Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File: C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier: w+6MKJt9vUmvKInLpQXSG1QTXEiEZrImSaOkPF55TnU=
Subject key identifier: 5B:50:58:D3:F2:D6:26:99:DA:AD:93:D3:12:A6:75:FA:8B:B0:7B:D2
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial: 019D38D3474888C4E1FD68A840D4F54222EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number: 156C
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 2M7JFeYv6EU7baJDuclymj7aO3Y.roa (hash: iZc3yZisPC3PtWwp2J1EiFeb+q/jB92CE8gsAYVSbys=)
2: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: czo+e7w01oKI4NKm5k3CtgVbdWTqVxe8tBdMv3/nyrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:47:48:88:c4:e1:fd:68:a8:40:d4:f5:42:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=5b5058d3f2d62699daad93d312a675fa8bb07bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:05:b0:5d:e1:3f:9e:73:ce:44:ac:5f:ec:
77:9a:61:2c:94:14:44:8d:42:0c:1d:37:5a:db:79:
23:bc:76:d6:a4:c0:86:f1:ac:13:6c:5e:7d:aa:ec:
a2:ed:30:0d:e4:62:63:db:7e:24:eb:0d:e9:2b:9a:
fc:82:15:48:a6:f1:14:e1:f5:52:d5:38:aa:08:6d:
40:89:82:72:0e:37:01:de:50:34:c1:64:6d:87:9c:
8a:b9:f4:d8:f9:21:e1:39:af:16:73:35:70:f0:19:
81:e7:0b:04:7e:d9:20:c3:cb:f5:72:b7:8d:3b:0a:
08:38:a0:cc:33:dc:36:e4:39:63:53:6e:d1:09:d2:
f4:43:7d:2c:a5:b7:3c:eb:e2:99:50:45:5d:e1:b9:
90:d5:74:e8:1f:21:6f:9e:73:6e:15:d5:42:1a:3d:
0a:39:7c:a1:f5:c9:cd:c6:5a:c2:48:de:70:f6:ce:
0f:94:6c:7c:21:e4:95:86:a5:0d:07:d1:dc:69:73:
83:3e:38:79:20:ba:b7:f6:1b:86:aa:f2:c8:fe:98:
f2:e7:00:50:04:1f:5d:7a:5b:07:a7:4c:7c:01:23:
ce:ff:99:6e:53:dc:3f:31:01:5c:b7:40:45:7e:c3:
50:3a:47:53:01:7b:77:23:d8:70:55:bc:15:43:c3:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:58:D3:F2:D6:26:99:DA:AD:93:D3:12:A6:75:FA:8B:B0:7B:D2
X509v3 Authority Key Identifier:
keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a7:08:4c:e5:ab:7b:17:f1:e2:81:d6:34:19:d7:f7:b6:fc:
c1:6c:6e:ed:df:62:e3:c2:3f:97:61:1f:48:8e:80:a1:61:8b:
77:22:96:53:73:33:d1:37:64:fb:24:c6:23:a2:b7:47:f3:94:
fa:24:63:e9:5b:22:d4:e8:b5:c2:0f:fe:eb:86:d2:ee:61:90:
ea:41:89:e7:90:21:fc:dc:fa:e3:9d:73:27:51:8e:f1:45:b2:
d6:d9:0c:10:95:fd:fb:b7:72:32:fc:a1:d4:e7:8f:32:49:70:
2f:bb:1c:8c:92:c7:48:05:02:77:c0:47:07:b8:ac:6f:53:48:
a3:fe:c4:36:9d:1a:96:60:ac:ea:c8:95:a2:6e:f4:71:8b:23:
ec:aa:86:d6:d6:8d:a9:77:30:40:ed:4f:5d:14:7c:c0:16:18:
af:3c:4d:f9:90:42:70:ef:82:47:4d:9b:e7:e6:cb:68:27:85:
b8:a7:f9:32:28:7e:d4:59:86:97:91:d2:89:dc:21:32:b0:3f:
63:12:b5:0b:3c:f3:0b:c3:00:6b:01:d9:08:d5:ac:cc:d7:8c:
42:93:7f:ab:2d:e9:43:da:93:55:17:4d:3b:74:a5:6b:07:a4:
3a:64:9f:a2:e4:f6:30:a4:8b:3a:fd:9d:db:85:b1:de:62:29:
c2:12:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:04 2026 by rpki-client