Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: L4gL7F9bwNJAqHZ9YapnG5QDd2s9Tn9lcQBGFkSfMGI=
Subject key identifier: B5:B1:8D:52:36:B9:CB:AA:66:0F:F5:81:60:C9:AE:A6:69:1E:6A:E3
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019D3977609DC130BF632B89D57D7ADFAB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 1154
Signing time: Sun 29 Mar 2026 12:00:18 +0000
Manifest this update: Sun 29 Mar 2026 12:00:18 +0000
Manifest next update: Mon 30 Mar 2026 12:00:18 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: I+lhAIiLhXZO59L9HMTTyfe5I9F1BuLEwuFxOPKHMts=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:60:9d:c1:30:bf:63:2b:89:d5:7d:7a:df:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Mar 29 12:00:18 2026 GMT
Not After : Mar 30 12:00:18 2026 GMT
Subject: CN=b5b18d5236b9cbaa660ff58160c9aea6691e6ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:1b:f8:28:66:03:2a:9e:47:34:52:be:35:
af:4f:f8:d0:60:13:03:25:1c:5d:bf:a2:70:49:53:
f9:56:34:45:ed:54:c9:63:9e:2d:29:3c:89:24:36:
60:c1:8c:09:9b:26:c4:f5:d2:61:57:c9:a7:61:54:
12:44:93:30:67:d0:5e:00:6d:3c:2b:1f:89:7f:1d:
63:8c:6d:f0:3c:3c:ab:b7:29:c5:f7:bb:cc:ac:ac:
58:62:cc:66:1d:89:8b:39:dc:c4:ad:27:44:ad:a9:
1a:32:43:0c:98:af:33:c0:72:b2:f6:62:51:6a:72:
4f:df:77:75:86:0d:0b:d2:fa:06:9d:72:57:1c:9b:
ef:31:95:02:10:b7:ed:84:d7:a4:db:f2:e0:07:b7:
3e:38:65:c1:c2:d1:9e:5c:de:41:f8:cd:25:01:f8:
e6:49:b5:ff:0f:b6:38:fe:64:5f:c1:bd:bb:79:5a:
17:b6:ba:05:f9:3c:d7:8e:07:95:9b:25:8a:b4:3a:
86:5a:ad:ac:3b:28:b9:b2:18:62:08:22:ca:94:87:
9d:62:29:cd:4a:84:13:c8:15:c7:5d:10:04:ab:76:
94:e3:8b:b7:6f:c5:40:d2:eb:1d:4d:23:cb:b5:b0:
8a:bc:72:11:1c:02:3a:b6:a2:e7:22:1c:76:6f:d9:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:8D:52:36:B9:CB:AA:66:0F:F5:81:60:C9:AE:A6:69:1E:6A:E3
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a1:d6:e8:77:7a:78:70:62:08:7b:20:1c:92:ca:a8:bd:f9:
59:19:c0:dd:83:b9:48:ef:ff:c8:b3:eb:14:18:1d:ff:ac:65:
b1:0e:86:41:5b:d8:3e:75:2f:9e:4d:fe:38:21:e7:d1:9a:5e:
8e:98:7c:7d:c8:b8:d0:4e:ee:11:7f:1f:2e:ea:8b:c7:a9:43:
55:e1:8a:1f:d3:ee:16:0f:63:01:c4:0f:37:c6:da:d1:3f:e0:
f6:3c:76:f2:41:9b:02:9f:79:aa:18:21:17:21:6c:6b:c0:9d:
9d:07:28:d1:d5:72:61:64:cb:62:31:04:79:6c:01:dd:1e:54:
e9:ab:72:e2:f0:9a:05:25:e6:06:9c:ce:f4:e7:14:60:8b:8c:
34:37:af:d8:1c:f2:5b:3a:c3:21:13:25:81:f4:9c:72:de:d5:
55:bd:64:b6:0c:28:2f:38:6a:b0:ac:17:d9:e0:28:f3:be:ed:
c4:d8:f7:2f:c3:9f:c7:09:fa:43:a4:cf:c6:05:45:bc:6d:35:
a5:62:91:a9:0d:35:fc:72:c0:01:01:c3:5c:34:af:36:a1:e8:
c3:b8:9a:01:c5:1e:6d:c9:e4:71:dc:15:5b:2e:de:77:8d:c0:
fb:e8:c5:b7:eb:80:c7:4e:0c:3d:dc:35:51:a8:9b:c3:9e:5c:
8d:d9:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:00 2026 by rpki-client