Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: L3IYxDDD8Fj3ToDegFgp/HeNjnWj0OU22grWEIPnSuk=
Subject key identifier: 32:7F:48:76:F7:DB:4F:1A:D1:78:37:C9:58:68:0D:78:9A:82:26:4C
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019D389C4CF8239BC675B1DB024D9AE12B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 12DE
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: rCkuT6NO0wCXx8IS81hnFjo9liKuvf4l7g0JHr5qQ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4c:f8:23:9b:c6:75:b1:db:02:4d:9a:e1:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=327f4876f7db4f1ad17837c958680d789a82264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:37:f7:3b:ac:a9:7f:60:2d:17:8b:4c:62:41:
ab:79:f2:fa:b2:74:ad:bb:10:7a:5c:4b:6d:73:ee:
df:ba:6b:18:46:af:f5:a9:3d:10:6c:1b:36:b0:75:
53:a1:a3:e6:41:ab:07:92:26:ce:43:9b:e1:6f:16:
30:c3:de:27:94:e5:ca:27:37:9e:b2:34:40:b6:73:
a8:dd:04:26:9d:bf:85:cc:cd:dd:47:63:e5:ad:cb:
b6:aa:52:16:01:bc:16:d3:54:73:fa:32:2e:27:ba:
cf:83:b7:8c:01:f2:8b:ca:65:56:e3:e7:12:59:9a:
40:8f:72:ae:72:de:e9:12:09:f7:de:8b:7d:78:05:
f7:45:55:31:ad:4e:3a:dc:3d:e8:b0:69:e0:62:c3:
1d:5a:54:c0:23:a0:bb:41:3f:b5:ee:42:7f:c6:25:
a0:a9:33:0b:cb:26:62:2f:4e:f6:ac:e0:36:b0:b7:
7b:e8:85:0e:9a:f6:23:27:3c:34:c4:fa:ee:42:ad:
d4:3a:33:70:f2:df:ea:98:7d:fe:50:06:46:d9:e2:
72:61:9a:80:04:14:6f:97:58:e5:c9:b3:79:13:16:
d9:c0:47:25:66:af:b3:67:fa:8f:e7:1b:28:54:02:
8e:f6:b2:c9:d6:f4:be:b4:fa:82:e6:65:7e:37:80:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:48:76:F7:DB:4F:1A:D1:78:37:C9:58:68:0D:78:9A:82:26:4C
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:b2:ed:a8:3a:2d:38:5a:11:2b:bf:df:1a:b6:69:3a:c1:
01:35:c4:b7:80:fb:7d:46:1d:6e:6a:be:5e:1e:95:e8:6e:20:
a9:98:af:e1:df:f0:cd:30:c9:a5:c7:8c:95:b6:b6:02:f6:be:
4f:62:76:9c:d8:d4:d9:cd:14:70:71:60:1f:e6:1e:44:08:3a:
b0:21:54:ad:e1:97:bf:cb:58:52:2a:35:be:ba:9f:30:dd:dd:
fd:14:a5:aa:66:63:65:1a:cb:a2:6d:b3:bd:36:f9:2c:e5:d5:
74:07:6d:e3:80:e4:7a:25:3d:e6:cb:36:f7:c3:e8:98:e1:aa:
fd:e8:1f:9a:7b:43:06:37:8c:02:9f:b5:99:37:6b:cc:b0:7a:
97:8e:e4:1f:6b:3a:da:e3:6f:07:f1:0c:9a:53:3f:b5:ff:43:
b6:22:93:30:a3:85:c7:07:43:a7:d8:d4:80:5a:e3:75:07:72:
92:52:62:82:89:7b:20:a8:01:2a:ed:7e:46:37:21:17:cc:d4:
d9:ec:97:0d:cb:b1:ef:11:a3:98:8f:48:33:7e:24:0d:1d:6a:
58:26:46:49:68:01:8a:15:5a:cd:75:4a:72:b1:2c:6c:9f:41:
dd:87:a0:d3:31:e3:7b:1c:0d:e7:40:b2:8e:65:44:41:6d:ca:
9e:4b:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:21 2026 by rpki-client