Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: WhQFgS9s0IlH/SaQwLiGj6s0C8bQysz2G94llkLOGDs=
Subject key identifier: CC:FD:8C:54:68:F9:28:92:E9:3F:35:ED:44:BC:F6:06:54:69:92:BE
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019D39099ED015E1E318E24429E419B9CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 101D
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: ohi6R7iyxDd5M5E9iZVTwfyisyREStQa6lgD+1bcGKU=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9e:d0:15:e1:e3:18:e2:44:29:e4:19:b9:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=ccfd8c5468f92892e93f35ed44bcf606546992be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:df:9b:6a:00:2d:03:fe:35:de:3f:45:99:
ed:a7:fd:93:08:b4:49:e4:f4:bd:2c:35:7e:08:ee:
91:c9:ee:d6:76:f6:31:02:0a:0a:1c:2c:00:d4:00:
2b:f2:35:e6:b0:fd:51:6b:c2:58:1d:8e:02:66:31:
13:58:73:e8:ae:4b:f3:3b:46:82:72:3e:7b:7b:2c:
07:37:28:82:6a:d6:cc:59:1b:87:ee:87:46:c0:7b:
5a:2f:0c:04:97:3a:19:64:e8:06:54:81:5b:1b:39:
99:eb:93:e6:00:a3:c6:e5:b8:91:09:a9:f8:57:ba:
1b:ee:91:6c:01:f6:49:96:ef:d2:17:79:83:d0:46:
13:8c:e8:d6:50:9d:80:19:c4:38:86:16:e6:76:4a:
f7:b3:1b:6d:74:fa:25:54:52:33:0a:a5:67:e5:60:
5d:ca:0c:90:96:e2:40:33:88:f8:0a:c1:72:fb:0c:
9f:52:c2:40:ba:af:a8:27:f0:87:dd:7b:19:17:7e:
c8:5e:e3:d7:12:fa:5a:ca:fe:82:d5:3e:a9:e7:cb:
85:74:03:c0:5d:cc:2a:ed:8a:87:cc:84:b8:38:f2:
50:9a:3d:e4:73:8e:ef:94:47:bc:ef:0f:b7:db:24:
4e:7a:fe:a1:60:f8:9a:88:da:4d:94:40:c4:2f:c8:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:8C:54:68:F9:28:92:E9:3F:35:ED:44:BC:F6:06:54:69:92:BE
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c6:bc:69:47:54:91:03:15:ba:0d:e7:81:0e:00:c7:d4:7b:
ed:36:d1:56:5d:ae:53:ac:f6:36:d5:71:4a:84:ce:1f:96:e7:
89:f3:80:6d:c1:0d:a4:fc:6b:bd:77:e7:3a:93:96:dd:9f:5c:
52:b5:ac:14:81:28:c1:d5:36:08:48:db:59:b4:f7:8e:55:a4:
d6:af:60:f8:92:19:d5:54:4c:49:b5:74:f2:99:4e:91:11:94:
ad:53:77:61:2d:cf:ae:a3:cf:83:35:fc:fb:57:4e:3a:f2:e2:
0c:08:9c:04:28:eb:e1:3a:eb:1c:c5:d0:98:21:8c:16:0e:f6:
ea:ca:3a:0c:b5:d4:2b:d9:9a:97:ea:eb:20:1c:9d:9f:4e:e6:
8f:a7:71:53:71:52:e5:05:d5:3d:96:77:64:77:e6:ef:d2:0b:
44:a5:5f:cc:82:59:23:4d:db:db:99:10:d8:a3:5c:76:3a:75:
26:bf:e2:81:cc:60:2b:e0:12:b6:53:02:c4:df:eb:97:51:ec:
1e:7e:44:f5:00:46:16:88:5e:b4:0a:4b:c6:0f:18:50:0c:4d:
b4:7a:3e:e5:09:f8:3a:c4:8a:df:cb:c2:ed:ab:5c:fb:20:c2:
b2:07:c8:a6:11:f1:1c:b7:d0:58:b6:cd:05:ac:09:5a:d0:e4:
0b:89:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:50 2026 by rpki-client