Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File: 8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier: QCqx0l2kUss/SKFojLZOpfGpmY/UmpWTLep269Fbm+Y=
Subject key identifier: A3:8A:7F:24:2A:65:89:4E:BA:2E:4A:6C:8F:BE:5F:8A:AA:8E:A3:1D
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial: 019D386662A62E03057698905E4AE6C2DB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: mF0cTAFTOSrY0r0b/+B+BOU6o8RyzyfY05HrIi0B8A0=)
2: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (hash: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:62:a6:2e:03:05:76:98:90:5e:4a:e6:c2:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=a38a7f242a65894eba2e4a6c8fbe5f8aaa8ea31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:f5:60:8a:ae:a0:45:e9:6a:29:69:c1:d5:
06:f2:7d:a6:a6:d7:35:18:8b:f6:74:39:15:d3:d1:
9b:2f:94:b9:e4:4f:dc:27:61:2b:4e:fe:43:e5:ac:
a8:2b:eb:fc:6b:60:be:f7:b2:1a:da:58:a7:25:5b:
38:a6:88:00:cc:2a:e5:74:19:86:03:73:ce:c8:57:
78:40:2f:64:b6:73:bb:28:c0:b0:29:35:dd:63:1b:
20:c8:59:32:85:8c:fc:75:c7:97:e5:df:21:f3:a7:
f1:5c:47:09:56:14:21:b1:65:66:b7:e3:aa:5e:80:
a6:a3:b9:7f:32:79:d3:26:d2:e3:bf:5d:ff:d6:dc:
6c:2a:85:9c:62:4d:8d:69:23:ce:9c:58:99:6c:b3:
66:00:f7:f8:35:8c:6f:72:a8:3b:69:66:55:5d:fd:
92:ad:89:c9:80:c1:48:3d:df:b7:a0:eb:75:2e:22:
e8:45:35:d9:8a:f8:82:f5:af:86:dd:60:fe:8a:30:
b9:ef:09:ac:f0:3f:50:bb:b1:4b:aa:8a:10:d4:af:
49:85:25:83:23:f4:12:68:4a:d2:d6:3c:e7:f5:c2:
f7:92:40:a7:e6:44:6f:c5:86:76:2a:a9:90:76:ae:
3b:96:fc:05:62:a9:83:00:09:ea:c4:23:a4:33:45:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:7F:24:2A:65:89:4E:BA:2E:4A:6C:8F:BE:5F:8A:AA:8E:A3:1D
X509v3 Authority Key Identifier:
keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:3e:49:61:7a:11:53:83:e8:d2:dd:39:6d:47:12:2c:b0:
6f:59:08:2a:d9:a8:e7:b2:e3:2f:01:fc:aa:5b:ca:57:3a:18:
60:8d:2e:f7:d5:e3:a7:d4:8c:72:8a:30:4b:49:dd:b4:d6:ac:
cf:68:09:1b:30:fc:e7:d1:b5:9a:46:ab:5e:17:52:6e:8d:1a:
3f:0c:b2:1f:d3:32:69:43:57:0b:9c:e6:cd:3b:c0:be:b3:43:
b1:1b:1b:c0:96:19:52:f4:60:b0:e2:30:33:9d:55:7c:28:d1:
e4:b5:8c:30:dd:d3:41:c3:4b:25:97:e8:11:41:4a:81:df:67:
88:76:80:ce:84:de:c9:17:ee:af:78:dd:24:8e:02:32:0a:01:
08:4a:de:c4:8f:83:0e:fb:c3:77:a7:4c:8e:0f:1c:e6:2c:fd:
df:e4:83:b2:7e:47:a2:c3:f8:33:3e:02:c6:f6:a9:84:ac:8f:
7d:bd:00:9f:6f:24:d6:6d:30:bf:16:22:be:9b:68:67:4f:48:
83:b1:8c:6f:b7:ac:55:c5:63:a4:50:76:e0:50:09:25:36:67:
fc:aa:2a:3e:f4:a0:ed:22:3f:87:fb:e6:98:ab:ea:39:31:3e:
5e:91:7b:7b:95:6e:ee:94:56:2e:22:8b:fe:79:8f:cc:f2:f5:
25:e3:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:04 2026 by rpki-client