Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: lyO1YCLxbHUYbDKkjcmFfmXKlDgnjXlTe7zxsvNT2Jw=
Subject key identifier: F1:E2:57:09:6E:84:04:67:F0:AB:34:2B:87:27:0E:9A:51:4E:8C:76
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019D386624A0A7A3560A2E3BEBC263B1C393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0F3F
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: JtUgVq6ISraNnGa9o+EMUUtbyEvaADUa5AK/OFTBNYM=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:24:a0:a7:a3:56:0a:2e:3b:eb:c2:63:b1:c3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=f1e257096e840467f0ab342b87270e9a514e8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:30:8a:98:23:5c:18:81:a9:12:5f:8b:45:
35:7e:6c:08:77:dd:21:7a:0d:de:55:3b:df:e6:1c:
ed:1a:6e:d1:84:76:06:b2:f5:5e:e8:c2:91:87:f7:
21:4c:ea:95:aa:09:be:31:ad:ea:46:30:c5:be:97:
77:4a:4e:66:93:7e:1a:dd:7f:29:5a:d0:dc:7a:8a:
75:df:e8:d3:14:b7:b6:82:17:cd:64:f5:de:af:ca:
39:49:9b:e3:7f:30:46:23:ce:d4:b9:5b:2b:4d:ff:
bb:2f:0e:44:2a:dc:5a:f3:25:5b:aa:79:9a:82:44:
0b:b2:ba:fe:1a:e2:06:94:c7:cb:11:65:2a:5f:75:
28:9d:b9:0f:6a:c1:08:2a:73:54:e8:13:66:8e:44:
dd:70:b6:58:6c:d9:de:67:f5:c8:94:30:f6:5f:f4:
da:0b:de:2c:8b:5c:ca:2f:4c:62:2a:d7:88:08:b6:
a5:fc:69:ca:f1:98:dd:3e:a1:da:43:72:29:98:bd:
67:c9:c1:07:90:9a:ac:4b:65:a0:6a:92:e4:a8:28:
88:ec:25:7d:bd:66:bc:a3:4f:42:73:a4:08:fd:3d:
81:44:7e:6b:41:5e:9a:fb:c4:70:bd:83:fe:c9:1c:
03:63:6e:4d:41:1e:b6:1f:22:b1:54:bc:19:f7:80:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:57:09:6E:84:04:67:F0:AB:34:2B:87:27:0E:9A:51:4E:8C:76
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a1:2a:2e:f0:0a:4b:ad:49:30:21:c0:bb:7d:48:49:69:5f:
2b:ae:90:3a:a5:48:af:dd:e2:13:1d:60:ff:98:93:e6:25:43:
19:98:b8:0b:78:f9:f2:82:4d:a6:c5:35:3f:d5:da:75:4b:00:
91:24:08:ed:de:4f:20:dc:4a:7e:e5:77:8a:fb:dd:13:35:41:
7b:49:6b:d4:d1:99:04:da:22:3b:69:7d:e1:43:f4:8e:d0:47:
23:25:5c:a8:b0:6d:70:fc:f1:b9:c3:30:be:9d:8c:51:22:b8:
2f:6d:37:da:02:db:72:e9:c7:94:9b:d8:4f:c4:25:41:f1:f9:
69:4e:69:73:91:89:6b:44:18:ce:39:4b:ad:09:a4:bb:b0:51:
10:0e:8f:06:3f:af:23:cb:4e:ce:ce:1f:04:64:0e:d7:8d:d3:
63:39:25:f6:89:b3:77:fb:f3:b9:19:a0:87:0b:7c:43:4b:52:
6f:7b:4f:3b:20:32:01:82:0c:41:80:c6:f9:26:dd:ae:e3:50:
d6:53:88:43:5f:fb:00:e1:aa:36:b1:d7:31:3b:50:ff:13:f9:
e1:3e:40:e1:90:60:d0:a9:a6:d9:ba:30:2c:1e:18:3c:4a:5e:
79:26:80:fe:a5:f1:b2:5f:62:29:1e:81:36:34:b7:26:93:a5:
fa:7c:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:58 2026 by rpki-client