Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: BQfTMssKaPl5zPcrM373exlubjas2aaoEZrlgzyP3dw=
Subject key identifier: 4A:B9:5E:52:AA:A2:18:C6:24:E5:71:37:A5:73:7E:3D:C5:52:F5:8B
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019D3A1CBEFC47862F6648B9DCA6E8568832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:00:55 +0000
Manifest this update: Sun 29 Mar 2026 15:00:55 +0000
Manifest next update: Mon 30 Mar 2026 15:00:55 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 8hKtZZBhxwrUbZbTmNzrYVrhpf8H+SUkCg+41ApRi1M=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:be:fc:47:86:2f:66:48:b9:dc:a6:e8:56:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Mar 29 15:00:55 2026 GMT
Not After : Mar 30 15:00:55 2026 GMT
Subject: CN=4ab95e52aaa218c624e57137a5737e3dc552f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:b5:4c:cc:c5:bc:d4:6d:e3:27:3d:2d:48:
1c:50:e9:64:76:ce:27:f0:5b:27:00:67:64:34:5b:
c4:a0:1e:52:eb:8b:5a:ce:2c:78:42:31:03:98:0a:
e0:b7:69:9d:3a:d2:ae:18:7d:cd:8e:1c:48:d4:7f:
7e:ab:37:e4:a0:87:8d:9c:31:a2:02:e0:49:66:da:
df:88:8a:69:85:ca:ca:d7:c6:f2:d3:5a:9b:21:20:
ef:37:4c:57:dc:60:ec:82:26:ac:bd:aa:54:66:5b:
98:3c:57:34:4f:e2:d5:7e:2b:fd:00:9f:28:93:e9:
f7:9b:dc:ae:9a:07:cb:99:9e:a6:ac:35:45:c1:c6:
99:08:31:2e:68:61:f5:bd:3d:99:ae:a1:70:83:0d:
b2:53:e3:59:fc:43:a1:10:5b:01:78:04:15:ed:fd:
a6:fd:b9:b1:78:5a:e7:7d:2f:e8:28:e6:fa:60:4f:
83:13:4c:19:6c:7e:9d:8b:fa:e7:ca:e0:34:0f:52:
9f:1e:91:92:ed:69:1d:81:fc:3c:f9:ca:30:78:4b:
39:71:3e:82:25:44:d6:63:57:13:b6:c1:d2:eb:9b:
6e:3e:22:7c:26:5d:d4:7e:80:48:aa:27:de:6a:20:
2a:f2:39:58:8a:8c:82:67:20:ad:e9:08:cf:f5:d3:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:5E:52:AA:A2:18:C6:24:E5:71:37:A5:73:7E:3D:C5:52:F5:8B
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:30:eb:a2:f9:12:d4:01:41:8c:da:d2:14:ed:98:6b:bf:
91:3c:87:5b:37:df:c4:0f:8c:fb:ba:de:ab:ee:ce:75:35:b2:
b1:82:4e:ac:e5:43:9b:8d:fc:89:a1:4a:07:85:52:a2:04:59:
21:b2:07:fd:ab:59:05:5d:05:43:ae:b4:bc:20:21:16:69:ae:
b4:9b:fd:3a:51:19:5f:3c:c0:8c:a9:7f:24:06:25:a0:30:e5:
aa:94:6b:9f:f7:d0:03:35:8f:66:e7:4d:7a:b1:55:2c:86:cb:
ee:9d:ba:77:68:22:77:49:6a:52:c3:75:52:8b:eb:14:96:e6:
80:1a:53:6b:86:16:65:b4:96:13:a7:62:c4:af:eb:88:49:9a:
4b:55:28:0d:be:52:e6:5f:47:d2:ab:49:a5:12:8a:90:28:3e:
df:5e:c5:00:ff:b2:68:30:dc:12:5c:0c:bf:0a:99:3e:b7:5b:
98:c3:4c:e0:68:1a:77:41:5a:63:98:df:d0:3e:fc:eb:27:04:
0d:ff:14:a0:e6:73:17:88:2f:11:e9:8b:26:cd:5e:1e:af:0a:
86:e9:8d:85:b1:90:46:df:06:66:79:35:1e:84:94:cb:31:45:
8d:3f:51:cc:4c:54:c1:9c:0c:3c:fa:33:2f:a1:c8:f8:39:dc:
fb:d6:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:54:03 2026 by rpki-client