Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: QHqfuLEBoZgLfHXoxKkQTOa5MoD6Nf2/9ndddzwHEIY=
Subject key identifier: DB:C0:5A:5F:BD:87:AA:A4:09:57:E5:16:61:E7:09:00:3D:81:8E:C2
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019D1759B86E7CC7B600E36D713F410B4249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 01D4
Signing time: Sun 22 Mar 2026 21:00:48 +0000
Manifest this update: Sun 22 Mar 2026 21:00:48 +0000
Manifest next update: Mon 23 Mar 2026 21:00:48 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: TLQ2HPJYeg31e7MBRuWnL2ZbXkfGv3ZHvuWkGvH6NWw=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:17:59:b8:6e:7c:c7:b6:00:e3:6d:71:3f:41:0b:42:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Mar 22 21:00:48 2026 GMT
Not After : Mar 23 21:00:48 2026 GMT
Subject: CN=dbc05a5fbd87aaa40957e51661e709003d818ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:8f:a2:2f:d5:86:26:2e:f8:ed:60:1b:8b:
7f:e1:88:ec:fb:82:f2:01:c9:d0:17:64:f3:58:12:
5b:e7:e3:e8:a3:25:d4:66:28:bc:38:fd:90:b7:1e:
76:3b:61:71:79:2d:bf:2b:27:3f:1c:26:a9:9c:be:
8d:7f:49:20:e2:10:29:6d:c5:5e:00:04:ac:f6:7a:
91:d7:2a:69:22:e7:fc:17:fd:ea:b1:0e:dc:ae:64:
8f:2b:78:6e:d6:d3:3d:ec:02:d4:b4:30:5d:79:a3:
b4:20:ce:b4:20:41:3c:21:26:52:af:e7:47:7d:f0:
bf:15:63:e6:10:de:ec:73:87:fc:e7:89:dd:58:d2:
f5:ff:a7:93:11:76:37:eb:d9:32:bf:85:c8:64:88:
6d:52:0f:37:54:25:08:92:cc:b6:1e:dd:f2:b9:67:
08:9b:da:1c:96:53:9a:e9:02:7e:d0:70:4c:56:a6:
30:4a:ef:d9:ca:8b:88:73:db:69:1f:a9:aa:f7:ce:
7b:f5:ff:6e:22:88:96:b4:9d:84:6d:8f:5e:e5:70:
d3:39:e5:e4:63:05:be:84:d5:7d:bb:f0:9f:ac:e5:
56:8c:10:7d:1e:c5:de:eb:25:f9:e5:7e:8e:5c:b5:
ed:c4:3d:64:b5:c6:ff:08:ef:4e:70:26:aa:3a:31:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C0:5A:5F:BD:87:AA:A4:09:57:E5:16:61:E7:09:00:3D:81:8E:C2
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ba:8f:56:82:a4:41:0d:c1:0b:f6:52:ea:ad:8b:e4:e4:6d:
8e:d9:11:bf:59:dd:e6:87:ff:b4:ea:0d:d8:82:e1:ef:f5:60:
b9:88:05:8d:b9:78:fa:95:34:12:25:bd:9e:5f:b9:f5:e2:61:
43:7d:24:67:f1:45:a0:e2:5c:d7:7e:ca:dc:cb:c9:be:2a:f7:
6e:f4:f0:8d:08:d5:a9:c2:70:b3:e8:dd:4c:83:75:ae:28:a6:
85:06:41:25:10:2d:a4:2b:74:79:0e:31:1f:24:1a:74:74:b8:
35:ba:d2:24:2f:6c:f9:19:ae:2b:28:f8:bb:20:3d:a1:6d:0d:
ca:ac:81:fa:60:2f:69:29:d9:24:2f:ae:28:13:9c:19:6b:01:
3c:63:45:0e:af:d8:08:8a:e5:3f:5d:2e:d1:47:01:16:20:6d:
1d:28:65:3a:de:0d:82:7c:7c:77:17:25:0b:d4:80:b9:20:5f:
c4:7b:af:aa:2f:07:61:7e:45:9e:9b:1e:e8:03:f9:16:6e:e8:
03:b2:0e:76:f0:dc:c8:24:0b:cb:49:d9:10:0b:18:0b:84:d9:
9b:ef:5f:fc:ac:e0:79:f6:67:37:7f:8e:f1:df:bb:be:cf:56:
2a:66:30:ea:1b:51:7a:9c:56:15:f6:bf:3e:a6:94:76:c2:c0:
16:55:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 23:46:46 2026 by rpki-client