Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: X6wnaaOkBb1ijbZFgRcagrpyvOpuTqeQwFguASbhfsg=
Subject key identifier: 86:1E:54:6C:E7:BF:29:9A:A1:80:EC:21:B9:83:A5:E2:11:35:83:81
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019DDC55E8D7681CF76F640CBBAFF9043A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 03A7
Signing time: Thu 30 Apr 2026 03:01:50 +0000
Manifest this update: Thu 30 Apr 2026 03:01:50 +0000
Manifest next update: Fri 01 May 2026 03:01:50 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: vqM/GXS4pCykI8xDjK4KoLVeawIeF04fyZ2x5r6tBS4=)
2: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
3: nj4RvWY6SQhdf9jK78P5VxbpPkM.asa (hash: CRDccxiWmZsXmHnjQCn04XqTSaGDJiN+KxOYKzwFwD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:e8:d7:68:1c:f7:6f:64:0c:bb:af:f9:04:3a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Apr 30 03:01:50 2026 GMT
Not After : May 1 03:01:50 2026 GMT
Subject: CN=861e546ce7bf299aa180ec21b983a5e211358381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:52:00:9e:50:01:30:08:55:85:71:f1:bb:
42:07:be:11:58:23:bb:9b:c7:4d:d4:9f:2f:61:8f:
fd:76:9d:15:34:d2:6c:ef:89:66:39:e9:4e:fd:ec:
7b:42:17:ec:11:0c:8d:5c:df:03:b8:46:9a:05:4e:
65:94:4a:e8:49:95:c6:ab:ae:21:49:c2:e1:c8:74:
18:73:a4:d4:12:4e:8f:c0:0c:af:49:66:c7:be:90:
ef:55:67:6e:a9:62:f0:b0:b5:dd:e2:92:cf:c0:f4:
f0:9f:90:a5:d3:18:d3:42:6e:10:e6:6f:23:2d:3e:
f4:e4:96:a6:47:25:cb:3d:d9:c6:34:3f:f1:2e:1d:
4f:56:16:9d:88:b0:32:56:dd:00:bf:a9:00:6e:a4:
4c:42:8b:ee:13:ba:07:af:2a:c8:4c:07:19:25:29:
c7:33:e7:f0:f7:48:79:11:e2:06:2b:6c:fb:5a:6b:
60:39:91:3a:0c:39:11:3f:20:43:0f:3f:a4:26:67:
96:60:8e:cb:50:83:71:ad:f3:c7:f5:e4:e7:bd:99:
a7:46:d5:03:1f:da:e5:5e:9f:81:3a:d1:51:32:27:
cd:a3:07:f8:e3:10:d6:e9:a1:e0:81:83:5a:49:1e:
dc:6e:a8:d1:61:cc:d1:10:cc:c5:c5:b0:8d:c4:e6:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:54:6C:E7:BF:29:9A:A1:80:EC:21:B9:83:A5:E2:11:35:83:81
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1c:d7:27:91:e5:0e:57:74:89:69:6a:04:1f:29:bd:f2:5a:
2a:2f:4c:b8:40:88:b9:d9:30:d4:58:a2:44:5d:49:bc:2d:4a:
e8:59:06:65:2e:8c:06:56:7e:e0:bd:d3:54:a0:fd:dd:05:cd:
ad:ef:34:70:eb:2e:5b:72:26:b5:3c:6b:a0:7f:1f:f7:4c:a6:
cc:f8:c1:6a:74:22:1a:5d:c3:2f:60:dc:b2:d9:b2:cc:19:d5:
35:06:29:92:25:7f:2b:29:88:39:77:33:29:87:26:eb:7f:8b:
fe:e8:a2:9f:20:7c:a7:e7:22:25:96:83:d2:de:f2:26:f5:92:
10:dc:c2:3f:4f:ab:bd:40:e4:fc:24:bb:82:5f:cc:d2:96:a3:
d7:16:82:04:75:76:e8:0f:92:ca:ba:af:04:89:e3:be:27:89:
a1:b4:06:1a:68:4f:4e:18:d6:4c:20:37:c2:85:43:61:ad:71:
43:c0:1b:fa:77:7a:84:ad:c3:ab:67:f6:a1:14:35:29:e6:a0:
53:a6:a8:25:43:0f:26:17:da:f0:a4:9b:b5:05:36:05:67:9f:
63:1c:98:94:1c:e1:06:fb:aa:eb:b5:c5:c0:75:7c:a0:67:1f:
bf:75:6b:d6:1d:39:d5:09:2a:88:47:88:6c:42:d8:34:bc:9f:
b0:09:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:29 2026 by rpki-client