Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: UXG5GARtxcvW0Q6m+17tADiAKzLc4KFspek58pr1UvI=
Subject key identifier: 7B:5B:F7:4D:ED:F0:F6:C8:0E:38:9A:DA:24:C9:3E:EA:0B:82:25:06
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019D3977A526F4103E7AD55534E89050B94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 1185
Signing time: Sun 29 Mar 2026 12:00:35 +0000
Manifest this update: Sun 29 Mar 2026 12:00:35 +0000
Manifest next update: Mon 30 Mar 2026 12:00:35 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: uzvd0Jldy73Y3+9I5IdW0k29o4CYghOoUX6G/Vg8EMw=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a5:26:f4:10:3e:7a:d5:55:34:e8:90:50:b9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Mar 29 12:00:35 2026 GMT
Not After : Mar 30 12:00:35 2026 GMT
Subject: CN=7b5bf74dedf0f6c80e389ada24c93eea0b822506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:91:36:8d:15:a3:2a:3b:67:bc:63:19:57:
15:f9:f7:c5:0c:82:8b:02:80:8c:b2:21:6b:41:fd:
ca:bd:7c:67:b1:83:81:07:2e:67:fe:e6:89:85:10:
e9:dc:1c:ca:e6:ed:fc:7f:b0:07:27:60:c8:11:b0:
58:53:fa:84:3e:37:3c:39:07:06:cf:eb:3a:76:76:
7f:1a:6b:5f:a8:03:0e:dc:70:b8:18:5e:06:13:0b:
08:72:f3:a4:b5:eb:4e:b0:d5:81:52:96:a1:12:48:
ce:6e:34:5d:1f:6d:40:6d:be:c1:0d:23:6a:63:d3:
b7:f0:3d:70:cf:55:e7:d7:d4:f8:cb:af:e8:36:f4:
0a:9f:7d:d7:79:5b:68:15:1b:bc:bc:02:bf:d1:07:
21:15:8b:d7:9c:57:ff:6b:d9:3b:1b:f0:fa:59:24:
57:71:7a:a5:bd:5b:42:9f:b7:f9:0a:44:50:6a:1b:
1d:73:f2:b0:fb:ac:10:59:b6:52:84:9d:f9:97:95:
ef:f3:7d:21:00:6e:28:d4:94:88:fb:cb:98:d3:cb:
d8:5e:18:55:da:cd:ee:61:d3:7a:c2:b5:ff:00:0a:
5f:86:cf:a0:64:5d:7d:cd:1b:66:d5:09:8f:61:5f:
1a:91:e9:2f:e3:5b:0d:95:a7:58:1f:4d:d7:10:31:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:F7:4D:ED:F0:F6:C8:0E:38:9A:DA:24:C9:3E:EA:0B:82:25:06
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:87:00:82:71:ad:70:28:af:4c:5c:8b:0f:65:21:23:59:e9:
04:f5:81:d0:df:2c:8c:5f:5d:a1:87:c7:13:28:c3:f4:3f:e2:
59:f9:07:6f:71:bc:04:11:37:18:70:74:74:38:27:4f:be:af:
08:2b:dc:63:0d:9f:6d:70:a5:84:7a:02:cf:5e:d8:89:ef:25:
98:3f:c6:1f:ae:22:b2:4f:ff:57:18:cb:d8:3c:bc:19:59:09:
90:dd:b9:b5:fa:b5:67:db:0d:5e:db:63:ce:48:8e:09:07:37:
4b:fe:39:9e:88:ea:a8:dd:ad:4d:49:88:b1:96:b2:fc:91:04:
31:58:ce:20:31:d3:c9:85:7b:77:b5:47:8f:22:1e:9c:02:d9:
01:23:fa:5f:8f:2c:97:8b:6e:1a:a9:6d:0f:93:b4:5a:93:56:
95:a2:5f:30:8f:01:29:1c:b6:bb:90:44:ba:21:eb:9f:ad:7c:
01:20:3f:44:28:3f:95:fe:92:ad:b1:42:cd:1f:9f:58:9d:ba:
dd:88:8a:68:62:85:87:78:69:e8:74:d5:3a:28:38:3b:f7:4a:
d3:d6:b1:64:73:12:87:9c:fe:0c:44:58:86:6e:40:ce:b9:f8:
01:30:fd:4a:0a:ac:b9:de:02:a7:9f:10:cb:43:33:75:f0:1e:
90:f4:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:24 2026 by rpki-client