Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: NE34TqvlxEMdKVYKZteLRR1+wcJnTtNLlUat3kAGK+k=
Subject key identifier: 34:30:77:01:5E:3B:DA:4E:8F:F8:9D:E2:DB:37:04:5D:94:92:50:23
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019D359B39EC530221A9E4849388DCCB74E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 1793
Signing time: Sat 28 Mar 2026 18:00:58 +0000
Manifest this update: Sat 28 Mar 2026 18:00:58 +0000
Manifest next update: Sun 29 Mar 2026 18:00:58 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: HeuAC3oosFetwDvxJWanXTFGs9qJsX+gLIEZGI/vvNw=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9b:39:ec:53:02:21:a9:e4:84:93:88:dc:cb:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Mar 28 18:00:58 2026 GMT
Not After : Mar 29 18:00:58 2026 GMT
Subject: CN=343077015e3bda4e8ff89de2db37045d94925023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:a7:60:cf:1c:cc:89:fe:a8:db:fc:ed:2c:
08:9e:4e:a9:f9:d1:26:2d:f5:bb:f0:24:c5:5c:05:
24:b4:06:74:b2:40:4e:a1:0e:e1:f0:7a:4e:64:e8:
4f:fc:c4:d6:4a:58:ab:e9:4a:8c:1c:8c:a4:67:09:
5d:b7:ab:f1:2e:7a:47:78:03:f5:59:c7:58:d4:89:
83:81:dd:d3:6f:c9:c5:d3:64:9f:e8:dd:15:7f:58:
ee:f4:86:29:de:7f:ce:d3:d5:88:d0:81:8c:b1:b3:
fa:94:65:75:ba:58:3f:95:58:20:67:b0:e4:3e:98:
46:b1:5e:1d:c4:8a:96:ab:f3:15:9f:9f:57:59:e4:
37:b7:eb:b3:f4:ca:f7:6d:e0:17:6c:11:07:87:51:
bd:cc:2c:86:30:0c:eb:40:50:48:5b:6a:cc:76:ce:
f7:a4:07:95:c9:60:66:1a:00:bd:15:0d:7c:14:df:
ec:a7:d8:83:23:56:ee:36:80:0b:d5:31:c8:f3:8d:
aa:ee:3b:49:71:00:13:b9:38:e3:94:9c:b8:6e:41:
ca:3f:fc:0c:f2:89:8a:3e:f2:8f:cb:4e:07:74:47:
09:94:3d:b5:65:3f:01:a7:93:58:ab:72:8a:16:7f:
6f:eb:92:84:b3:e7:b5:45:3e:9b:e9:25:a3:be:d3:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:77:01:5E:3B:DA:4E:8F:F8:9D:E2:DB:37:04:5D:94:92:50:23
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:12:52:93:6c:d3:8e:da:8e:76:cd:d2:9c:71:fe:8c:7a:
ec:10:39:52:18:66:0c:f7:f0:3a:35:af:7b:22:ce:3d:6b:43:
d2:36:3d:c5:a4:24:3c:18:95:2a:c5:23:8c:19:27:51:51:60:
60:e9:b1:2b:95:ca:44:e0:a3:91:ed:5b:48:c6:20:58:c2:b3:
cb:13:00:c6:b7:09:50:0f:26:2e:a6:ab:04:30:3e:74:95:77:
85:60:cb:96:6f:1f:b8:31:f5:57:9b:26:56:48:60:4f:12:5c:
c5:6e:ba:b6:a9:c4:43:fb:35:81:32:70:19:7c:d8:3a:79:55:
79:9a:8b:18:44:36:79:4c:7c:eb:e0:81:f3:31:6b:da:3a:ee:
2f:e6:67:0a:64:e7:a1:68:c6:6b:a2:12:36:8d:ee:b9:8d:4f:
eb:0c:5e:28:9f:b0:e6:ff:ae:0c:a4:e0:3c:b1:a6:fa:15:fe:
47:27:e0:58:6c:ce:2e:5a:cf:c1:8f:1c:78:0b:23:c9:9f:99:
53:f6:8a:d6:f8:f4:ad:7a:e1:c6:e5:19:78:02:e9:57:b0:f7:
b9:71:5f:3f:3b:c2:b7:21:34:e1:27:ce:c1:87:ca:ea:f2:0c:
c4:d6:04:e7:bf:03:af:dd:00:36:80:ed:b6:b7:39:a5:42:c5:
3d:32:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:09:52 2026 by rpki-client