Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: Q0mjS1DZzmfJr+TvARKWuDQ8wCSLAteVEQ2OZnRZNko=
Subject key identifier: 34:EB:26:7C:58:83:19:C1:DD:BE:E1:50:FA:88:37:40:BA:9F:4E:48
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 019D2884C14C09B9DCB1AB2F13132F572311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 08E7
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: AwJsumYQP+PL1JzsGoVTu8g/FvijvPz+G1JMyqg4mCA=)
2: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (hash: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c1:4c:09:b9:dc:b1:ab:2f:13:13:2f:57:23:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=34eb267c588319c1ddbee150fa883740ba9f4e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:44:bc:5d:30:be:c2:c5:4a:d8:4e:a1:ba:
d5:89:76:b6:c6:ef:00:0e:ec:5d:66:5b:a1:2a:43:
4e:68:4a:7e:34:63:f3:d2:e5:21:74:e1:ae:d8:52:
0b:66:e4:f9:b0:15:25:1e:17:bc:f8:eb:33:07:0d:
2e:0c:13:45:43:2f:49:1f:02:db:c0:eb:1b:61:92:
b9:fe:74:01:6d:5e:6f:57:42:a7:6f:eb:6c:9e:5f:
e8:86:79:91:ba:de:ae:5e:3c:d7:c7:bc:fd:b3:4c:
ce:48:d7:62:61:e0:6b:d1:e4:ce:c7:b2:02:2f:ce:
f1:71:60:b6:1e:2f:17:58:f0:91:89:e4:ab:b7:3b:
93:4b:4c:84:44:f8:39:3d:b5:51:97:7b:1e:d6:ae:
54:fe:b2:93:2d:5d:27:cb:19:a1:6b:2c:b7:f8:24:
53:28:64:8e:6d:07:b4:db:f5:2e:11:c9:fe:30:08:
c2:cf:55:54:61:3a:58:be:50:d8:bd:32:15:57:f3:
ee:36:0c:6e:aa:a0:af:a9:73:1b:9a:53:c7:85:c2:
0b:75:cd:b2:50:82:89:00:16:a4:9b:a3:67:ca:9b:
88:e2:d4:6a:f4:91:01:ee:3a:7b:0d:ef:a6:49:f4:
3f:dd:b5:ef:a8:c9:18:bc:f3:b8:5d:f8:3e:4b:9e:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EB:26:7C:58:83:19:C1:DD:BE:E1:50:FA:88:37:40:BA:9F:4E:48
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cc:9e:5b:57:f4:65:c6:a7:f6:77:7d:fc:2e:de:7d:5d:96:
86:98:ff:2d:f7:dd:30:a8:a2:b5:fc:a0:12:9d:9e:86:eb:1f:
bd:c8:8a:b5:cc:cb:a0:61:03:f4:43:09:5f:59:30:ca:20:d9:
f5:4d:d6:78:e1:a8:99:d7:47:76:98:1c:c1:95:50:ec:38:ba:
c6:99:31:42:c5:27:f5:75:84:cd:ed:54:48:48:f3:ae:57:36:
c4:96:8a:2b:11:d6:37:af:73:54:38:3d:39:cd:cb:78:05:b0:
39:de:24:b8:d3:a3:9a:44:7e:bc:74:80:b1:6e:c8:81:d1:c8:
eb:59:73:12:33:2d:4c:a9:72:cc:80:b9:0a:c7:64:c7:5d:9b:
58:a8:60:d9:81:e5:d4:81:bb:dd:bb:68:92:4f:03:9d:81:87:
97:96:3d:b3:67:63:ef:e7:58:a7:ef:89:13:e8:60:43:6d:c4:
f8:92:7b:1d:53:aa:55:cd:27:70:07:5a:18:9b:94:e2:67:3a:
ee:9a:4d:bd:db:c2:60:fe:a4:d5:8b:57:33:d6:0a:51:7c:4d:
d0:cc:93:20:16:0e:c8:57:33:44:8a:91:3b:cd:8e:72:30:3b:
c7:60:69:fc:87:12:4c:58:03:d4:7f:ca:72:cd:aa:b8:f0:58:
21:6a:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:42 2026 by rpki-client