:98:e5:38:
e2:50:f1:18:52:21:d2:ad:65:64:44:f2:f5:5b:dd:a5:d3:c6:
f0:76:9a:b5:3b:f6:9f:0a:eb:31:21:0f:7d:4c:ba:41:72:1a:
a2:39:b9:43:cf:f0:bc:c3:a9:bd:07:df:86:8e:a5:19:6b:35:
66:da:0d:6c:99:32:0a:61:16:5e:3b:e4:00:14:f2:20:ad:bd:
b5:9f:ff:94:90:42:97:8e:0b:55:19:ee:28:02:65:87:12:0a:
4b:6d:ec:44:21:a5:5d:58:6d:29:a9:fb:36:36:6a:04:ef:0d:
d5:08:14:23:f5:b2:96:55:57:8d:a6:bc:33:2d:8d:7c:51:72:
b6:8f:0a:7f:00:49:e9:9c:b1:fb:c5:87:a5:6f:d9:2e:72:9c:
27:b0:86:66:89:72:ad:85:4e:bc:57:77:ab:1e:ec:a0:85:c6:
2e:35:29:48:9f:71:85:7c:92:31:ea:4b:6b:ed:af:03:df:b8:
8c:03:88:73:b2:c9:dc:a5:a0:5b:1b:a6:f5:8a:4f:a1:dd:ce:
29:bc:a6:a5:75:d5:42:06:19:1b:99:1b:d2:fa:d8:b3:a0:e9:
4b:96:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:20 2026 by rpki-client