Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: xgM54+Mu91YrjgoWuLMiyV67cK0oAsRbdEQGDDJQoJg=
Subject key identifier: 13:5C:FA:B1:AA:55:97:D9:57:6B:B2:3D:AA:77:C1:45:90:35:F2:85
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019CD7D689820ED594AF63C6B6AEF888335E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 0317
Signing time: Tue 10 Mar 2026 13:01:27 +0000
Manifest this update: Tue 10 Mar 2026 13:01:27 +0000
Manifest next update: Wed 11 Mar 2026 13:01:27 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: qzaQR1+v9m+hjvIQJ5sF4TvCpfUgX0pgoj329l7F3qk=)
2: GM03u5yBJkGtFWqPqV1xQd23_ls.asa (hash: P3zGu9AtK2f6I03RZ9PLoqiuMtIuwHpkNeiX6gmRasU=)
3: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:d6:89:82:0e:d5:94:af:63:c6:b6:ae:f8:88:33:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Mar 10 13:01:27 2026 GMT
Not After : Mar 11 13:01:27 2026 GMT
Subject: CN=135cfab1aa5597d9576bb23daa77c1459035f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:2e:10:f9:4b:ef:cc:8f:27:80:d6:e5:39:
0a:fc:69:cf:75:a6:82:4e:f9:4f:f6:07:92:06:ac:
55:75:bd:77:05:38:83:19:f3:43:21:fd:01:90:04:
4f:ba:91:73:68:d6:b2:f8:d2:a7:98:2e:1b:30:f3:
ff:f9:e8:62:84:85:8a:7f:ac:e3:84:ab:ea:2d:41:
3e:0e:04:a9:f6:38:00:e0:39:c7:5a:a6:cc:e2:b6:
55:a9:a6:58:67:e1:49:ff:a7:b4:62:c6:42:14:98:
e9:e8:f3:9b:c7:97:a6:41:c1:03:43:ba:d1:c9:d0:
27:48:79:83:8e:15:7e:04:68:56:4b:07:2c:c3:1e:
5f:f8:dc:bd:4d:35:7a:05:22:88:63:22:27:0f:b6:
97:57:11:5f:ec:e4:41:aa:78:46:31:67:db:4b:9c:
a4:61:64:a0:a1:db:b7:aa:49:f5:22:ce:99:38:e5:
98:6b:91:d3:29:86:b5:8e:19:6d:10:18:b3:c2:d4:
02:eb:80:66:4b:ef:c9:a5:d5:8a:d3:95:10:76:78:
26:d6:c0:32:b8:a0:a2:e5:d5:34:e2:3f:00:00:be:
3f:2e:90:63:53:fb:1c:26:84:ec:dd:6a:ad:fc:13:
80:42:8c:54:14:a3:0b:72:5a:50:af:5a:98:c2:a8:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:FA:B1:AA:55:97:D9:57:6B:B2:3D:AA:77:C1:45:90:35:F2:85
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f2:32:6e:e9:37:10:fb:98:96:a2:ea:7c:2a:3b:21:24:ec:
ee:22:2d:a5:6f:a8:3b:94:53:13:65:20:40:84:a8:30:8a:7e:
70:e8:fc:04:24:85:88:f7:2d:65:ba:0a:01:ba:f7:55:99:ce:
8e:35:b3:2b:a4:3f:5b:1c:95:44:99:8e:c2:b2:7c:d3:96:50:
92:9a:ce:b5:98:94:3b:2e:8a:85:8f:93:a9:d2:12:b0:cb:18:
fe:7b:66:f2:81:c8:f7:84:d3:b4:f9:95:e9:23:c4:39:b3:ae:
cd:ca:ed:12:b4:e4:7e:9e:63:1e:6e:42:a7:e3:b7:47:f2:01:
56:2f:1c:92:81:8c:c4:9d:d0:18:25:bd:9d:11:93:02:c3:6c:
f6:e4:d5:b4:f7:85:06:19:2b:8c:bb:9e:f2:a0:ba:ba:a6:28:
1c:9c:27:09:27:3c:55:06:73:15:6c:9f:90:f9:4d:31:87:49:
f0:a7:d0:59:b1:0d:24:d4:dc:35:cb:54:e3:06:73:81:13:5c:
44:f1:2b:43:43:ae:5a:f3:e5:be:f0:8d:77:77:2d:1b:79:63:
a9:3a:62:d8:21:b3:67:21:78:10:76:36:7d:b0:c0:4b:be:4a:
90:67:c2:21:42:2c:88:00:0e:7b:50:f6:22:8e:b2:18:20:81:
b4:56:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:14:09 2026 by rpki-client