Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: sxMXF2gMvV9f+RSIXTBvZ8nkivCrTAOUqm5CMa8T8T0=
Subject key identifier: DE:49:06:23:81:1D:A3:4C:D6:23:91:19:1E:C6:C7:0D:3A:BF:AE:21
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 019D397825A87292E94554FF081C944C228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 025D
Signing time: Sun 29 Mar 2026 12:01:08 +0000
Manifest this update: Sun 29 Mar 2026 12:01:08 +0000
Manifest next update: Mon 30 Mar 2026 12:01:08 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: slB5hkq/HC4gNPWVSZGvB6j7xr5IL/kiJGrSLQ1YCu8=)
2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:25:a8:72:92:e9:45:54:ff:08:1c:94:4c:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Mar 29 12:01:08 2026 GMT
Not After : Mar 30 12:01:08 2026 GMT
Subject: CN=de490623811da34cd62391191ec6c70d3abfae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:09:8f:17:cd:ad:5b:f3:c9:2e:5a:e0:aa:
0e:c1:a2:fc:b5:94:ba:26:7e:d9:6f:bd:4a:19:5b:
28:d6:20:52:c0:ba:29:14:e8:b4:d6:19:0d:b7:65:
d9:85:6a:8c:b1:1c:77:ac:3b:6d:9d:d8:8f:0a:5a:
4b:ea:61:7c:2e:6e:33:05:eb:17:d5:0c:7d:f7:e9:
08:a3:70:9b:5a:f9:99:65:12:b7:0f:0b:51:02:56:
b3:69:19:60:fc:11:d7:04:4c:cf:91:0c:15:7f:ed:
51:db:e8:46:02:a3:5a:71:d4:8e:ed:99:24:41:1c:
fd:28:4b:c5:37:40:11:43:70:47:10:0c:5f:2c:e8:
c0:9a:5a:61:99:f6:28:36:bb:0f:2c:06:65:8c:90:
49:8c:f1:30:0b:7b:a3:8f:0f:57:7e:4f:70:16:0b:
cd:54:77:72:d8:6b:f2:16:e9:db:49:a3:ed:9f:6b:
8f:86:46:34:e6:09:c7:26:fc:d9:96:00:e1:96:6e:
7f:02:93:9e:a4:d0:c8:ad:aa:7f:cf:cc:58:10:1d:
70:4a:08:bb:2c:55:a8:60:5a:23:90:e4:fe:6e:ab:
b0:02:ac:70:60:78:8f:05:cd:e3:58:12:6a:24:7b:
50:aa:19:e8:a6:a5:e5:5d:1b:f9:5d:38:3a:ae:54:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:06:23:81:1D:A3:4C:D6:23:91:19:1E:C6:C7:0D:3A:BF:AE:21
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:8e:f3:6d:39:7f:02:07:2c:62:46:e2:d1:1f:a5:6e:82:
4e:8b:dc:12:06:a0:6b:50:9c:63:4b:1c:84:e7:63:05:44:be:
28:98:00:87:a2:04:65:1c:0e:0c:b0:b4:bc:f0:0e:d9:7e:a4:
57:ad:6a:93:50:4d:88:5f:85:58:89:0e:26:74:af:0e:98:d5:
ad:1c:81:9e:35:de:5a:af:e8:20:05:48:4f:51:77:2b:81:98:
4b:6b:b8:50:9d:5e:c6:47:41:f8:3d:b2:8d:62:41:af:9b:82:
33:35:c3:85:d6:f0:8e:8b:9b:a0:75:0d:5b:8b:4e:33:7b:fa:
c9:37:f3:3f:a9:00:7d:de:38:d8:0a:a5:e5:18:a9:23:9b:c4:
c9:d6:b8:88:59:70:f9:4f:84:a4:8b:f6:75:09:1a:29:e2:16:
41:b1:85:88:18:31:21:3c:96:fd:8c:a3:77:21:eb:51:5d:61:
39:f7:c1:c7:a2:7a:a9:cd:7f:39:89:b5:3b:8a:f5:ab:60:e8:
40:b3:2e:17:ff:47:ff:a5:38:98:73:48:ac:6e:2e:e5:14:f8:
69:0c:26:ec:31:cb:a1:e7:e6:8b:0c:c8:b5:94:5b:a9:75:21:
9c:d1:42:00:08:9e:64:6a:e8:67:07:cb:f9:56:61:d1:85:42:
3e:8c:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:43 2026 by rpki-client