Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: 0aOCZUljuLHq2aX53Gm9+bM4Q3JQV+K0MS9qcJH5t20=
Subject key identifier: EE:53:46:22:BC:C6:9E:16:7B:02:D9:BA:C6:1C:F6:42:FF:D1:AD:64
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019D39E5E365048EE00817E5F25951D552FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0F3D
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: /mDtcHDWx17GZiBJcFvCJw57VWyzaGGYbuKgO7dt3s8=)
2: zrD7NApr-CKiSl_IAZoSygFQjv4.roa (hash: sXutfsW657aDzmpSR3D6+VEVCtONP341YHRcNDoHTYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e3:65:04:8e:e0:08:17:e5:f2:59:51:d5:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=ee534622bcc69e167b02d9bac61cf642ffd1ad64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:64:9f:73:f6:c5:6b:55:b3:cf:3f:7d:7b:
aa:34:58:eb:7c:7d:74:b2:99:7c:88:aa:ae:dd:e9:
85:45:2f:3d:41:c5:ae:0f:5c:29:fd:f2:84:1c:a2:
7d:3f:49:20:65:47:6b:0c:4f:c9:5e:79:f3:66:05:
ac:b3:f4:90:5e:e1:a1:a1:b4:24:8a:dd:48:3b:d3:
d0:ac:da:5c:e1:cb:38:ff:f7:d5:13:ac:99:f9:05:
c5:29:ff:e8:12:fd:eb:b6:09:78:62:97:c6:04:97:
f5:0b:ce:0b:49:d6:40:f9:b9:37:92:88:62:ba:2e:
02:28:d0:c8:0f:45:21:b1:44:d7:49:9d:1b:bd:d5:
3f:e6:7b:29:3d:30:db:49:f6:86:5d:ee:7c:4b:26:
b7:00:b3:24:c4:05:dd:f7:c4:0c:9c:b5:6f:17:6a:
fc:46:50:d1:73:eb:56:2a:a2:57:8c:ce:9b:84:c7:
dc:06:87:40:4c:d4:92:ea:94:3f:c3:af:aa:ed:d9:
17:7e:41:e6:6c:fd:35:92:91:b2:d0:5b:c3:07:a0:
63:a1:3c:a5:02:60:2c:49:82:9f:04:ff:f5:47:cb:
7a:e1:3c:ec:e4:71:04:a4:d9:20:47:1f:37:c8:fc:
27:38:2b:2d:6b:81:d1:89:41:5f:45:3c:7e:59:f1:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:46:22:BC:C6:9E:16:7B:02:D9:BA:C6:1C:F6:42:FF:D1:AD:64
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:4f:25:9e:fc:ae:13:24:5b:f5:f5:37:ec:ac:0f:29:fd:
43:86:42:69:b8:47:00:4b:71:9f:dd:75:56:b7:81:24:89:eb:
61:88:27:12:c8:41:17:bd:33:88:34:c0:9e:54:37:90:d1:50:
04:89:bb:4d:3c:66:7f:72:67:30:70:42:98:94:a6:c6:ff:49:
37:58:ed:e4:2d:84:22:11:cb:1d:a0:bf:e6:4a:fd:df:bd:86:
32:9b:d8:6e:bb:cd:98:c0:56:87:f9:10:3e:df:81:34:52:7e:
99:ec:9b:8d:0c:4d:52:0d:6a:6a:4b:e9:74:93:65:6b:d5:42:
27:18:63:8e:cb:2a:81:ce:42:f5:46:2d:49:ad:d2:f0:90:1f:
8e:c1:4c:78:84:3a:f7:0c:2f:f3:30:0c:d1:5b:5b:40:9e:c8:
5f:38:43:47:1e:44:9b:cf:79:a1:4a:ed:6e:96:8b:37:8c:35:
e0:27:b4:a8:9b:bb:c7:d4:af:91:4b:19:1f:67:88:3b:c5:ec:
8b:83:9b:08:10:de:45:da:65:14:34:b5:9c:19:f5:d9:7b:40:
8a:f6:43:6f:a9:99:43:b7:0f:de:68:36:85:67:1f:32:e0:f6:
85:62:26:26:92:0f:97:1d:be:3c:72:fa:2f:ae:4e:a5:13:2f:
65:0a:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:45 2026 by rpki-client