Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: 4/LUXM23i/QzM66DJR8VT/AymvRr2jNsEAe+uSMyCtA=
Subject key identifier: 1C:CD:3A:98:FD:26:0E:F4:54:4B:51:5F:86:1A:19:34:21:29:42:40
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019D37C0D57167B6EBDE8E9C37A80B0631C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 066B
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: tjW2Ix8o5zTBRvBINlYgldmqqp60FWaRhBEQ0WXjBK8=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d5:71:67:b6:eb:de:8e:9c:37:a8:0b:06:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=1ccd3a98fd260ef4544b515f861a193421294240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:ac:84:e2:7a:58:5b:5f:38:b8:5c:74:55:
ac:81:9b:28:19:80:1a:75:e8:df:fd:91:26:6f:d0:
e6:5f:b2:18:31:8e:66:6b:b9:b8:91:80:92:0f:9a:
a7:be:e1:dd:c5:28:45:8a:81:8a:c5:70:78:5b:87:
71:4a:bf:f4:dc:94:74:52:32:22:52:c1:6f:f4:f7:
43:54:39:38:2d:a9:29:d9:71:a4:47:8c:d5:2f:4c:
77:30:95:7d:ce:dd:73:b7:91:a0:d7:f4:f3:bd:66:
d9:72:24:f0:a2:a0:03:44:38:93:fc:ce:3f:54:c6:
48:34:dc:ca:88:f6:9d:dd:19:c0:c2:2f:43:4c:8b:
61:d1:85:73:39:2e:16:26:11:5c:19:6a:b8:67:fd:
89:00:d3:61:d1:8b:10:d9:9a:ff:32:c3:ed:d2:da:
9d:f6:07:b7:8c:f1:af:ee:89:30:89:d4:13:0c:09:
9e:17:b9:e4:e0:56:77:cb:d6:42:cf:3c:2d:8e:39:
be:f9:17:3c:12:59:e8:13:0c:fe:8c:39:11:3b:4f:
8a:e2:e3:f5:6d:d2:5b:2c:ae:57:53:77:a8:76:28:
79:79:2e:0c:73:c7:5e:1f:39:d1:28:c2:8a:66:7a:
0d:e6:2f:58:37:0e:62:de:28:cb:d1:6b:df:1e:25:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:3A:98:FD:26:0E:F4:54:4B:51:5F:86:1A:19:34:21:29:42:40
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ac:4e:61:0f:30:a4:0b:0e:29:bd:18:80:c5:50:5d:23:c1:
38:99:5f:18:80:56:bf:20:fb:ff:c8:9d:c8:38:3f:1e:b8:e1:
97:52:e0:46:6c:06:74:d9:87:18:34:f4:9c:a6:3d:48:c9:2b:
7c:1b:a8:d4:d5:21:05:43:0e:69:9b:e9:d9:ef:32:a6:c4:a9:
43:1e:93:c2:9f:95:8f:d2:16:a9:93:51:ff:41:e0:88:3d:0b:
39:ca:7b:1b:1d:3e:0a:48:8c:29:96:11:c7:f9:34:4a:73:f9:
44:4f:15:17:89:ff:fa:b8:c5:09:84:10:cf:57:2d:42:d1:93:
87:4f:24:26:4a:5a:66:1d:5a:7c:c8:c3:b8:2f:44:78:f6:d7:
28:34:a4:a6:e9:39:68:66:9a:5f:b9:d1:e0:81:46:6f:18:2c:
86:52:e9:5f:8b:39:30:d1:2b:14:a2:45:23:70:3a:05:9e:a6:
c6:9f:58:8d:4f:b3:f2:4a:b5:d8:a9:38:d5:d3:71:28:86:d2:
65:0e:4a:cd:fe:74:75:5d:d7:e6:a6:34:a9:27:c3:5b:25:c1:
40:1e:90:ed:c9:c4:f2:d5:92:92:08:93:e3:2a:af:3a:0d:ff:
ae:7d:e0:53:53:ef:65:10:b0:b7:7c:a8:40:48:80:27:a1:a8:
c4:7a:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client