Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: n/YhcS7lRTuDKcylEuDnOa0kr847Yovi+R9acU6ZYa4=
Subject key identifier: C6:85:AF:D9:1F:2A:A7:06:B1:F2:F2:5C:DF:1C:72:FC:1E:3A:ED:12
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019D382E415A96408CA84386A17613744332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: Z/gYraXjTdwLtkn60PHcYZXDLdnfUdr/9y3vvj+SybQ=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:41:5a:96:40:8c:a8:43:86:a1:76:13:74:43:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=c685afd91f2aa706b1f2f25cdf1c72fc1e3aed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:15:ba:d7:da:9b:01:3b:6a:6c:ff:85:d8:
06:f4:5d:2d:3d:6d:9b:3e:3f:12:a0:d1:00:aa:41:
b8:4c:a4:c1:fb:de:19:b2:1a:7e:e8:0d:75:6a:da:
fa:88:dd:c9:07:42:48:83:4a:13:0c:47:5b:b1:6f:
78:e6:ef:62:5c:fb:10:51:99:50:93:dc:e7:d7:14:
2c:ba:e2:a7:88:b6:4e:75:3e:d7:7e:b3:7d:43:e0:
df:57:c2:e6:f0:8c:ed:ca:18:55:e0:9d:1f:00:8d:
da:6f:ee:21:09:10:9c:81:00:eb:78:75:f0:d0:ba:
0f:a9:cb:2a:c3:4d:37:8d:00:fc:83:58:f7:52:4c:
fb:6c:41:a9:de:01:73:ef:d9:73:a3:8c:a7:14:7d:
6a:12:5d:98:6a:e3:ed:5e:31:3a:dc:bc:7f:7e:b6:
ac:ba:7d:9e:9a:5d:99:59:02:a7:ac:5e:c6:76:77:
78:8a:85:79:33:07:37:ae:1c:b7:05:71:69:ca:f7:
ce:be:64:9e:74:97:c4:2b:1c:d7:49:f3:71:68:f3:
cf:02:26:1b:b9:b8:6f:92:e5:ec:13:34:82:ea:47:
ef:d7:a4:77:c9:ca:52:e1:3b:bb:11:94:0d:2b:0d:
42:29:a3:b6:98:e1:a9:10:88:5b:d7:89:84:db:a6:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:AF:D9:1F:2A:A7:06:B1:F2:F2:5C:DF:1C:72:FC:1E:3A:ED:12
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3d:25:eb:70:63:97:05:66:e1:8c:40:db:6e:9f:df:da:de:
9e:05:5d:a3:06:d0:af:31:31:67:10:48:f3:b2:45:79:60:b9:
24:97:42:2b:08:96:2c:cf:06:a7:74:e2:8c:78:7c:44:3f:90:
e5:76:56:e6:b1:29:ab:5a:2e:2a:2d:57:91:ff:6b:10:a2:66:
93:c6:60:b5:16:fb:90:65:f9:a5:f0:0c:a9:5e:26:21:6f:81:
a1:bc:ee:8d:4c:8e:b5:af:ac:c6:e6:15:43:6b:b9:72:5d:20:
9f:4c:16:e9:4a:55:db:22:bb:30:9b:67:42:8a:ac:94:00:29:
99:de:7a:2f:33:9f:30:60:23:7b:90:e7:f2:02:78:52:e0:ac:
b3:0a:9f:9a:31:8d:15:70:d2:d9:c5:6a:9e:7f:ae:3e:ce:85:
7f:8d:f9:bd:2b:55:0d:d3:92:c3:41:65:71:51:17:e6:cb:82:
37:5a:1e:37:dd:d0:b6:5e:e5:ad:dd:6e:a0:a2:3f:1e:6e:84:
5b:83:cc:ea:24:52:f3:0a:fe:41:1e:57:53:84:11:2e:8c:bf:
74:d6:79:b5:a9:4c:d6:6f:b3:4c:b7:dc:67:c8:da:48:ea:77:
dd:31:10:6f:80:64:b2:9d:fe:5e:8c:ca:46:fa:58:65:99:ae:
4e:c0:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:57 2026 by rpki-client