Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: s3RGkLFDBNBWdqZYjHu2+pcSvLWKuXMPcYqdu1hXEzE=
Subject key identifier: E2:5F:99:F9:7C:42:22:22:1D:78:1C:02:7C:47:43:B8:57:D1:95:F2
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019D371B6E7A9DF38B4D5EC514FD144DF77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0CED
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: puIyv7NHFmCYG4FzBMGCiSPBMAI.roa (hash: i1Aa75xsqKrbXHK4auY98NNg+6xdfgvwz966P5kACS4=)
2: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: uCMepwsNGcNiY6ejZBUBWcJJLygI+0Qg6u9ZkY55FJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6e:7a:9d:f3:8b:4d:5e:c5:14:fd:14:4d:f7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=e25f99f97c4222221d781c027c4743b857d195f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:e9:64:c4:cb:b8:f3:1e:d4:53:0c:30:50:
49:90:14:2d:77:4b:53:ff:ee:2b:95:6d:72:5b:60:
b4:55:a2:95:12:cb:b5:a9:db:b7:7e:b9:fa:ff:c1:
a2:0a:6b:83:85:dd:32:af:2e:9d:9d:3c:74:ae:ad:
d0:5b:6d:b1:92:97:2d:4b:7d:a9:c9:17:ca:3d:5a:
80:62:9b:ad:fb:3c:76:d3:af:3b:7f:5d:2e:3a:49:
4e:71:af:96:33:e0:da:5a:c8:83:b8:35:95:dc:8d:
d3:24:bf:df:9b:a1:bc:ad:e6:ac:14:04:f6:52:9a:
b6:be:c9:8e:f9:67:2a:68:a6:34:da:bc:dc:dd:3a:
aa:1f:db:0c:90:02:25:5a:06:f1:29:1b:9e:16:a4:
9a:07:61:29:03:41:79:7e:71:76:66:df:d9:c4:7a:
5f:e1:7c:5b:7a:22:bd:a1:ab:f5:b7:7b:41:6c:5e:
94:8d:67:43:30:9d:11:35:09:8d:64:60:d3:af:4a:
e0:a6:8c:a9:e7:04:10:90:16:40:5c:a0:7d:44:a1:
9d:13:7d:88:9c:0e:cc:09:a5:6f:15:dd:11:a5:3a:
5c:81:bc:0f:46:ec:91:fb:46:ea:8e:ea:b4:de:cb:
cc:79:7d:6a:e8:d1:f5:9a:34:c1:09:3b:0e:ee:77:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:99:F9:7C:42:22:22:1D:78:1C:02:7C:47:43:B8:57:D1:95:F2
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a2:a5:a0:95:72:ec:1e:72:5f:13:dc:c8:16:63:00:fb:59:
53:17:eb:4e:38:f8:87:3e:d3:ee:c4:25:a8:2f:05:d2:8f:07:
07:55:73:e9:d8:9e:28:75:16:6d:da:91:ee:11:72:87:3e:1b:
a3:07:4f:bc:18:9a:65:cb:60:75:ec:66:78:04:d8:0b:c8:c9:
70:bc:61:08:85:e4:c0:23:66:5d:57:d2:09:e9:38:cd:17:10:
e4:6b:c0:31:63:33:1a:ea:c1:59:b7:59:46:0d:de:2d:09:c7:
64:20:4c:46:66:8e:fb:f5:2e:0f:c9:80:2d:1f:cf:f6:86:a0:
28:db:56:2a:a7:0b:c5:b6:9a:14:fc:58:67:3c:b8:9d:9b:41:
a2:dc:f9:f7:b4:a1:1e:5e:54:df:34:06:40:d9:c3:79:12:81:
cc:d5:9a:c2:d7:f7:3e:b5:f7:6d:0e:2c:e8:ac:4f:a6:ba:33:
d5:80:de:83:25:18:67:74:c6:fa:54:29:04:54:7c:b8:2d:f0:
4a:1c:4e:b9:aa:46:30:78:9a:e7:71:00:fe:b5:2a:9a:cd:11:
77:1e:db:fb:31:8e:6d:fb:25:b7:51:d3:16:5e:6e:25:ac:d2:
8a:55:8b:df:b0:b1:44:1e:70:2d:9d:ea:cf:fc:95:0a:98:0a:
4a:e8:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:28 2026 by rpki-client