Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: +wtNzaYRNFy+OxolvJzhPbjxe0ZU/z53WwI7bxIgYtw=
Subject key identifier: DD:7B:A2:D1:92:33:C0:E4:3C:CC:1E:3F:C5:F8:B3:F5:C0:5B:5F:0E
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019C9B1C324D13AF19214E1BCECC47D41AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 183F
Signing time: Thu 26 Feb 2026 18:00:42 +0000
Manifest this update: Thu 26 Feb 2026 18:00:42 +0000
Manifest next update: Fri 27 Feb 2026 18:00:42 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 7sfVEaU8A8ihfr64sAxn8eAGmNo.roa (hash: ACNKKz0yFm+J3hHzQjyY3vUiOtbR7xfJ0cZ7zXLDPak=)
3: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: hKnX8ZQ1/boVXahmPjLWUn49yQlBhqg4Q0wch8s/Qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:1c:32:4d:13:af:19:21:4e:1b:ce:cc:47:d4:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Feb 26 18:00:42 2026 GMT
Not After : Feb 27 18:00:42 2026 GMT
Subject: CN=dd7ba2d19233c0e43ccc1e3fc5f8b3f5c05b5f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:6f:d4:84:a7:ae:57:f7:4d:f0:a2:76:ff:
9b:13:0d:82:a3:58:0f:ba:cb:33:38:1e:4e:c6:cb:
b7:67:c8:94:66:df:cc:16:5f:b6:f5:00:cc:91:eb:
d9:59:97:03:d9:ce:6c:37:ae:4b:2e:18:20:72:93:
77:fd:69:c8:ee:df:9d:80:14:01:9b:64:29:1a:15:
c6:d8:8e:ab:d3:a0:52:87:69:93:c6:eb:f2:00:e4:
9a:1e:5a:41:2e:40:ba:47:1f:3a:b4:e0:bc:02:17:
6a:d7:f2:0d:12:ce:39:94:3a:53:e3:c3:e2:96:c7:
6f:50:97:bd:35:90:dd:07:df:78:24:75:b9:40:8f:
23:01:04:87:dc:f4:08:e2:17:ee:01:3c:f6:32:c4:
71:7e:d5:21:57:d6:68:0b:01:71:bf:c6:dc:11:4a:
e6:f0:03:31:1e:3b:4a:81:95:44:15:a0:6b:f2:2a:
15:45:98:af:0b:73:39:00:b6:78:d5:d7:7b:10:04:
9e:17:fd:b2:96:d6:92:af:f0:46:05:ca:29:10:4e:
83:60:c2:8e:26:3b:08:72:9a:df:0b:21:d1:d7:9f:
70:d2:23:19:20:d2:5e:af:8e:ef:9d:e1:d9:3c:b3:
59:b2:86:7b:51:e0:6a:d7:3f:92:a3:27:d9:f5:76:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:A2:D1:92:33:C0:E4:3C:CC:1E:3F:C5:F8:B3:F5:C0:5B:5F:0E
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:87:fa:f0:31:bb:0b:cc:48:c2:2b:92:2d:1d:fc:a6:f7:f3:
af:ea:1a:a8:6d:8e:1c:7d:c4:e5:2a:4b:26:1b:e8:86:4a:00:
73:23:eb:03:16:d4:23:5a:4f:ba:df:20:a3:d7:de:5a:8a:14:
ba:01:76:82:6c:66:ce:2e:fb:d7:19:28:ad:4c:59:a7:ce:6f:
73:b7:01:55:39:64:b4:57:17:7e:bc:45:32:76:4d:15:19:7c:
5c:a7:e0:f6:46:28:a6:7e:ca:90:68:dc:1c:ba:df:98:ec:a8:
11:0c:87:b5:33:df:c6:b3:d5:19:f4:07:8b:8f:df:c1:1f:89:
72:d3:87:f1:5f:28:5a:50:10:bc:dc:48:37:92:14:cf:7a:0b:
1d:fc:9a:9b:37:5a:46:d1:dd:ce:0a:c7:6d:2f:26:c7:13:bc:
05:02:bb:e2:da:d3:82:03:8e:12:72:c3:7a:d5:43:3a:86:32:
22:86:8b:16:b2:d1:5c:13:fa:3e:c5:c1:3b:70:26:be:c1:90:
26:95:64:bc:10:a9:f7:fe:80:f7:97:fc:47:57:b5:09:56:8b:
f4:92:d1:78:15:92:e7:91:7a:88:53:12:94:8f:18:7f:e7:47:
38:d9:24:85:03:2d:aa:63:9f:43:27:b9:a3:0b:66:cc:f5:08:
91:eb:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:23:54 2026 by rpki-client