Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: eF2SQOZYGBetyzMxIygdlpNXHjsUms9sSJB6TfFh4k0=
Subject key identifier: 82:4C:F6:6F:EC:BC:D5:35:9F:1B:87:21:FA:EE:D7:07:B8:9C:02:DD
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019D29CDB45512DD450CF5E7DE31949CB484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0F80
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: CTllairzL4mnkdHPFNt8V+qHy8cv25AQD0vz8O74mEI=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b4:55:12:dd:45:0c:f5:e7:de:31:94:9c:b4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=824cf66fecbcd5359f1b8721faeed707b89c02dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:74:9b:8a:3e:26:e0:7e:59:20:cc:54:a9:
0e:39:0e:a8:0c:a8:31:ed:a4:8c:d6:c3:16:45:1c:
57:3b:a5:09:9f:7e:77:c2:a7:72:9f:14:4a:e9:b6:
5f:00:23:a9:b9:4b:37:82:8a:94:4a:bc:8a:f5:77:
c2:89:96:96:19:c5:d2:91:5b:58:64:20:fc:1c:7a:
20:3e:5f:ba:b4:0f:ea:79:d9:20:73:b0:56:d4:a5:
78:52:51:a9:60:e6:f3:71:70:15:cb:1a:bd:8c:b3:
dd:c5:ba:94:51:55:ab:71:66:c9:4c:b1:32:1b:ee:
23:6d:25:c5:1e:d7:f5:83:ab:68:30:96:55:5a:cd:
cb:76:e5:cb:d7:31:ba:fe:d7:a5:0b:eb:bf:c2:4a:
b0:d6:18:33:c2:58:0e:92:89:ba:6e:17:c7:f7:03:
77:64:7f:83:b0:f3:29:0a:96:02:b7:a8:8e:01:f6:
a5:33:3d:27:9c:5f:e3:2a:a7:b6:68:3b:e0:86:0f:
d6:d8:11:e5:4e:d6:9f:ce:47:fc:55:99:10:1f:68:
a2:4f:33:d1:7c:1a:51:95:bc:9b:7b:de:08:4e:89:
53:69:0c:89:dc:cb:5a:33:4f:0a:61:c3:43:05:73:
5e:a3:12:78:8b:70:39:d2:b9:7f:29:ad:c2:93:c8:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:F6:6F:EC:BC:D5:35:9F:1B:87:21:FA:EE:D7:07:B8:9C:02:DD
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e3:77:63:b7:54:25:20:c1:6f:3b:36:66:bd:e3:51:ab:64:
7c:c1:5d:61:3c:cc:a0:b6:97:76:29:32:b1:ea:f1:85:29:78:
3a:3c:ac:db:d0:6a:04:fc:b8:a8:55:65:a2:ee:c5:73:da:f1:
98:ed:55:9f:af:57:9d:ad:18:4f:8e:ea:0b:e3:82:0f:8a:cd:
0d:fd:e9:b8:1f:9a:c6:f6:a0:a3:e3:eb:8a:7d:15:bb:d2:b0:
15:22:cf:a6:94:cb:be:fc:ad:b6:3f:27:50:35:fc:66:f6:c3:
74:1d:2a:3b:ee:3a:e7:bf:61:d4:46:36:6a:ad:fe:9f:8a:05:
e6:b8:f5:82:16:66:84:81:81:fc:6a:75:e2:12:68:94:61:04:
71:36:97:b7:08:83:0a:c2:ac:65:5d:bf:fa:56:8b:55:6d:9e:
a8:f0:29:9f:c7:24:5c:82:fe:38:e4:66:51:35:d2:32:4b:5e:
5e:df:1f:42:1a:49:de:9e:fc:c6:db:5b:54:84:7a:5a:75:37:
da:5a:90:59:78:8a:a8:a1:7f:f4:b1:4a:d9:93:28:d5:cc:cc:
df:24:b1:2e:c2:45:31:1c:22:57:cc:7f:fd:18:aa:81:5a:7c:
2f:ce:cd:49:d7:69:30:1f:e7:22:2d:82:4b:69:24:ff:1d:d4:
84:ec:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:12 2026 by rpki-client