Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: v2IlkPZQt8H0pkqTOr0lbjPgyJJdKOFc0uYq3SS1IZU=
Subject key identifier: 3A:39:69:A1:89:0C:38:60:57:68:DD:7F:70:34:62:61:00:91:8A:CF
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019D156B5A4B19E372F96A033CCBE0C23EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 01D3
Signing time: Sun 22 Mar 2026 12:00:50 +0000
Manifest this update: Sun 22 Mar 2026 12:00:50 +0000
Manifest next update: Mon 23 Mar 2026 12:00:50 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: HBOYYTuXyZLOnQQ/tvv9JqqV18KQ4kTvj39f/6NwVjQ=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:6b:5a:4b:19:e3:72:f9:6a:03:3c:cb:e0:c2:3e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Mar 22 12:00:50 2026 GMT
Not After : Mar 23 12:00:50 2026 GMT
Subject: CN=3a3969a1890c38605768dd7f7034626100918acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:45:e0:40:3c:cd:6e:ac:c4:d2:3e:d9:63:
88:7b:7f:d8:db:8d:fa:ff:99:38:93:6e:3b:fb:42:
b9:09:42:c7:0a:97:76:ef:5a:d5:37:5b:77:6d:f7:
ed:1e:f5:c7:9f:5a:3a:0c:03:cf:d4:7c:51:f3:05:
a3:ff:bd:d0:f8:81:3b:84:2e:f7:12:a1:83:d0:c6:
c2:59:10:6d:cb:53:44:a6:15:a0:17:b2:71:0a:d0:
f9:89:81:cd:3a:b8:ff:d9:8c:bc:d5:fa:97:04:37:
a3:22:32:09:49:59:89:f5:b4:4e:8b:a7:93:84:42:
ec:b6:f3:bf:fd:b4:94:09:24:1c:cd:74:f0:27:d5:
5c:5e:0d:42:1e:ac:a6:ae:4d:86:b8:31:9c:1d:88:
fb:93:2f:08:28:c9:4a:88:e5:92:af:94:a0:85:1e:
48:18:11:42:51:d5:25:97:2f:81:f2:21:8e:fa:3e:
a5:8c:09:18:4f:d5:87:51:da:c5:07:34:5e:18:a5:
3d:4a:fc:d0:43:dd:c6:da:4e:7c:45:0a:5c:98:53:
4b:21:fd:45:70:03:bb:bf:2d:54:24:b6:99:94:0d:
a5:d6:c5:0d:cd:4b:84:71:95:36:7e:5f:d2:2a:8c:
a2:9b:14:30:ca:f9:8f:d5:1e:eb:3a:88:47:79:cf:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:69:A1:89:0C:38:60:57:68:DD:7F:70:34:62:61:00:91:8A:CF
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:b0:f5:d4:97:b8:82:20:a2:3e:a0:11:c0:d5:fe:d2:7f:
40:0e:d8:94:f2:bc:47:f9:70:ce:1e:84:00:24:b7:da:39:79:
59:8d:12:64:ba:10:ea:7b:01:55:7b:f5:7a:6e:e1:bd:da:59:
9e:f3:65:18:16:2b:45:fd:82:e9:8d:1c:e7:6b:c2:10:34:a8:
3d:b7:0f:90:19:d2:f1:5b:e6:cc:11:27:de:51:0e:95:b0:fc:
7f:aa:c6:99:a0:16:49:8a:eb:5a:31:12:fe:9c:5c:7d:31:a1:
86:50:4d:e5:23:bf:41:a2:59:c9:8d:2d:48:93:01:43:f6:0a:
34:d8:c6:c2:f9:cc:08:bb:0e:bd:6f:6c:eb:69:f3:df:82:69:
54:c9:b3:ee:ce:4e:32:46:9d:cf:da:a8:19:cc:25:90:b8:89:
23:93:47:fe:b1:e6:85:d3:a9:e5:be:56:1a:33:36:a4:0e:c2:
bd:82:dd:c6:30:60:50:88:35:65:1f:fd:b4:3b:94:1b:b3:2d:
0e:a2:14:f1:14:40:2f:df:8b:15:52:c4:86:b9:af:67:20:da:
ad:57:06:bb:70:60:30:c1:c4:1c:37:1a:b4:0c:eb:bb:a9:94:
4f:84:47:fb:ed:30:78:47:47:cd:0c:33:e8:09:e6:74:83:41:
9c:e2:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 22:21:22 2026 by rpki-client