Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: I988YSw3KgXisKatwue8FfIEcr9gasN+YPG5xwfCMvk=
Subject key identifier: 55:A0:33:92:71:5B:11:2D:8F:1B:F9:B2:21:C9:84:D3:10:F4:21:31
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019D3909AE0B62B8CFBB45ECBC4B122A3316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1839
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: uklIxeWZQ2s62BTn5L5HruLtIK8yrF6z1zGRxd8094I=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ae:0b:62:b8:cf:bb:45:ec:bc:4b:12:2a:33:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=55a03392715b112d8f1bf9b221c984d310f42131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:04:2f:ab:20:65:7d:0b:d2:4c:8a:82:2e:
9e:69:01:e9:9c:3f:13:db:e3:df:ce:18:67:98:15:
f7:40:6d:8f:13:36:a9:cd:3c:b1:bd:d6:01:3f:9d:
ae:d6:ac:db:48:2d:bd:65:ac:0e:1c:78:c8:5c:e1:
bd:58:52:4d:ab:48:98:72:38:6a:85:c7:dd:c4:01:
f9:e0:a6:54:f8:dc:90:76:48:54:8d:c6:cc:e9:57:
49:6e:bd:40:5a:5d:4a:96:b0:3c:f7:97:71:fb:ef:
79:7f:4d:a6:d7:1a:47:8b:eb:7f:8c:4a:f7:f5:53:
66:a3:8d:22:71:0d:53:22:de:35:47:e9:6c:d5:45:
8e:de:66:7f:55:b5:c2:16:57:45:f5:8b:4f:d2:c1:
b2:50:63:48:87:52:e3:6b:70:15:17:88:74:66:9a:
73:6e:22:42:c1:df:74:ba:46:a2:a5:6f:af:0b:e5:
9b:3a:19:4c:eb:e7:9e:df:51:c1:bc:90:d0:67:d8:
f9:bc:ad:a8:f5:91:e5:20:69:4a:c7:d2:50:bf:e1:
e1:95:d5:01:9b:e6:56:b9:96:38:88:65:41:93:a8:
04:0f:77:fa:35:df:8c:a4:2a:62:23:b4:f9:a3:06:
b6:58:6a:05:f6:9b:20:8d:63:01:e5:3c:b9:dd:25:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:33:92:71:5B:11:2D:8F:1B:F9:B2:21:C9:84:D3:10:F4:21:31
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:02:7f:9b:d6:a8:58:4b:c7:c7:3c:d8:48:54:9e:61:31:cb:
e7:b5:b6:95:8b:c4:c0:fd:1e:58:20:6d:ff:04:e3:7a:51:b5:
51:aa:47:91:1a:ae:74:09:b3:a2:43:38:ec:62:d2:dd:42:e2:
13:c2:36:0c:fd:b4:11:36:7f:b3:73:bb:09:b8:56:0d:09:26:
f1:ea:ad:22:01:27:23:61:cc:97:1c:22:f4:a7:30:1f:25:53:
69:20:54:d1:ab:66:e7:ed:35:a3:2b:cd:5a:4c:2f:38:7e:f8:
55:6a:c7:40:07:ba:52:62:95:de:bb:9c:81:8c:99:3b:db:29:
ae:fb:64:53:7b:aa:87:7a:6c:f1:24:83:97:ab:91:2b:db:b3:
7e:36:4c:4e:b7:d8:fd:46:85:a1:17:94:3f:dd:25:6d:5d:8c:
62:e2:a7:dc:d8:78:e9:6b:e2:50:76:61:78:ed:54:9c:c3:40:
95:2b:f1:7e:4c:93:1c:0b:4f:c6:66:f7:9b:5a:ce:20:f5:9f:
64:1d:f9:f5:76:d1:50:f5:88:19:f3:88:8e:49:e8:22:b2:c0:
57:c2:92:cc:61:92:92:24:aa:09:68:be:3a:48:cf:47:f8:bd:
18:ed:c5:72:23:be:01:09:10:49:e7:6c:3d:0f:de:ac:00:16:
40:bb:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:08 2026 by rpki-client