Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: fFh0vkCPMoACNK4G00WbaF03HltoBgItNX6QP9q7Pmk=
Subject key identifier: 52:CC:83:EB:E7:6E:27:28:05:7D:70:46:0C:0B:D6:14:DD:98:4E:B9
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019D371BBA5000C48B88739681609F84F79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0B5E
Signing time: Sun 29 Mar 2026 01:00:57 +0000
Manifest this update: Sun 29 Mar 2026 01:00:57 +0000
Manifest next update: Mon 30 Mar 2026 01:00:57 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: AmbX5yK65XVgyVQ0Ovn7mOTzC53+b4DqGhhUZ3s4Vus=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ba:50:00:c4:8b:88:73:96:81:60:9f:84:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Mar 29 01:00:57 2026 GMT
Not After : Mar 30 01:00:57 2026 GMT
Subject: CN=52cc83ebe76e2728057d70460c0bd614dd984eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:55:5e:1b:51:d8:88:7a:dc:7f:77:51:6f:
c1:0e:42:96:18:bd:35:f8:f2:60:0a:7b:08:89:9b:
5f:fb:92:60:49:5c:27:d2:ca:7d:ed:d9:02:e8:37:
5d:c6:c4:24:3f:0e:34:14:ba:f4:52:b8:27:c8:f2:
b7:48:57:12:a0:8d:2d:2b:e8:a9:1f:8b:36:95:f6:
c1:03:05:86:64:90:f4:2c:a5:9a:59:cb:5f:b8:97:
7a:d4:a6:fc:98:a5:d6:22:cb:33:e3:33:88:b8:b8:
47:9a:1c:02:eb:e1:aa:cc:cc:4e:01:ec:a9:e6:4e:
82:f5:52:d3:fc:97:0c:36:e5:cd:8b:7a:bd:4a:94:
85:c6:81:34:aa:3b:19:73:e9:c9:01:15:d5:4e:c3:
a1:cd:38:dc:b9:21:d5:0e:57:1b:1b:77:82:ab:35:
2e:34:9e:1c:66:97:d1:fd:03:14:31:a3:4a:b8:e8:
9c:3f:f3:f8:3f:c0:07:1f:71:95:77:42:bf:ff:b6:
b4:08:1e:cc:d8:27:ec:65:47:63:5c:2a:dc:95:40:
a2:76:69:92:a9:e2:24:4c:37:d9:dd:b5:85:f5:92:
77:9c:43:73:6e:8c:f4:a1:73:13:fb:b0:f4:8c:22:
5f:9b:fd:70:91:42:f2:d5:b4:01:93:c4:1c:db:4a:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:83:EB:E7:6E:27:28:05:7D:70:46:0C:0B:D6:14:DD:98:4E:B9
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:87:dd:df:ba:15:e2:2c:3f:c9:39:02:8d:b0:0b:47:c9:
c0:9c:cf:ff:11:78:98:b6:71:37:1e:ab:08:85:54:df:ff:89:
04:93:1e:fd:0c:94:f7:22:04:c5:3f:03:23:e5:a6:f7:93:ea:
7b:87:b2:0b:a3:00:95:c9:eb:6b:fd:4f:dc:4a:78:58:26:e4:
ce:94:55:f3:06:6b:4b:60:31:6d:a9:e7:9c:2f:92:23:17:f9:
0c:57:f7:d9:e8:db:4f:3f:dc:80:97:41:c7:6b:d9:3e:c9:c1:
41:e1:ca:d2:11:d3:10:8d:90:05:4b:35:84:bb:8c:5b:d9:ad:
55:d4:9d:7e:67:e5:0b:d5:85:e6:83:94:66:94:88:e7:b9:53:
d4:a9:19:b1:8d:16:71:bb:f6:55:99:af:56:0f:ba:f9:d6:e9:
35:ec:c8:75:25:52:8d:d6:35:9c:ce:4c:7a:16:db:ba:56:97:
35:9b:ac:01:b2:3a:d1:fd:79:af:6e:a1:09:4a:b2:cb:8e:7f:
6f:ec:14:cb:dd:19:05:47:93:d1:24:30:48:1b:ce:4c:21:6c:
c2:44:67:ac:8f:93:e7:35:66:fd:b9:b2:c2:91:eb:6e:b3:59:
fb:bc:c5:cc:53:00:1a:34:a4:98:c6:70:a0:21:0d:c0:66:e8:
df:05:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client