Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: KR1zO90Fdlm7vJDPzbXw+pRTQauWhjFzQkCY9hYnvIg=
Subject key identifier: 52:C9:C5:14:2E:42:2F:A7:AF:B1:31:21:98:80:D9:04:36:7F:E1:8E
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 019D386661721F1B0DB36D684848D27F3B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: KEVzLpiIlZvYuzak8r2VEN0lblo.roa (hash: vPPG7HusI8DfbdkDC9LeEMSZP0GfYBRUhRWHNDe+9aA=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: JUxGwSjLPeOH1Xbxrl8yQInf5E/uGpgNxcn4wAdBw8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:61:72:1f:1b:0d:b3:6d:68:48:48:d2:7f:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=52c9c5142e422fa7afb131219880d904367fe18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:af:eb:82:ed:81:04:af:3a:35:3d:4a:61:
f0:31:bf:1c:81:a2:3c:14:29:e5:3a:88:3b:d2:df:
a1:55:94:f1:80:1b:06:74:3c:16:86:e4:cc:2b:86:
d1:43:db:61:cf:19:ea:d4:f9:76:9f:f7:48:40:38:
3b:b1:48:5a:ff:7d:68:a8:47:b1:a8:25:5b:cb:b0:
dc:2d:7b:60:57:05:1e:3a:ef:3b:9f:ab:21:fb:b9:
b3:f6:07:23:f6:29:de:65:c9:50:e1:2b:b1:12:6e:
41:b1:8e:ce:eb:22:90:fa:34:6d:48:69:3f:f9:1e:
24:f0:f0:db:3b:4d:9b:a4:3a:72:70:55:ed:ef:63:
d3:7b:31:8a:2e:27:b9:e7:b4:91:e8:ed:89:66:06:
03:c5:1c:f3:ae:5f:94:a1:7d:56:cc:25:ae:85:e0:
23:dc:ca:84:83:64:75:12:9e:42:e2:97:bc:e2:97:
99:12:51:d9:3e:d1:5b:71:d1:78:a0:5e:c0:80:c5:
d4:33:f8:0f:84:24:27:3b:d6:5d:99:4f:29:45:9e:
05:86:15:17:ca:7c:14:09:77:c6:6d:75:4f:b6:23:
d0:79:85:b0:87:55:3b:bf:d2:44:51:41:c2:c2:9f:
63:dd:94:e8:7d:f5:02:c8:45:1d:a9:71:53:3c:65:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:C5:14:2E:42:2F:A7:AF:B1:31:21:98:80:D9:04:36:7F:E1:8E
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:d7:31:ab:f0:d8:62:7d:71:10:a4:ab:b5:55:36:30:f1:
cc:45:37:21:a6:9d:52:48:a2:5c:7d:cd:81:55:34:bc:1d:5c:
92:95:27:8e:a9:f5:de:56:14:1b:f4:0a:bc:1c:fb:4a:39:96:
b7:9a:04:0e:db:10:cf:1e:ac:0d:87:4b:8e:b3:62:15:11:ce:
04:9e:c3:4f:67:d0:6a:cb:9a:17:35:b5:0b:b7:11:14:05:53:
3c:f5:65:9f:7f:08:a0:e6:b4:78:df:74:c0:8d:65:49:be:76:
e6:0e:ae:35:fb:7a:8a:4e:a6:d6:ac:4d:1a:a1:50:fd:72:f6:
ae:2a:3c:0d:ad:8e:10:53:3e:9d:ec:06:7f:5d:65:ed:9e:a2:
e2:5e:ff:cd:de:05:09:94:0d:2b:9c:11:46:b7:dd:d1:6c:ef:
da:8e:61:21:8d:1a:f7:e3:10:91:a9:ad:a5:cd:ed:af:b9:5f:
16:d0:5d:13:cc:b9:cc:e2:b3:05:57:2e:2b:59:06:7d:3f:f5:
4b:95:b6:02:f3:57:1d:f3:10:31:6d:ec:f8:27:86:5c:7c:df:
0e:b7:da:45:a9:6f:a0:8a:3c:dd:1a:76:36:3b:64:20:d1:6b:
a3:59:c1:84:18:5f:30:6d:4d:26:06:28:56:66:96:73:d0:0a:
fd:f8:a0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:00 2026 by rpki-client