Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: FEAveNVNyaWNtzVphKhx833KWTHRRb+HzWgtEx7vcyI=
Subject key identifier: 95:7E:F2:7B:9C:4C:9B:F4:39:1C:0C:8D:9F:DE:8A:E1:68:CA:C7:14
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 019D3A1CAE73F5F57CDAD649BDC0C3406178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 0C13
Signing time: Sun 29 Mar 2026 15:00:51 +0000
Manifest this update: Sun 29 Mar 2026 15:00:51 +0000
Manifest next update: Mon 30 Mar 2026 15:00:51 +0000
Files and hashes: 1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: PiSxNeuaoHAEBal8b8VeoCjMObMtSh+5is6r3zoCnlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ae:73:f5:f5:7c:da:d6:49:bd:c0:c3:40:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Mar 29 15:00:51 2026 GMT
Not After : Mar 30 15:00:51 2026 GMT
Subject: CN=957ef27b9c4c9bf4391c0c8d9fde8ae168cac714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:c9:3e:c8:87:c8:82:e2:6f:0c:69:51:ec:
9d:46:0f:ba:8a:58:5e:b6:a5:7d:c7:ac:2a:fb:36:
c0:d3:6e:1a:22:33:7b:9d:83:4d:39:87:76:17:bc:
66:f4:63:b2:ef:96:3c:b7:7a:bf:ed:a5:c7:c8:79:
85:47:48:2a:d8:00:6a:97:ec:7f:a0:b9:2e:56:fd:
85:49:c6:64:0f:f0:ea:5f:dc:04:67:c4:d9:0a:70:
70:e5:fe:46:15:8b:c4:ff:ab:e2:61:48:ae:fa:02:
3a:66:45:c2:df:80:c1:4f:1a:a6:09:72:b2:92:ed:
fe:94:83:ae:89:6b:5e:ee:ae:e3:d7:ba:07:15:83:
bf:38:5f:f9:40:f9:6e:f9:6b:3b:65:ea:1a:49:87:
c2:a2:dd:13:86:7c:6e:2b:e8:fb:8c:6b:38:f3:e0:
e9:2d:18:ba:44:f2:b9:0c:7e:97:aa:58:b7:d4:28:
a0:77:d3:35:29:75:7a:5f:82:d6:af:e1:55:ec:81:
67:cf:9c:44:f2:34:9e:87:cd:28:5a:d8:9b:65:97:
7c:e0:08:30:38:82:45:45:a2:e9:0d:82:e7:2a:b1:
5a:cc:05:da:f6:12:ad:35:81:27:01:08:2c:5e:c7:
e3:94:6f:9a:c2:78:60:0c:6f:9b:8d:98:5e:a6:b0:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:F2:7B:9C:4C:9B:F4:39:1C:0C:8D:9F:DE:8A:E1:68:CA:C7:14
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:98:2c:86:e9:0e:b0:d0:f4:2c:aa:96:b8:c2:f6:4d:da:
ac:d4:d6:4d:5c:a0:56:e9:3a:9f:c6:e6:c1:ce:7c:5e:a2:85:
5b:ef:dd:c9:4b:4b:a3:85:3a:4a:85:10:98:4b:1b:c2:2f:ff:
29:d0:ba:23:ec:5a:a9:d1:31:a3:3c:bc:19:65:f5:3e:d2:f3:
9d:18:d6:40:cd:f0:4e:09:de:e8:a1:5b:01:81:36:28:38:08:
d3:21:82:67:03:5c:ba:a9:b8:0e:52:d3:da:20:ac:5f:54:bd:
31:ca:80:dd:0f:de:b5:29:2d:7a:18:fb:de:9f:78:3e:23:e1:
e6:8c:5f:1c:60:34:6d:50:0f:35:6b:3b:90:83:28:13:cb:7b:
37:81:92:09:03:6c:ec:9f:5f:6d:6f:4f:ca:bf:08:84:cb:8e:
c1:08:2e:a1:c3:e7:7f:b8:37:5d:e1:44:b9:3b:7d:e2:5f:6b:
9c:23:8c:fb:ae:27:f5:cd:f3:f2:0f:f1:26:19:bb:39:23:8c:
1e:8f:c1:a3:f2:79:31:be:f8:e1:c4:a1:a7:73:0b:c4:a9:e3:
35:12:ec:01:81:92:b1:9c:d2:3f:8e:81:24:15:47:6f:9b:1f:
87:2f:fe:53:0b:03:01:6c:92:5d:b4:6c:a7:97:8a:61:e4:be:
54:2d:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:21 2026 by rpki-client