Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: TZfd+AelkX8TXwanO6w28vTBS7WutpDA1VBoNDlrgfg=
Subject key identifier: EA:C7:A4:6F:52:C5:9A:B8:D8:63:57:FF:EA:A7:F1:C2:60:9B:94:44
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019D382E080CBFB72AB67A2DFE5791E26928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1121
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 6taNBjtXu0jaM3Pt7kUxOuL9Uhkq5Lbotf9m1fQZ1Zo=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:08:0c:bf:b7:2a:b6:7a:2d:fe:57:91:e2:69:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=eac7a46f52c59ab8d86357ffeaa7f1c2609b9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:a8:29:34:72:c1:4e:bd:d3:c2:5f:37:1f:
25:29:1b:25:57:fc:07:6b:54:a0:2e:73:82:af:b2:
d2:65:0d:fc:11:4a:66:87:65:d7:7c:29:c9:66:a1:
19:a8:2d:3c:08:55:c3:7a:1d:21:64:ad:7c:af:00:
59:43:49:e4:65:04:c1:1c:4a:27:3f:2f:15:54:d5:
8e:63:96:cf:aa:65:91:29:0e:dc:a4:b1:8f:52:d5:
22:75:f5:b5:08:04:ec:37:e6:7a:e0:47:28:06:2e:
15:f1:be:98:97:83:b4:a1:59:a9:45:90:61:e0:ba:
83:74:55:2e:73:47:e3:55:46:c8:ea:eb:48:b6:2b:
14:50:66:0a:29:64:0f:74:f5:1a:6b:72:9c:84:07:
5a:5e:c8:6f:8c:b3:41:e5:31:3d:de:33:31:69:6c:
7c:ab:0b:ad:f5:bd:5b:ab:5f:e5:00:a1:53:5f:22:
de:da:c4:20:2f:4b:00:ca:fe:32:aa:20:82:9f:8c:
f5:5b:49:2f:26:07:1d:cf:40:63:17:22:0f:8c:e7:
2c:44:88:3a:4a:d4:12:2e:ea:91:c1:64:9f:ac:8f:
33:6c:b4:a4:15:16:0a:ea:a6:e3:bd:36:f7:7a:4d:
17:5f:54:71:66:d0:a8:06:25:bb:61:a8:a1:48:fd:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:A4:6F:52:C5:9A:B8:D8:63:57:FF:EA:A7:F1:C2:60:9B:94:44
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:92:62:43:16:8a:4d:27:97:93:31:45:59:63:c3:97:13:6a:
00:e1:bf:07:06:2d:71:71:33:4f:d8:d5:8b:18:03:86:cd:a4:
8f:b2:43:1f:12:58:62:f0:ff:26:49:ce:cf:a9:a2:6b:6e:78:
f7:59:4b:44:5c:12:9c:24:3e:cb:0a:d3:b5:4d:37:4b:f5:fb:
0e:1f:3f:d9:81:9a:07:0a:f2:59:39:02:bd:94:dd:32:5b:20:
4d:20:aa:5c:74:37:74:8b:18:f5:4c:64:43:46:71:89:f2:b3:
52:ba:41:cf:af:85:77:c9:8b:81:19:f8:27:d2:2f:2c:a7:4a:
72:a4:c3:e9:d2:b2:60:86:84:cf:5c:51:41:4d:d1:b6:01:98:
fa:93:3c:eb:5f:49:e2:22:d5:61:e5:ed:ed:c9:d5:3e:58:a3:
f4:48:ae:27:e2:64:11:47:da:57:e7:d5:d6:a5:0f:e3:45:2b:
72:67:af:53:c4:34:d3:46:50:44:5d:5d:00:6d:7c:48:b1:0b:
17:cd:82:76:33:89:4e:e9:da:58:c7:3f:31:81:5c:ab:8b:e8:
e6:92:41:f9:43:30:ce:18:c5:7d:73:df:67:c5:50:00:f2:51:
f8:ed:48:9a:5f:fa:89:21:1d:87:de:9a:30:9d:42:05:07:9f:
57:e0:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:32 2026 by rpki-client