Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: KoXhYcyDxHjr+QuUpUhNTWt8SjFIADu8dDYIxwoEtns=
Subject key identifier: 11:15:24:DB:40:54:81:EE:CD:45:21:60:44:9E:A9:92:D5:61:03:2E
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019D3909FA9DDE76B26050AE3EAD56FCCC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 12D9
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: G8ppj5GKjBrQrHmQlMrEUFHGJI6ouuxI3mv8W79WC8g=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fa:9d:de:76:b2:60:50:ae:3e:ad:56:fc:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=111524db405481eecd452160449ea992d561032e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:58:8a:46:48:27:40:d7:67:57:81:b0:d6:
fc:16:3b:96:8c:2f:fb:39:b9:cc:a1:16:8f:51:93:
ab:47:53:88:7f:c2:33:2a:b4:93:0d:c6:e1:48:e1:
7e:d5:a5:90:4a:82:fb:1d:8f:f4:35:55:a3:65:b0:
f2:ef:86:7c:49:4d:3c:8e:73:06:9e:be:6f:f0:81:
4c:ee:7a:80:8b:a0:40:0e:3f:5e:3c:98:26:fc:76:
55:91:17:12:d4:f7:da:9a:62:80:37:1a:fb:fd:0b:
4b:0a:bf:88:c1:3d:72:38:00:d2:86:dd:3e:d4:90:
54:02:83:c2:45:d0:1c:c1:08:f9:2f:92:67:9f:75:
ed:3a:21:db:23:97:e7:13:3d:f4:93:55:60:3a:67:
9e:38:81:00:e4:2b:07:2f:8a:40:dd:52:9b:fc:35:
73:57:df:30:79:77:a1:d3:b9:db:98:d3:49:8c:99:
20:94:13:8c:ee:24:90:02:33:a9:a3:2f:ab:72:13:
99:81:92:7c:ea:84:d1:34:d1:00:c5:3f:50:82:4e:
07:15:0f:52:1f:7b:45:b0:10:16:ae:f7:b3:39:70:
73:74:b7:ff:47:b1:8d:88:40:d8:07:17:f6:23:6e:
67:ef:76:ec:9f:aa:64:84:c2:aa:0d:50:32:27:d7:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:24:DB:40:54:81:EE:CD:45:21:60:44:9E:A9:92:D5:61:03:2E
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ad:49:5d:01:9c:87:49:ca:f2:ae:7a:f0:27:e7:04:ad:bd:
43:c2:98:2a:11:48:f3:7d:c1:fc:6c:df:0a:b9:87:d4:d5:65:
f4:2f:7a:bc:3c:fb:fd:16:b8:9f:b6:d6:fa:9d:34:dd:94:81:
de:1b:c2:10:f4:60:ba:5b:1a:37:d2:56:2a:50:96:3e:5e:e7:
bf:8f:92:7c:8a:12:bb:09:7a:8b:68:d0:ab:42:84:bc:8f:8b:
89:4e:6c:56:fc:ae:d7:fa:94:53:93:c9:bf:de:41:e6:d4:b3:
08:f4:8f:9a:55:06:43:87:3b:61:fc:21:68:46:d2:2c:07:ca:
8e:48:a5:44:56:3b:cf:1b:f9:03:c5:a8:1d:a3:c8:d0:63:a7:
42:4a:07:e7:d5:22:e6:0c:29:6d:79:b2:db:a8:2a:7f:33:86:
7e:62:42:35:21:05:be:eb:db:c8:ba:63:3b:66:cd:3c:42:cd:
8d:e5:36:30:fb:c3:09:4a:b2:cb:de:f7:ee:44:d9:81:a8:65:
6d:6d:6a:84:1a:7d:82:4f:ac:30:38:83:49:f9:bb:cd:f3:7b:
3b:59:58:5f:7e:01:35:4f:fa:b1:f7:89:a2:bc:40:b4:f4:3c:
a6:af:b6:02:11:6c:bb:04:cf:8a:61:8c:a3:81:45:54:74:ec:
ff:da:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:23 2026 by rpki-client