Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: h4voRO/PqM4xh4EN229a4xsIO6nGJVebWh8rPIA0ZZo=
Subject key identifier: E0:87:4D:50:FD:0C:0E:BB:64:E2:FF:43:91:08:AF:0E:03:3D:6A:7B
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019D38D3C35B728BDFF89FFEF7441CBFEF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 0350
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: M4LvYsMtYYsjzaLhSbpoGIqU3CsuY7fC/XmINm/i4O0=)
2: qVZeyuIJgAH_RvLNP7X_MFn3Jws.roa (hash: e8ltV6uZOZ7loOT5ePx9DkMlZ9YWrSrqO4NGgl5qtP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c3:5b:72:8b:df:f8:9f:fe:f7:44:1c:bf:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=e0874d50fd0c0ebb64e2ff439108af0e033d6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:e5:08:b3:9c:a9:70:b4:7d:65:8e:f1:87:
df:4e:b0:bf:0f:15:2e:a2:f5:44:90:2a:32:33:97:
c1:d5:09:37:51:ff:70:2c:5f:04:95:cb:7c:ad:ba:
67:1c:a0:90:dc:81:e6:79:cd:a7:45:fd:b4:19:97:
ee:2a:42:69:a9:6e:d6:4a:5f:c9:e6:c0:35:f6:23:
29:d4:e4:69:aa:e8:f6:fd:10:b0:44:73:28:f1:f2:
63:0b:63:9e:c9:e2:69:35:ef:0f:ed:d9:10:74:a3:
28:9b:23:90:64:d1:1e:32:37:b4:62:61:53:e8:e1:
3f:1e:21:3e:c7:fa:82:84:0c:e3:84:53:ca:9a:3d:
ca:5a:ba:ca:22:9a:6b:2d:55:a2:ab:6a:3b:61:c2:
b6:34:36:2e:d2:af:b7:61:ab:53:16:8b:cb:07:6c:
61:3a:ae:5c:f9:db:41:cf:03:7b:7f:33:1b:d2:ee:
99:49:b1:81:5b:6d:54:7b:08:ed:f2:70:b4:c1:df:
7b:a8:ba:8b:1a:ef:c3:cd:16:c1:d9:db:3c:ae:79:
b6:e6:d7:b9:7a:2d:79:e7:ac:85:3a:e9:ff:56:9d:
f9:16:3b:0a:05:43:81:d2:e7:13:94:06:79:e8:5a:
e3:36:0c:33:49:8c:44:55:df:34:2c:73:f9:3c:4d:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:87:4D:50:FD:0C:0E:BB:64:E2:FF:43:91:08:AF:0E:03:3D:6A:7B
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7d:50:2e:6d:bc:7e:9a:fc:c0:a7:c0:3e:a1:62:49:c6:44:
e4:12:04:82:65:2f:79:94:24:d0:7c:59:e1:f8:c4:d0:9f:6a:
e1:c7:28:8a:15:86:26:86:5d:7b:56:c4:ca:5e:27:a9:2f:4d:
a0:36:15:bf:07:9c:ca:de:7c:c6:b6:9e:0a:e1:a8:4b:5d:89:
96:2f:63:36:bb:39:bb:db:fb:a9:95:b5:9f:77:2e:be:35:ff:
60:29:b0:1a:03:b6:db:f5:ff:ac:20:74:b9:68:ac:b4:d2:a2:
fb:37:50:f0:ff:d9:76:e7:d8:a3:6e:e7:7b:6b:4e:b6:2c:9c:
ed:22:a7:61:cc:26:c6:3f:78:6e:b5:88:7b:0b:25:8e:82:bb:
81:18:10:24:1a:a3:5a:85:e5:96:ee:2a:e6:40:f0:38:31:dc:
82:df:00:91:bc:d9:1f:15:eb:dd:49:28:3c:de:39:e9:7c:64:
bd:2b:37:5a:ab:72:a6:a2:f0:13:08:15:f5:73:9c:21:8e:85:
97:8c:34:40:b2:26:5c:0f:00:7b:12:58:e8:d5:52:cc:a7:f2:
ff:cd:5d:64:ab:dd:b3:5a:d8:44:7d:7d:a9:9b:5e:a9:db:87:
76:ae:68:2e:dc:48:17:29:b2:28:1d:2d:f1:7b:67:70:7e:4d:
2e:32:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:42 2026 by rpki-client