Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier: Cobkj5Vc9YEOtNA0eApqI36ooTBbAWwD8eTLjt2j4LY=
Subject key identifier: 41:2F:BF:EC:F0:BB:4A:63:9D:5A:CC:13:A7:1C:FB:AE:B0:AC:CB:D2
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 019D390A54AF85F62C20FC2498604A0E3E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number: 11FA
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: tgvL1r2sn+1TikUYL+ytCczBonZ8tLolXQtjcy5cMz4=)
2: D8FKo30pQrTU9mJYfYQg9avocxA.roa (hash: eTwcKoj9qVJBPhmvJcocW9ihZIrUpzbDq33DB90KBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:54:af:85:f6:2c:20:fc:24:98:60:4a:0e:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=412fbfecf0bb4a639d5acc13a71cfbaeb0accbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:01:29:d3:6f:21:2f:3f:d3:2e:d3:e8:a5:
b0:5d:c8:90:76:8d:d9:47:9b:77:09:60:8a:36:5b:
21:82:4b:16:24:67:1a:25:2c:00:28:ae:e4:1c:a3:
32:82:29:df:7c:5c:07:62:5a:23:8a:1c:14:3c:af:
20:c4:e5:08:59:fa:e8:84:5a:59:c6:a7:97:d1:a4:
1b:f3:e6:e5:6c:26:1d:f1:c5:a6:3b:7f:e6:40:77:
63:e0:a5:72:40:0b:a9:b2:9c:df:71:eb:87:87:bf:
9f:5c:39:58:85:76:d7:9b:80:26:93:9e:49:41:20:
4f:e1:a8:a7:f4:20:66:bf:3f:60:26:2f:a3:ba:ce:
a7:24:b0:db:ff:b8:76:74:62:93:1e:a3:72:b8:da:
da:8b:3b:dc:28:c7:af:b2:cc:09:40:ce:15:c1:01:
5d:a2:d1:f9:4c:70:5f:87:6f:55:e9:4f:1c:9d:7a:
a8:91:57:dc:ef:cc:2f:27:d9:0f:45:af:38:44:aa:
54:bd:35:b6:c6:b6:3b:a3:d3:9a:16:80:37:57:dc:
bc:55:fe:1b:72:8b:57:58:d3:f3:cd:12:23:e6:77:
c2:0b:47:fc:c1:90:48:59:c3:e2:a2:10:2f:44:9a:
b8:2a:73:59:27:bb:44:73:ea:dc:60:3e:2e:ee:69:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:BF:EC:F0:BB:4A:63:9D:5A:CC:13:A7:1C:FB:AE:B0:AC:CB:D2
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:69:11:51:90:48:a5:86:d2:26:7e:54:09:6b:df:a3:49:f0:
17:af:4f:73:af:27:92:81:bc:34:bc:4a:5c:a3:ee:8a:9b:fd:
e3:bb:97:e5:fe:ab:ca:f1:34:ad:27:aa:6d:b5:d3:60:ab:e7:
14:7c:94:38:95:ea:a2:d6:5e:b8:8a:7b:61:17:41:81:fb:f9:
b5:8e:cf:1d:0c:eb:3f:5d:26:ef:b1:d6:6b:c2:c5:91:cf:85:
14:78:9f:e9:3e:f5:9e:f7:55:51:3a:a0:4d:9f:9e:ec:8d:01:
df:a6:7d:70:0a:a7:51:f1:19:56:98:dd:a1:76:f4:78:3e:2a:
c2:a2:1c:45:11:69:a4:ac:b5:88:b8:b3:3d:81:ab:2c:86:b9:
0b:37:2f:f4:ac:4d:8e:fb:02:75:7d:4d:1a:46:ac:9d:56:da:
a3:d8:6a:29:28:93:26:68:d4:1f:6f:9c:c3:04:f9:bb:6f:c9:
fd:46:d8:fc:b1:44:02:8d:80:dd:d4:fd:f1:01:94:f0:65:c6:
f0:37:f3:97:e6:c4:6f:ec:09:e0:df:27:e4:25:d4:5c:8f:2b:
69:f0:cc:31:bb:42:16:9d:0f:a3:bf:64:03:99:56:c6:f4:75:
81:c1:8f:43:a0:cd:0a:db:80:10:74:45:61:28:35:a5:ac:f4:
fe:60:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:32 2026 by rpki-client