Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: 3/rmxAgHNXcQY0a/GwQ7sflu5zncwBYnn9CZ6+PsL/c=
Subject key identifier: AB:C7:58:9B:29:66:13:D8:E5:F2:B1:AD:27:60:4F:CD:76:63:1F:EE
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 019D39410C0DE87593F88E665D0933513848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:57 +0000
Manifest this update: Sun 29 Mar 2026 11:00:57 +0000
Manifest next update: Mon 30 Mar 2026 11:00:57 +0000
Files and hashes: 1: 8A44F-HK4brDvcdx38UFaUUZrxg.roa (hash: J1l91xAYUMrUVrPKe9o7rX2U+//nR5fojqbrmgbxxMA=)
2: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: jnCd5Vpk7ja+6IrnpGTnUxP9LCrM8Pvd/00kgvf1wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0c:0d:e8:75:93:f8:8e:66:5d:09:33:51:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Mar 29 11:00:57 2026 GMT
Not After : Mar 30 11:00:57 2026 GMT
Subject: CN=abc7589b296613d8e5f2b1ad27604fcd76631fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:6e:36:5e:56:46:18:05:d3:9b:67:47:38:
d6:06:ad:4d:fb:94:b9:aa:5c:27:61:a7:52:ac:da:
80:a1:88:02:eb:46:f8:06:5d:b4:6d:56:a6:8d:d1:
7e:c1:cf:f1:20:b7:9f:5d:76:59:12:01:4e:8c:9b:
f1:90:e5:32:ee:95:56:2a:14:67:aa:51:d9:d7:84:
49:ff:d2:5a:96:67:cc:1f:08:b7:76:51:4a:cb:11:
79:de:06:33:ae:aa:4a:c6:b1:1f:87:3e:62:3e:fa:
08:c1:e3:60:02:03:3e:89:a7:76:b8:8b:5e:7d:61:
f1:4c:d3:8a:86:0d:37:6b:d7:2d:4c:c6:d1:e9:69:
f3:bd:4c:55:4c:d0:f6:ff:c9:e2:6b:71:0a:bd:a6:
74:79:a7:de:88:0a:36:df:d0:08:8d:30:36:c8:8c:
c0:cb:77:4c:ea:f5:ae:9c:86:b1:d2:cb:cb:91:37:
b1:78:97:9e:e8:c0:0c:f6:be:bd:ca:03:30:36:63:
2e:12:e4:9f:43:57:dd:eb:d6:95:87:e5:7e:25:c2:
6b:e2:91:d0:cd:bf:b4:6b:d7:85:96:43:99:6d:15:
0f:1c:2c:44:4b:dd:66:bb:35:89:4f:ac:19:44:86:
ad:52:95:19:b5:0b:b2:47:cc:74:a0:5f:a2:f0:ae:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:58:9B:29:66:13:D8:E5:F2:B1:AD:27:60:4F:CD:76:63:1F:EE
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5d:e2:8a:c9:12:86:8e:16:3f:31:f1:e7:40:59:31:a1:8a:
b0:21:17:65:95:df:f2:62:8b:b7:b6:e7:af:a2:f8:5e:be:59:
c1:54:24:67:39:2e:f5:68:61:1b:f9:68:b7:b2:60:24:49:bf:
7b:60:a4:59:fd:c7:3e:f4:44:4e:d7:0e:ae:3e:d0:e3:b4:2a:
30:19:17:ed:a0:04:1a:a5:b3:4e:0d:ec:24:48:df:d0:20:64:
8a:3a:46:73:2f:cb:ec:15:ff:f1:a4:5e:54:e3:20:12:63:46:
83:4f:c3:71:58:8d:24:c7:28:cf:8e:70:bb:d5:83:ff:85:9a:
a2:51:69:51:06:f0:7a:c5:3a:cc:be:d0:26:83:24:61:21:35:
0b:86:23:de:95:a6:28:3a:de:e3:7a:ad:1f:0f:38:87:a3:a5:
33:38:de:e8:f0:5b:93:b0:ce:7d:f0:34:c6:00:2b:c6:b6:72:
0e:48:fd:04:44:7c:d8:dc:be:0e:52:f8:df:b4:7a:29:c0:e2:
2f:e8:b2:df:ff:bc:05:b1:b2:b1:9f:36:66:7f:43:05:29:4e:
ba:66:96:2f:ea:52:19:d4:cb:1c:9e:13:84:8b:e0:ea:ed:61:
f4:fd:e7:62:6a:ad:e3:a0:44:26:03:82:97:e1:7b:be:3b:e9:
a5:f9:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:05 2026 by rpki-client