Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: jElOf3XFSUj9bHiDbaBeXMEvgzTR+ly6P3dtWGSkvk4=
Subject key identifier: 1C:40:3D:8D:14:4C:D8:CC:37:3E:2A:87:73:2A:C0:A6:35:91:6A:67
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019D39E5A1B76253C7AD50A9FCBB1BF0093A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0D26
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: kW4diasQt/tkLeQd3QQdjYz8HEaETfOoLYD3+JvJTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a1:b7:62:53:c7:ad:50:a9:fc:bb:1b:f0:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=1c403d8d144cd8cc373e2a87732ac0a635916a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:f0:d4:fb:ec:19:dc:43:dd:3a:08:de:81:
5a:48:9a:f6:6f:c4:c2:01:ed:0e:1a:ab:28:f0:b7:
29:5a:23:b2:ee:53:16:9d:41:12:ad:cf:39:10:e2:
5f:33:b2:2b:66:bc:2a:1d:41:b8:8e:71:b7:78:c1:
4f:b0:71:8b:96:c1:a6:2c:45:a2:ed:1a:4f:63:25:
a0:f7:cd:82:2d:3f:f8:d7:9b:a3:e6:53:08:bd:5d:
b8:43:22:63:fd:84:18:85:79:f2:1e:bf:28:56:ff:
06:f3:b8:d9:86:2b:f3:18:4d:68:65:15:92:b7:e9:
24:c6:84:0e:2d:ca:1d:77:77:7d:ca:48:c7:82:00:
44:0d:6c:e3:1b:3c:85:a7:05:ac:60:3d:4a:5d:e6:
9b:e9:63:39:61:49:20:75:2e:13:95:d9:35:70:f4:
53:7a:1f:91:8c:e6:4d:9b:a7:9a:c5:b8:18:d8:15:
e3:17:b5:3f:2f:d7:aa:e0:b7:62:78:e2:ad:31:4f:
18:1c:a5:b1:9e:1a:c9:bd:ce:5a:96:21:37:c9:2d:
98:d3:c3:91:b1:61:e5:09:58:c4:eb:ca:1c:59:74:
80:c9:84:cf:2f:46:9e:4f:96:84:c1:f0:f4:9e:ad:
c4:66:8e:90:5b:dc:79:38:fc:c8:fa:89:1c:6c:4e:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:3D:8D:14:4C:D8:CC:37:3E:2A:87:73:2A:C0:A6:35:91:6A:67
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:3d:c6:b0:c6:d5:cc:14:5a:50:4a:0f:cf:fd:be:21:9d:
9b:ea:7d:f0:73:25:76:b6:a0:bb:44:93:7f:42:76:5d:d9:d2:
b6:76:8c:be:f5:02:67:02:a7:1d:fc:35:35:85:6b:1f:3a:66:
3b:d7:12:84:75:0e:b2:44:e8:0a:dd:7e:7a:b4:7a:5f:34:35:
d7:9f:01:3b:1d:3b:51:8b:44:7a:64:5a:0c:6a:7c:4c:92:0b:
eb:9c:1f:d6:ac:5c:c9:39:a8:86:39:aa:d2:08:47:ea:0d:7b:
4e:be:06:2c:87:a6:28:b2:3a:41:28:5c:77:5d:07:80:73:ad:
00:34:32:06:b7:d9:3c:ff:d4:fd:90:7b:24:a6:33:32:e6:b1:
5f:92:01:ab:30:4c:40:59:96:f7:51:75:e2:ff:94:15:3b:6f:
65:1e:e6:a2:8d:78:cc:0c:96:c5:ab:af:85:42:92:2d:c2:68:
54:0f:ee:45:f0:6d:5c:31:a4:85:41:91:c7:7d:ef:b7:18:30:
bd:a9:87:76:e4:77:03:e2:91:52:fb:63:75:c2:28:6f:80:09:
49:51:5e:d4:0c:36:ba:ee:ee:1a:d0:c3:50:61:76:5e:7f:d5:
7e:2a:d7:79:b9:45:20:0e:7d:4f:54:72:50:10:b8:d0:77:2b:
85:46:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:14 2026 by rpki-client