Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: 9VFjRfMfS3P/VnimbFZyga3eaXgXQoNZPJECvJ5P8dw=
Subject key identifier: 43:C4:0A:4C:8C:E1:18:8C:A5:09:B6:EC:FE:FF:FD:8D:84:B0:9F:AC
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019D37BFECCB628F9DC62BF20DB3FCD893A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:00:17 +0000
Manifest this update: Sun 29 Mar 2026 04:00:17 +0000
Manifest next update: Mon 30 Mar 2026 04:00:17 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: lTsujitKmGgjnzy3bpmyNCyhyFIgrT+V6u08IwOzMzU=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ec:cb:62:8f:9d:c6:2b:f2:0d:b3:fc:d8:93:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Mar 29 04:00:17 2026 GMT
Not After : Mar 30 04:00:17 2026 GMT
Subject: CN=43c40a4c8ce1188ca509b6ecfefffd8d84b09fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:40:90:88:a3:22:c0:90:20:37:e9:32:a0:
1a:f2:94:90:b8:7d:41:75:ec:c9:dc:f6:2d:81:ab:
29:13:ae:a9:10:5e:62:14:99:4a:60:04:55:f5:92:
e6:e1:8c:f7:ed:73:b0:8c:5b:10:04:f0:31:a3:45:
83:26:4b:e2:b2:ba:6a:dd:ea:11:f6:3a:8e:66:10:
86:56:e3:60:be:94:4c:71:f4:24:e3:d7:47:2e:40:
2a:6c:22:92:9a:0d:3a:b6:a3:c6:f0:31:0f:aa:62:
5c:a7:45:0e:70:41:db:1d:fe:46:64:01:78:fb:7f:
36:9e:1e:43:bb:f0:c4:a8:41:c1:4d:fb:9a:b3:f6:
8e:b3:a1:a5:b8:33:00:2f:e2:30:2a:9a:7e:9c:94:
22:b4:5f:22:8e:7c:60:08:00:75:fe:b0:6d:db:8a:
01:a5:be:7f:21:ae:26:ed:08:b3:e3:5a:5f:80:3a:
38:3c:06:b1:4f:d2:a7:d4:96:88:e0:52:08:e8:60:
64:e0:7a:e4:af:cb:a7:6e:24:43:ce:a7:1f:22:ef:
4e:39:51:70:fb:c5:48:66:1c:60:a9:a4:7e:2f:a8:
b1:96:7c:4e:e6:e1:7d:4a:d7:c0:07:15:64:73:0e:
43:33:04:10:8b:7c:9c:3d:e5:8a:63:3b:a8:f0:df:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:0A:4C:8C:E1:18:8C:A5:09:B6:EC:FE:FF:FD:8D:84:B0:9F:AC
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:18:62:7c:57:01:61:d2:5a:df:53:ca:d8:a2:94:a9:70:
14:05:79:eb:17:3a:81:6b:63:57:3e:ee:8b:64:3e:79:36:bc:
e8:cf:1e:af:ec:56:c8:74:81:34:6d:a1:10:1a:71:d1:93:ad:
60:37:e6:cf:ff:a1:cf:20:1c:6f:6b:1e:72:24:ac:ac:b2:f7:
7e:fd:c8:d3:de:d9:a9:25:a3:fe:56:64:b6:fb:a5:bf:2d:4b:
34:21:1c:98:45:88:bb:f9:1d:b5:97:03:28:76:8f:93:5c:dc:
80:07:eb:61:38:87:92:09:e0:88:6d:72:51:7b:e2:06:8b:14:
a2:24:d0:35:10:01:27:a0:20:53:17:4a:4f:8d:4d:55:3a:95:
82:a6:e8:fa:cf:96:ba:1c:b2:3f:e8:d4:6b:20:cf:7d:4d:77:
8e:0d:93:20:b8:02:ee:c9:67:97:c6:b2:85:94:dc:a0:e4:99:
25:87:39:ab:24:48:78:69:a5:2f:28:19:8f:bf:bd:54:62:4a:
23:3e:ea:78:83:31:be:b5:a5:e7:f8:2f:38:4e:d8:55:c8:99:
49:64:37:b7:c3:ce:83:6c:71:24:c4:1b:74:68:13:0f:c7:35:
27:c2:7a:c3:30:73:e7:00:85:9d:99:5b:ec:e0:aa:0a:41:90:
04:94:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:02 2026 by rpki-client