Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: q5dlFGoZdPsHaN0yBSZrREcyyXSjBALVgDmIktwE23w=
Subject key identifier: BB:D7:A5:B7:A2:A8:22:C0:4F:DE:29:30:4A:05:24:C1:45:92:BD:3C
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019D3789558BE9552BF5A38A9261CC529C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 08B6
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: w29RfhBZjQSKmx+4wWlNjnawDaHkp22qfwvQFjS30rI=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:55:8b:e9:55:2b:f5:a3:8a:92:61:cc:52:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=bbd7a5b7a2a822c04fde29304a0524c14592bd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:aa:68:41:cd:ae:1d:48:79:f7:e9:75:48:
9b:b4:b9:d8:81:c6:47:c8:a5:e7:46:aa:b5:a1:76:
a0:f6:51:2a:a8:cd:61:e4:09:1b:56:b2:e5:19:93:
b5:6d:98:c0:6d:e8:69:24:48:9b:b3:0c:47:c7:7c:
45:04:c9:a2:3f:63:d3:69:2f:72:4a:9c:b7:74:ad:
d0:99:b5:0f:e1:b0:35:a8:07:d5:30:b1:06:2b:d1:
35:9a:96:0b:cb:89:a1:12:df:ee:ee:13:e3:6e:f2:
c6:fa:5d:ad:a9:bc:f2:ac:8b:8b:92:e6:5d:84:26:
8d:e2:a9:af:42:da:06:b6:36:d4:92:04:6f:61:ac:
99:83:56:ce:ec:11:aa:f3:68:aa:be:55:54:a1:73:
1b:01:ff:36:ef:a8:eb:ef:a4:24:06:82:0b:29:a5:
06:93:b3:d4:91:c3:9c:f9:9a:b2:b0:f6:cc:12:0c:
66:1c:cf:04:0d:42:6f:41:dc:58:29:9a:46:33:2e:
25:c0:55:91:14:c7:2f:d3:09:85:c1:f1:df:1b:7d:
29:f0:52:49:e1:c2:ff:51:bf:37:cf:1e:b2:66:a6:
d9:0a:03:1b:b5:cd:17:7f:2c:ef:1b:70:a2:e7:35:
0b:13:c3:b9:b7:f1:e2:0b:63:3a:88:ab:db:d5:1b:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D7:A5:B7:A2:A8:22:C0:4F:DE:29:30:4A:05:24:C1:45:92:BD:3C
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:49:21:d5:d8:96:f9:4d:d9:a1:ec:d2:2f:83:fd:2d:e8:19:
65:d0:65:04:91:e2:66:a4:fd:79:35:73:c2:22:9f:f7:b7:a7:
48:8a:92:4f:72:16:8f:fc:9e:e0:a1:73:26:30:9c:3d:96:c0:
6d:8c:bb:63:27:a4:45:68:b8:55:81:e5:c4:52:cb:8d:29:60:
20:72:f4:a0:52:ff:4f:ca:4a:ef:18:77:bd:a0:59:83:71:5e:
d5:06:92:f9:a6:da:7c:37:89:c5:9a:06:40:e8:e0:bf:f2:e7:
18:4a:ff:53:c0:e4:69:dd:fa:ae:c1:b4:05:a0:8a:38:39:f7:
c1:c4:e9:9f:a0:9e:17:39:e6:59:12:16:1f:72:05:b0:28:f0:
e9:bd:90:89:e0:d2:c9:22:51:50:f3:ca:5f:2f:6a:e3:16:b2:
c7:13:08:47:9d:98:bd:c6:6b:89:46:14:83:d6:fc:11:70:74:
2f:4f:e8:a6:40:7a:44:4b:44:2e:43:a8:98:a6:ca:b0:ef:5a:
d1:89:1e:c1:19:71:2e:66:23:a6:94:88:5f:73:f4:f9:ef:08:
ac:50:2d:bb:1a:11:41:e4:f8:34:95:ca:fe:ff:6d:42:4f:e5:
3f:46:7d:5a:95:ac:68:6d:f5:dc:77:86:3b:a7:62:3b:5e:4a:
18:8a:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:27 2026 by rpki-client