Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: GLSY6kBjUbSOOWJXixoQki9wgbJSBy2yJ2XCerzQFlA=
Subject key identifier: B7:3D:27:21:90:77:48:EE:F7:C4:DA:A7:18:ED:36:19:D9:7E:4C:C3
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 019D39E59F69D52BC4BCEAD908D762FF5D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 0662
Signing time: Sun 29 Mar 2026 14:00:42 +0000
Manifest this update: Sun 29 Mar 2026 14:00:42 +0000
Manifest next update: Mon 30 Mar 2026 14:00:42 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: wlyLf95UE0sU+QTrJejgYhiOC++iPO76sd+w4O0c2JE=)
2: AbRiyCHHLVlOy73Va3XhnwR_DLo.roa (hash: 6HenLNVbET8UrcTGANmzLr3/H2ChFNxxswPM4qVTvAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:9f:69:d5:2b:c4:bc:ea:d9:08:d7:62:ff:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Mar 29 14:00:42 2026 GMT
Not After : Mar 30 14:00:42 2026 GMT
Subject: CN=b73d2721907748eef7c4daa718ed3619d97e4cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:96:bd:37:01:9d:85:09:e6:fb:eb:b6:b8:
c6:d5:ea:08:1f:c9:b1:64:93:ef:6d:3c:ba:c2:ec:
a3:66:64:7f:c3:de:24:96:0d:4d:92:16:bd:62:03:
8e:b3:81:41:c9:4b:fe:76:0f:5d:5d:51:de:69:4b:
be:1b:9c:83:b6:01:ac:ce:a2:cb:be:06:08:27:74:
a9:8d:e4:f6:f6:a8:3a:bc:81:b8:29:58:40:d3:f8:
72:44:ee:60:f6:a1:56:29:09:e3:d4:47:f2:79:9d:
b2:1f:46:7f:dc:e6:0b:3f:28:5e:64:d3:41:ad:bd:
f7:e7:d7:66:93:64:16:4d:91:e9:d5:dc:d0:28:2b:
76:16:4a:b0:fb:25:fc:6e:b3:3c:d5:4a:ca:04:90:
e6:a2:3c:09:96:7c:a8:f4:67:a3:c0:01:75:a1:25:
23:ba:93:68:46:c1:f5:3e:ff:19:60:93:d2:22:69:
ee:76:00:40:9e:cb:29:29:22:74:09:92:b3:bf:93:
cb:12:c2:5e:f7:13:89:36:f7:f9:b6:e2:4c:6b:b0:
c0:e5:89:22:c7:cc:bd:ea:4e:f3:06:71:52:c0:84:
49:be:8f:b0:e8:81:41:b1:5e:02:2a:ef:56:c5:d0:
d4:3a:79:a6:3f:3b:81:90:a7:63:96:65:cf:63:f5:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:27:21:90:77:48:EE:F7:C4:DA:A7:18:ED:36:19:D9:7E:4C:C3
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:eb:a9:a4:3f:aa:65:1f:52:f9:2c:bb:f5:c1:57:3f:af:
7f:e1:61:2c:c6:30:6a:8b:d0:c1:2c:7f:4b:15:93:50:85:00:
89:0b:b8:b9:6d:d6:de:e9:82:9f:ed:5c:47:37:18:c9:ec:57:
9c:01:e3:75:38:04:29:e1:71:fb:c3:1d:18:7f:bf:30:2f:9d:
81:97:29:f3:bd:eb:df:d6:3b:84:65:c6:61:c5:2c:2a:21:3a:
cb:8c:a3:c0:19:0a:e1:c9:7b:05:cb:91:0f:7e:fd:87:06:44:
0a:a8:69:63:f4:0b:d5:3d:43:73:0d:86:53:82:35:83:e9:10:
84:4c:b6:5c:3b:0a:a4:62:26:56:81:40:80:a8:da:11:4c:3d:
67:79:d3:f1:e7:5d:cc:6e:02:dd:e9:97:e8:e2:9f:02:fd:c0:
1e:5c:d7:cd:17:fd:dd:76:38:65:d4:4b:bb:e9:59:c3:77:04:
31:32:f6:84:0d:08:80:f6:a0:dd:a4:fc:b9:19:0a:54:2f:52:
f7:7d:32:8e:ba:bf:0f:e1:78:d6:39:a0:59:46:19:f1:73:a2:
5a:d6:6e:40:b6:3a:eb:46:32:31:38:09:51:fc:12:b0:20:30:
71:02:62:1b:a7:b0:bc:ae:a4:fc:3b:58:af:fd:e1:d9:11:d3:
51:29:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:08 2026 by rpki-client