Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: PGq4iJcnoCrbysFJkt3uYOziIjHKNsObeHFXxUsMbw8=
Subject key identifier: 20:2A:01:9D:AD:60:E6:47:22:56:B1:43:84:12:21:CC:8D:5A:E0:74
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019CE5236D993E5800EFD2BF711BEC4C305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0FD2
Signing time: Fri 13 Mar 2026 03:00:30 +0000
Manifest this update: Fri 13 Mar 2026 03:00:30 +0000
Manifest next update: Sat 14 Mar 2026 03:00:30 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: PY9Mi3gNSWojjePo+NVOmmtNla9fwZBCWiSffK2hP94=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:6d:99:3e:58:00:ef:d2:bf:71:1b:ec:4c:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Mar 13 03:00:30 2026 GMT
Not After : Mar 14 03:00:30 2026 GMT
Subject: CN=202a019dad60e6472256b143841221cc8d5ae074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:27:af:db:ac:5e:80:de:4c:17:e1:d3:c3:
d0:a8:e3:dc:57:bb:47:55:8e:d2:2a:a6:2d:cb:0f:
93:e8:dd:9e:70:d1:76:f2:c4:ce:21:6b:98:32:b2:
1a:72:25:4b:3c:06:79:a5:b8:db:30:59:ae:ee:38:
46:06:e8:97:3e:d2:fe:fd:ca:74:77:67:e5:60:59:
a2:be:a2:49:ad:26:3a:82:63:27:08:95:bb:78:cd:
4e:5f:2f:67:d1:fe:c8:6f:44:e6:3a:f3:32:05:8f:
c6:46:11:32:f6:2e:c5:9e:70:43:63:af:29:79:f4:
d3:e9:34:59:a7:b2:ff:d3:68:48:67:80:3e:24:4e:
6a:bc:4f:91:81:a3:08:7d:10:b2:1f:a7:1a:f3:ab:
7b:6c:6a:a1:58:ea:04:cc:c1:53:66:88:ff:85:07:
3e:e4:3e:3d:d3:33:6f:e5:65:64:63:8b:d0:1f:02:
68:de:34:c2:d2:79:49:86:d8:0d:63:86:51:6d:a4:
b8:70:6f:d9:50:66:1b:14:f5:3d:80:cd:37:ab:2b:
16:c1:60:af:26:38:8e:e9:28:29:f1:ec:cd:b8:5c:
f3:78:92:4e:d5:12:f8:bb:56:28:b7:f1:8d:11:fc:
f6:1b:4d:36:08:f6:57:92:48:e8:56:be:63:2b:7d:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:01:9D:AD:60:E6:47:22:56:B1:43:84:12:21:CC:8D:5A:E0:74
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:82:1b:9b:5d:c6:02:36:c8:5b:9c:e1:b5:9a:4a:42:27:
03:f0:92:d2:fd:fc:39:80:e8:e7:2c:b6:7f:48:9c:37:f0:61:
9c:61:2b:95:e4:62:d5:6c:ff:4c:79:58:25:94:de:2c:25:f6:
8d:69:da:dc:89:42:67:aa:a2:23:e8:e1:a7:ab:11:60:22:19:
2f:4c:23:8c:5a:37:8b:8a:35:d6:7b:6d:b0:c1:9e:1a:dd:b7:
64:32:4b:d4:38:f1:47:69:e7:57:f7:91:ae:42:1c:1d:ab:c3:
01:79:85:1c:1d:af:d4:4f:5a:da:a0:5f:8a:8f:44:6c:45:fb:
13:4a:c8:3b:02:1b:95:68:76:a0:b1:95:e1:5e:a9:b6:70:a2:
9f:5b:2c:df:d6:4f:fd:f7:6f:a1:82:84:7f:8f:1e:ac:ce:34:
a0:d8:d7:b0:0a:3a:dc:b9:ad:a8:c0:c0:6e:93:39:54:48:7e:
c8:23:15:88:a5:e0:ca:98:cc:03:6c:56:bf:a1:17:10:98:88:
ee:ed:6f:ec:f6:17:d8:71:3d:b1:09:c5:fb:21:58:62:2e:2f:
cf:44:49:c0:f5:3d:25:e1:10:e9:75:0f:3d:49:86:b3:b1:21:
29:79:52:e8:b9:b4:33:9c:6f:08:0c:82:f2:74:5e:b9:58:9c:
be:d1:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:50 2026 by rpki-client