
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: 5l9kXs2iNyYaOww0GyVMUkUI2Xyp4ZR0O9EiANqGzmo=
Subject key identifier: E0:0A:BB:00:F5:9B:8E:E6:1D:E1:8A:F9:89:33:4C:68:03:6E:7E:27
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019D38663EADD4DDAA7C3E201822F008FD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 1013
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: Sy3X1jkUd+tBa+SiEAmG5eiwFufSB31vmUI6qFYYPOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3e:ad:d4:dd:aa:7c:3e:20:18:22:f0:08:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=e00abb00f59b8ee61de18af989334c68036e7e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:a1:2f:55:99:1f:a9:91:34:1b:ff:92:cc:
2d:cb:5e:a6:92:8f:9f:64:22:f5:44:8d:f8:0c:99:
0d:d0:0c:9a:64:64:43:2b:1c:67:92:3d:ba:ac:b6:
20:08:a1:e8:47:f9:7a:6b:d1:10:2f:49:47:5a:ae:
46:c9:94:02:0c:e4:99:5b:21:aa:7d:bd:b8:1e:12:
a5:1c:55:a8:46:66:fc:ea:3b:20:71:91:92:e6:ac:
06:97:39:19:19:89:82:67:bf:6d:16:c4:64:02:46:
db:2a:c7:3a:0c:c0:13:e4:3f:56:3e:29:1f:43:dd:
3f:be:0e:53:31:5d:c2:26:dd:a5:1f:e6:09:97:5d:
92:60:9d:f5:2a:14:92:dc:a5:81:82:85:85:11:3c:
99:5a:75:b2:94:c7:bf:7f:f2:4d:70:f9:f7:7d:35:
2e:07:07:1f:6a:b2:f1:7a:ee:6b:90:2f:dc:e5:3f:
c1:f3:64:47:30:c2:98:69:db:e5:58:d8:e8:a3:79:
ff:21:9c:21:66:f2:af:3a:c7:14:62:c5:7f:49:10:
16:e4:96:77:79:09:27:3a:97:9a:51:de:49:4c:db:
26:6d:56:d5:26:06:85:f4:45:4d:62:a7:5f:13:95:
32:bd:c0:81:fe:41:cc:1a:ee:b5:74:36:f8:6e:a3:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:BB:00:F5:9B:8E:E6:1D:E1:8A:F9:89:33:4C:68:03:6E:7E:27
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:a2:22:d3:56:b8:57:d6:75:ab:1b:88:2a:26:ba:f0:e6:
c7:83:82:8c:38:44:2c:ed:86:2f:06:54:ff:8e:cb:79:8d:19:
03:4a:2f:00:73:a9:2b:ef:d6:ee:f1:87:04:ee:a7:ea:3a:0b:
d6:af:ed:81:c3:3d:40:2f:67:ae:d4:3a:6b:11:35:9f:6e:53:
92:23:25:7d:4d:1d:6b:3b:80:73:ba:e7:04:9a:3d:a4:6b:c7:
bf:9d:88:6f:21:92:52:72:a7:05:6d:60:88:05:1b:d1:f7:b4:
d2:c5:03:7c:b0:1b:37:59:13:b8:ca:a2:ad:40:c1:77:e0:67:
26:96:be:8e:9a:51:eb:95:1e:1f:77:25:56:25:cd:ea:54:3d:
63:07:96:bc:e1:d8:6a:7b:b5:98:da:73:11:40:7f:e4:22:66:
af:98:6c:57:c0:4e:ea:a8:c0:74:e7:ba:1b:a6:fb:28:4e:de:
e8:9b:9d:5d:df:45:f2:8e:fe:c3:b0:34:1b:99:e1:64:02:9d:
76:65:48:a7:d6:49:79:01:bb:26:b3:5e:e8:45:31:0f:a7:2a:
80:a2:51:f3:7b:f8:16:bf:a2:0e:94:40:d4:d1:59:c5:27:af:
84:57:db:c0:3f:ea:8b:15:50:e8:ef:29:6a:5a:f5:4c:b3:00:
d3:f0:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:29 2026 by rpki-client