Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: E6Ai6XtXLLYbkXD/9S4I9/3ShsYJLZ1MDEDFXaWRfjI=
Subject key identifier: 36:CC:9C:BD:11:F0:69:32:76:6B:6C:EA:6F:DD:5E:9B:42:68:39:E2
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019D39409142724EA80D7BC3A1D5282F20DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 1QLQxNSAN62AfdcQq0A9/yxKBexCGauSvj3OkbmManQ=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:91:42:72:4e:a8:0d:7b:c3:a1:d5:28:2f:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=36cc9cbd11f06932766b6cea6fdd5e9b426839e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:3a:cf:f3:21:39:50:c3:80:ea:15:1e:53:
bc:3b:20:80:42:e7:fa:6d:b0:08:f7:7a:da:b9:32:
bc:2b:1d:da:7b:04:d4:db:78:a5:65:27:7e:b9:e2:
18:69:9f:0e:f7:ac:d2:b9:9a:87:28:3a:ff:ff:70:
c1:49:24:26:7c:ce:17:6c:f4:af:b2:dd:87:2b:8f:
5d:53:93:87:aa:e0:97:9d:ef:c5:2a:7f:f2:8a:74:
10:34:78:6f:24:e9:53:1f:db:22:6a:46:6f:0f:31:
c7:6a:72:e7:b8:0b:ad:97:8b:19:cf:eb:05:0f:c7:
ad:86:6f:7e:a0:af:03:e3:26:13:25:c6:54:72:00:
65:f8:55:29:e5:2e:fc:0d:cb:bc:1e:f9:5d:b2:19:
a9:41:65:7e:6a:cf:4c:13:92:db:c8:43:0d:2b:68:
98:28:c2:71:df:58:89:e9:71:f1:2b:f6:d6:7a:06:
90:cb:ee:87:fc:2f:7d:a9:f4:b2:1e:31:4e:a1:8e:
88:ae:d7:dd:2e:54:3a:f1:03:51:c4:c5:75:23:bc:
5a:d0:13:4b:78:0d:8c:3d:49:26:6f:de:5f:90:60:
78:e0:80:4d:cf:0d:90:26:a2:18:37:e2:38:07:28:
27:c0:5d:e8:90:d6:32:4d:44:a0:44:c1:2d:b7:3f:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:9C:BD:11:F0:69:32:76:6B:6C:EA:6F:DD:5E:9B:42:68:39:E2
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:25:eb:d8:dc:97:6d:b1:fc:64:6c:a5:06:bd:56:5b:ce:
3e:5b:e4:4e:67:63:26:5c:ef:76:e1:08:96:fc:34:9a:f7:03:
ce:95:65:0c:71:4e:44:2f:03:af:82:1f:7a:e2:0a:dd:2e:9e:
af:93:98:5d:91:ed:5d:a5:d3:8a:6e:aa:db:9d:99:ef:b6:71:
fd:1c:09:a8:7b:66:c3:c0:7a:bf:36:24:b4:79:e1:bd:30:5a:
0d:0e:d6:30:c5:f3:64:7c:c7:fa:63:aa:6a:86:50:55:7e:43:
dd:07:61:e1:76:c2:2a:11:30:81:6f:78:ad:09:b8:31:1f:c1:
b3:b4:a7:0a:3e:d3:9d:58:8d:70:e6:dc:11:33:28:70:e2:8c:
c8:a3:e4:94:7e:93:9d:13:4b:c8:b5:f6:5b:b5:72:3e:4c:26:
4a:ca:78:43:61:d7:1c:ad:8c:3e:d7:cb:a0:6c:0d:eb:82:8e:
a8:b3:ad:d1:47:b9:5c:1a:32:53:c8:de:a0:2a:13:c0:b5:b9:
21:55:17:47:be:63:88:71:cd:bc:53:83:94:63:53:ca:2f:24:
93:20:53:df:07:1c:90:b9:3e:da:18:8a:70:9f:43:3d:9f:ba:
10:99:f2:00:07:6c:d8:06:3c:a9:0c:1c:56:4a:4c:bb:5d:46:
04:3a:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:55 2026 by rpki-client