Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: RXiq13RlMbcSmd2pdwp7naQBJPKVAjdSXzENpSifjBk=
Subject key identifier: 04:66:02:1C:6B:CD:55:1B:71:15:11:C0:15:90:FE:14:52:5A:6D:10
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019D371B3939F6B0CBF787C1111A56815449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0F9D
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: Y1QMpwjg1RDRvOtdfVbd2etsg0gDQdS0DKKIS4hyhcI=)
2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:39:39:f6:b0:cb:f7:87:c1:11:1a:56:81:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=0466021c6bcd551b711511c01590fe14525a6d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:75:98:09:70:e8:5c:b9:24:4e:63:33:55:
11:f6:fb:43:27:ce:af:fa:87:e6:fd:c2:67:b0:ff:
a0:a7:86:10:e9:d5:8b:ae:34:5c:9f:31:c5:65:f3:
a8:89:72:41:0a:b4:d0:81:a4:53:a9:3f:ad:4f:db:
b9:28:16:32:e2:ba:29:ea:c5:76:ec:12:bc:e3:c4:
1d:81:dc:b5:cc:70:39:3e:3a:b8:24:91:f5:6c:03:
1c:74:ff:62:b7:29:0f:1b:52:8e:dc:fc:e4:7f:c7:
c0:6e:70:c7:36:24:87:c9:7f:d7:28:b1:80:a6:90:
87:62:f4:2f:10:a6:43:d9:cf:c2:f2:93:22:83:94:
71:ba:8d:a2:63:09:b6:44:e8:35:dd:03:28:75:ec:
a8:a5:91:e5:20:ac:7b:65:3d:83:86:b6:a6:95:41:
8f:b7:3a:2d:c3:af:66:85:80:63:a8:b9:dc:b8:92:
4a:cc:94:b8:8a:64:eb:7c:c3:59:08:df:b7:52:e8:
58:52:5c:55:8f:75:f9:60:0d:db:0a:ae:b7:10:9b:
24:a9:a2:59:a7:93:49:3a:65:d5:0e:7e:13:e1:b0:
be:06:3f:75:69:03:99:11:89:c4:f7:c0:f9:c1:cf:
44:c7:0f:86:0c:a3:70:c3:c6:7f:8d:5b:ef:46:dd:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:02:1C:6B:CD:55:1B:71:15:11:C0:15:90:FE:14:52:5A:6D:10
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8d:42:aa:86:61:aa:0a:53:a2:a1:ec:2b:f8:4e:8b:fe:e8:
cd:71:a7:b3:4e:90:8d:09:82:a4:07:17:2b:6b:fd:5c:0c:82:
8d:ce:d6:cf:f0:3b:87:80:c3:cc:c9:24:6f:6b:5d:68:39:05:
0e:5b:81:9b:73:3d:b2:2a:e8:c5:2b:44:1e:6b:49:30:d1:ef:
8c:d8:28:23:b1:91:57:bc:ed:8c:29:f9:bc:f9:33:ff:82:bd:
8d:73:f6:cc:e7:63:3c:6e:34:57:be:47:d0:26:ad:2c:46:dc:
7e:ad:c8:66:76:ff:aa:d1:8d:14:38:16:35:61:9a:3e:61:cd:
d8:ad:0c:77:0b:c0:40:6a:99:c8:06:28:bc:f9:58:dc:a5:dd:
be:5d:3b:a5:67:40:35:a1:69:91:df:1b:b1:13:8e:f1:fd:8b:
34:41:19:3a:00:f9:29:44:d8:52:68:dc:46:cd:6d:e0:06:6f:
bb:c6:ae:04:20:e8:d1:b3:6f:eb:40:97:15:67:48:50:0f:ab:
a1:6a:cb:3f:b6:9c:7f:a8:b6:23:a1:66:eb:c0:38:b9:fb:b6:
cf:42:bd:f1:29:2a:c0:fe:c0:92:b5:d4:08:b6:b6:29:a3:1c:
69:b2:4e:39:3b:d1:b0:57:69:be:44:88:de:f5:18:85:07:3b:
51:b3:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:37 2026 by rpki-client