Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: 76pOhyM6qHNs5ZIMUkNC1Gev2AFXhC2k9MfZdN9XZks=
Subject key identifier: B3:EA:69:15:D9:AD:9E:80:B2:8E:80:57:EB:6A:4D:A5:15:87:F5:10
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019D3941A59B29D28AB5B0D416E37DA36051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 082B
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: B+RYxF+hzFLy7DB2SOlczUrQfh8YoxcUKw/In4PXPyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a5:9b:29:d2:8a:b5:b0:d4:16:e3:7d:a3:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=b3ea6915d9ad9e80b28e8057eb6a4da51587f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:71:d1:e7:87:1a:9d:3c:8e:16:6d:30:51:
93:02:f7:3f:12:20:35:4d:4d:fd:95:76:2f:dc:83:
89:96:90:e6:59:0e:8e:4e:14:4a:2c:37:a1:e0:f0:
50:bb:8b:d9:32:09:e1:5f:a9:ff:b8:e6:81:be:00:
a1:de:94:63:0c:53:02:81:4b:45:a6:ac:8f:4a:f1:
a7:41:6d:cf:30:c7:0c:e2:36:b5:ab:fb:96:06:97:
f1:65:ca:f5:45:c7:24:13:6b:01:06:16:dc:26:72:
95:fc:9e:92:09:72:78:f1:e7:79:43:f0:51:d1:54:
1d:4e:b3:1c:19:22:28:84:2e:e5:08:a9:d7:f4:98:
bb:60:eb:24:dd:f4:95:b1:78:d5:62:c4:6f:37:95:
9c:4f:41:2e:62:d4:16:6e:1e:ea:7d:3e:38:77:c4:
51:e2:62:ce:1b:96:8a:8c:5d:39:78:5b:a6:39:3a:
28:55:76:e6:fc:d6:f4:ab:76:88:29:08:e0:87:3d:
95:f2:c9:9a:13:f3:6d:e9:35:7b:7e:c1:40:d9:ed:
7c:fb:3e:57:09:e7:0f:da:c5:49:6e:2b:36:d7:79:
cc:74:89:1e:48:17:f4:08:32:24:fe:d2:fa:7d:aa:
e7:ab:87:c9:7c:a8:86:94:4e:1e:ee:dd:2c:c8:99:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:69:15:D9:AD:9E:80:B2:8E:80:57:EB:6A:4D:A5:15:87:F5:10
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5e:71:47:db:f2:32:ae:60:c0:0d:4b:a7:b4:dd:97:f3:90:
be:95:a1:73:5a:0b:c4:e8:1e:62:7a:9e:0d:05:c1:b0:1c:c0:
8a:bd:89:4a:63:2d:b7:e7:86:99:ac:c0:ee:f9:2e:fc:ef:40:
e2:28:64:f6:b6:ff:39:2b:bd:b3:ee:30:ce:e7:2a:89:e3:d8:
70:ca:c4:9b:26:61:7a:be:43:b3:b7:68:16:ba:be:03:65:7d:
72:29:b0:ae:be:98:03:55:6d:df:2c:d9:45:e8:ce:95:f3:9c:
96:83:c0:70:d6:ed:82:d7:cf:ea:eb:77:c6:fc:60:bc:5d:82:
85:d1:2e:27:28:98:f2:68:28:b8:d1:45:79:a3:f4:fd:e7:06:
a0:77:b5:9b:40:90:00:80:9e:cb:39:66:77:25:7e:6d:39:06:
4c:0b:b4:c3:11:8a:63:88:ef:af:61:52:fd:a8:c6:f5:f7:c7:
8d:55:f0:69:7f:12:de:d5:66:10:48:25:44:bb:35:d2:82:56:
c3:ce:57:b9:4f:27:16:05:b6:2a:94:b3:4d:94:ad:c4:c2:9d:
d6:ce:d0:8a:1d:c8:f1:76:be:8f:87:5d:ce:53:06:86:69:92:
f4:89:5b:9e:eb:96:30:61:50:37:79:43:b7:eb:f8:ab:4b:90:
ff:fb:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:45 2026 by rpki-client