Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: lULHz1vp0yO6N8rFw2M3lR0JKqHzgbjdcYhQu5srFZ8=
Subject key identifier: DE:71:F0:A7:5D:A3:20:5A:43:DF:E4:A6:41:92:55:59:7C:D0:B9:E9
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 019D37C0653ABC45DD98B6E88C20498827A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: ezKwfqHcvnSdgSDeHejUK23uqySzcVn+TCOe///hHQA=)
2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:3a:bc:45:dd:98:b6:e8:8c:20:49:88:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=de71f0a75da3205a43dfe4a6419255597cd0b9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:e1:de:2d:7b:5d:74:de:b9:5e:9a:db:f4:
e6:db:03:7a:b1:d8:38:4f:ef:f4:d8:ce:03:bc:fb:
27:4f:f2:62:1e:5b:a1:f3:01:c6:c6:dd:8f:a7:b9:
b6:71:f7:5e:06:2e:dd:3b:44:71:37:70:73:b2:1e:
1a:3a:eb:1c:f3:f2:c6:16:a5:c8:82:90:bb:f6:27:
14:55:d1:2c:04:fc:17:07:cd:4b:a7:0e:ad:b6:11:
80:aa:40:54:35:42:49:80:49:bd:59:4f:7d:cf:bd:
7f:74:6c:2d:a6:26:b1:36:5d:de:b8:1c:62:a3:49:
a6:07:9f:05:95:57:6c:05:17:79:f7:84:ea:0e:83:
04:c6:f2:20:48:91:cd:a6:75:f0:17:63:32:7d:b9:
a2:b2:be:d8:a8:f9:df:56:e3:8e:37:2b:43:a0:6c:
21:64:33:0e:ed:b0:8f:32:40:e2:55:be:9b:68:7c:
17:80:77:5f:d7:5e:24:15:77:64:5c:4e:f7:7c:51:
8a:01:f9:b7:54:ec:df:98:a1:f1:c0:0b:cf:34:5a:
79:f2:2a:45:37:e8:a1:96:a0:b0:b5:d1:cf:13:0f:
e7:d7:fe:54:9f:3a:34:a3:4e:d1:54:0e:4e:89:e7:
cd:99:2e:7b:b9:d2:7a:24:c6:b9:f8:72:dc:ab:fd:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:F0:A7:5D:A3:20:5A:43:DF:E4:A6:41:92:55:59:7C:D0:B9:E9
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:25:da:0f:4f:85:31:7f:16:01:c4:45:dc:11:46:ea:70:
53:ed:29:ba:c8:1c:ad:1c:86:b1:f9:ae:d6:c5:97:d5:5d:31:
19:40:8c:3d:8d:59:0e:63:96:8c:22:c1:76:37:78:b5:05:97:
15:0c:f8:bf:62:60:90:a9:89:b5:6b:78:28:82:ce:ad:80:cb:
8a:6e:88:84:7f:c2:cf:ee:7f:1e:95:7b:ad:99:b7:49:1c:6e:
b8:cb:3d:4e:25:3c:a5:ac:82:c1:96:c0:b1:26:ae:08:73:8a:
a5:a2:fa:15:e0:2f:e6:54:77:45:66:78:d5:6d:a1:a4:f2:8c:
88:83:62:21:0c:31:5c:5f:56:d0:fa:f6:72:b4:6a:cb:77:79:
d4:06:68:0f:fa:5b:33:3c:79:98:17:90:11:e7:c9:26:7b:39:
f1:49:3b:59:d5:03:e6:39:e3:79:f4:e5:98:eb:c7:40:bb:14:
5c:c4:3d:0f:8e:a2:2f:66:36:40:98:da:ef:ff:83:70:81:0d:
2a:46:41:c5:0c:cd:ba:c9:80:9b:dd:49:6c:62:3b:48:90:08:
da:8e:62:84:36:f9:88:48:19:ac:e9:bf:39:c6:d8:c0:e2:0a:
26:84:0f:7c:54:4e:15:fc:09:c2:08:c7:47:cf:5f:10:b6:0b:
ea:fc:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client