Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: AYJpsJFmp+Zg2BEy4S0uN0mKwHlXZUGuLN8xaTr4DME=
Subject key identifier: 92:8C:27:26:02:D1:1B:AC:D1:27:DC:B2:FF:8C:88:BC:14:7A:14:42
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019D3A8A99A4B9AEA16618CFDBD4B43ACF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0C5D
Signing time: Sun 29 Mar 2026 17:00:54 +0000
Manifest this update: Sun 29 Mar 2026 17:00:54 +0000
Manifest next update: Mon 30 Mar 2026 17:00:54 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: thyCCFYRyAKpqrayTpWoqu4mUTmJkRFe3erRS5d05hc=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:99:a4:b9:ae:a1:66:18:cf:db:d4:b4:3a:cf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Mar 29 17:00:54 2026 GMT
Not After : Mar 30 17:00:54 2026 GMT
Subject: CN=928c272602d11bacd127dcb2ff8c88bc147a1442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:91:a1:7e:57:74:d8:a0:f4:3b:5d:c4:44:
00:e3:51:57:9c:ae:ba:e7:6a:56:64:a1:6f:f3:92:
9b:2f:c5:41:ed:84:5f:72:e9:24:54:66:6f:be:fe:
5d:57:52:c1:ae:02:ce:d6:37:d5:16:8a:cd:52:74:
a1:a0:4e:39:74:fd:d7:e3:8d:97:07:52:06:b9:0d:
e0:73:43:2b:cc:3c:58:01:c6:74:8c:6c:04:20:fd:
b9:7d:90:1b:d1:c8:0a:0c:d5:0b:5c:17:20:f7:3a:
65:86:dd:f6:45:ff:69:a1:6a:f4:40:b0:05:f9:88:
dc:17:03:b0:de:ef:00:27:47:e2:8c:6d:d9:dc:d8:
84:81:7c:7f:f7:2b:70:32:83:f4:2e:5a:92:1a:52:
49:11:4a:5d:37:a6:a2:cd:ef:5c:06:d6:77:95:a0:
c2:a7:dd:8d:0c:df:27:bf:ad:06:23:6b:8e:d9:f2:
cf:13:9d:f9:39:f2:72:70:a6:a7:78:0d:8b:6a:47:
22:6a:f5:8e:0c:a6:50:2a:b7:03:7f:cf:a2:19:ff:
6f:19:28:88:ca:16:28:b9:c4:82:bd:e6:91:ae:f6:
88:95:97:a3:6a:ed:20:de:55:3a:c7:ce:ea:99:15:
13:13:96:6d:52:f2:13:0e:c1:45:12:7c:68:0f:c5:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8C:27:26:02:D1:1B:AC:D1:27:DC:B2:FF:8C:88:BC:14:7A:14:42
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:c9:30:2c:15:1f:f2:75:60:43:ed:e5:01:d5:39:d4:8e:
9d:38:25:a3:b2:80:82:00:4f:74:f9:4c:fb:e2:c7:4a:a4:ff:
4e:dc:23:8c:a1:e3:76:3b:2b:6e:df:a5:4e:46:4d:22:49:09:
8e:06:23:50:38:7a:94:83:32:59:19:9f:38:bc:04:73:ce:36:
80:40:e7:16:4a:c6:d9:2c:c1:3b:94:2f:1f:32:b8:86:45:a9:
33:e3:1c:64:bb:1b:cd:12:a6:e4:6e:c9:3a:74:b6:84:f7:ed:
3a:73:e8:d0:d2:ce:8a:dc:3f:a9:9a:b3:ef:b8:21:f4:46:de:
08:e6:eb:2d:7e:1b:06:87:3f:06:dc:22:71:fb:19:8c:f6:1d:
49:0e:59:99:5f:33:7b:b5:3a:72:97:e0:ac:b0:e5:25:16:a6:
f0:f6:6f:5f:e7:c1:c6:b9:dd:71:e2:c5:4a:e4:2b:e7:b6:d5:
32:48:d8:e7:84:6b:ab:b0:15:a4:e1:bf:f6:b8:43:57:e6:58:
74:ac:fe:41:77:72:c5:db:eb:00:2f:9e:2d:be:bd:bb:04:fc:
a4:7b:3a:69:0a:2a:48:9c:0f:c3:23:61:c2:2d:81:cc:09:9e:
10:37:ae:50:fe:1c:3c:69:d8:42:5a:65:65:52:a4:34:dc:82:
5a:99:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:55 2026 by rpki-client