Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: 3cvZK9OXKd78geSn/T48T38BnD9VHFLvxrjV2EQg9G8=
Subject key identifier: 12:B6:7E:4C:C5:01:8A:8F:E2:81:F4:E2:C1:D0:83:DF:66:AD:2D:DC
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019D39AED081BD99218EC9FB9A474DB966F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: Pbk8bIBEC1AMd/CedmT7BGr0UxAstClClhiJyriYhHg=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d0:81:bd:99:21:8e:c9:fb:9a:47:4d:b9:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=12b67e4cc5018a8fe281f4e2c1d083df66ad2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:c2:44:41:02:7c:31:b6:54:35:cd:a8:d6:
e9:21:75:15:eb:e5:ad:bf:16:fa:bd:40:cb:05:4f:
65:5b:44:f3:7c:09:86:a4:05:c8:7e:6c:ba:9b:28:
7e:49:13:f8:5d:09:a2:6b:1d:5f:f0:a0:24:5f:f5:
80:54:99:0b:08:e6:0d:e9:77:24:b4:ff:47:67:7b:
78:4a:9b:5d:a4:35:5e:c7:01:f0:48:1b:91:46:4e:
38:ba:ae:b6:22:8a:0c:38:4e:d8:75:69:e8:38:f7:
55:8d:e9:7e:c1:ba:47:64:34:a1:a3:f7:28:6c:17:
20:9c:51:8f:37:91:ae:ef:29:f8:43:f7:d2:21:4b:
0e:26:3f:fe:8f:f1:12:29:97:bf:36:da:5b:94:82:
64:79:00:9f:55:cc:0a:89:a0:c0:68:1d:ab:2e:d5:
fc:d1:91:aa:eb:37:6b:4a:1b:70:bd:bb:60:38:dc:
c2:00:6d:f8:80:5f:b1:7f:37:84:7d:77:90:26:42:
e5:1e:49:e2:5c:12:0b:c2:73:40:64:e1:19:43:b9:
49:0c:01:2c:4e:4e:ea:3a:31:b1:c7:39:e1:90:83:
e6:f2:a5:1c:4f:a5:25:f5:db:2d:bc:c6:4f:fd:d3:
a0:51:15:d2:bd:5d:8c:50:d1:7e:77:66:77:de:9d:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:7E:4C:C5:01:8A:8F:E2:81:F4:E2:C1:D0:83:DF:66:AD:2D:DC
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:a4:7b:ce:75:f5:8b:ba:2c:90:5d:a1:22:5f:04:6c:92:
bf:2e:7d:d8:fd:d9:fa:2d:43:d8:d6:34:f9:fa:86:4a:a9:69:
c6:7a:12:dd:93:f7:c4:60:7a:59:10:3c:e0:9e:99:73:75:40:
e9:a4:12:cf:70:d1:c9:54:ff:8c:dd:04:28:38:46:4f:8f:66:
b8:67:3b:42:5e:09:70:03:2a:d0:a6:bd:47:a8:df:04:68:b8:
bf:15:c4:0a:0e:3b:d8:05:9e:6f:14:99:18:97:a4:14:af:ac:
c6:18:4f:4b:e1:86:09:e5:44:c9:c9:eb:61:26:1b:f2:e9:9b:
ce:f0:e5:42:5f:9f:13:a8:e4:a1:fb:21:ae:c6:46:59:c6:b4:
be:7d:f9:c0:33:eb:c9:e6:87:99:61:dd:f2:d1:6b:de:7f:2d:
1c:6f:4f:4c:39:b0:f2:d0:38:fb:e5:be:30:f9:e4:bb:36:dd:
ae:0d:a7:ed:28:fd:50:e0:60:91:d6:a2:77:0d:c1:f8:0c:92:
52:51:d0:0a:69:3f:1b:61:67:07:52:cc:d8:26:44:a9:63:d2:
d8:4c:3a:34:09:e5:4f:e4:15:01:15:ea:0b:36:ce:5e:15:c3:
21:72:ed:25:02:e3:f2:e6:b4:4a:3b:34:7b:3a:0f:62:ed:50:
dc:4d:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:45 2026 by rpki-client