Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier: 78FvsZvk0kSqpqLKHi/KA4ZshCAOMbxmqyV5iIr5riY=
Subject key identifier: 64:10:3B:C9:CA:92:8D:38:66:FD:8F:CB:3C:21:9F:6C:87:E3:67:8F
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial: 019D3789A4C1A3E4DFBD8ED8BC9F6B0BD496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number: 11C8
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: yCM/k7wCY6ClRkcWXtku9tUPnrDYysi1SAfrp/5hvTU=)
2: jNP4lkkfBvGwQninx6yZc-naqo8.roa (hash: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a4:c1:a3:e4:df:bd:8e:d8:bc:9f:6b:0b:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=64103bc9ca928d3866fd8fcb3c219f6c87e3678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:92:9a:22:82:73:a6:65:83:a3:97:30:4d:
f0:fa:54:57:98:dd:95:ad:1e:a0:d8:1b:57:6e:99:
4e:43:4c:d5:3d:67:19:90:86:1f:95:88:62:04:d4:
d9:67:75:c3:0f:d4:c5:af:39:38:88:1a:34:ee:4d:
90:fb:49:71:b7:6d:60:f8:5c:09:91:c4:51:8e:e9:
3d:6e:60:df:c1:15:7c:9e:98:ec:4c:27:53:5b:34:
5c:36:3a:71:97:db:af:ac:5b:ac:cf:85:69:83:33:
af:84:fc:5e:3d:08:07:58:b8:87:4e:b2:a7:7f:c8:
6e:bf:86:39:e2:f1:91:dd:11:bd:ad:70:b9:e1:eb:
13:d5:2c:78:94:0a:a8:cc:06:b7:b8:1b:91:ce:5f:
e8:5a:30:57:32:6a:82:64:70:ae:08:39:de:9a:10:
1d:06:fb:df:38:25:93:d3:e5:5c:41:5e:58:fd:8e:
91:2a:64:a3:0e:63:22:67:16:66:f6:9c:47:04:5c:
d1:e3:0f:7f:23:6e:f3:9e:da:4c:0f:09:18:b1:b0:
dc:f0:36:c1:9d:53:39:de:87:89:ff:2f:9b:07:35:
98:ed:ac:69:06:b6:e9:c2:87:47:2a:a9:d1:98:0e:
6b:38:56:f1:05:22:76:16:82:16:e5:67:44:50:54:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:3B:C9:CA:92:8D:38:66:FD:8F:CB:3C:21:9F:6C:87:E3:67:8F
X509v3 Authority Key Identifier:
keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:43:09:c7:1f:57:6b:d4:d9:e7:d8:0c:f0:5c:1a:08:8e:b7:
4f:37:00:67:86:d3:6d:18:84:0d:d6:e8:da:47:de:d5:bd:d9:
83:a3:49:72:a6:b2:5c:20:6f:10:60:80:09:d5:27:35:94:f4:
fc:9e:fd:e4:f5:ae:75:59:40:da:5f:b2:2a:8e:65:7a:2e:ec:
f5:1b:d0:9b:a7:e5:26:5d:bc:f8:22:48:37:fe:09:69:62:fe:
05:7e:26:bb:10:e8:93:06:f2:34:5b:f9:aa:1b:1b:bf:74:ee:
e0:ac:0c:d1:ce:cd:31:3e:b8:c0:d2:dd:55:8c:68:64:9a:45:
7f:fd:c7:11:2e:28:ff:b6:40:a8:3b:12:d8:57:72:d8:9e:c8:
8e:c9:3e:cf:f1:64:c4:39:59:59:60:68:0c:dc:4a:93:93:46:
6f:ad:0d:b0:df:48:40:14:c5:4d:3a:3c:19:0c:51:24:0a:38:
84:ed:6f:1a:f8:ca:94:c5:4e:57:68:98:3c:97:a9:a6:38:88:
d0:57:85:b5:b3:61:e9:f1:f0:2c:fb:52:64:cf:8d:34:b6:74:
a4:7d:30:04:76:e9:7f:0f:75:67:01:fe:44:7a:2d:e6:8c:3d:
86:6c:92:a9:1e:a5:67:be:f2:1b:81:b7:00:49:48:6d:51:4e:
f0:8b:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client