Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: 3Ur0E3++ioqqr66bchUtiew8zrBTlfNa43tOvQYVeXQ=
Subject key identifier: AE:82:A0:CB:02:E1:66:A1:53:20:26:F0:6D:97:F7:F7:DC:7C:0C:32
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019D2A3C76DD4702FC15D6F73F8CD9B8ABEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 01DE
Signing time: Thu 26 Mar 2026 13:01:38 +0000
Manifest this update: Thu 26 Mar 2026 13:01:38 +0000
Manifest next update: Fri 27 Mar 2026 13:01:38 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: NgRohU+VngcJw+rxtQ6+33leYOR5jFGyDKSNa9D52Pk=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:76:dd:47:02:fc:15:d6:f7:3f:8c:d9:b8:ab:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Mar 26 13:01:38 2026 GMT
Not After : Mar 27 13:01:38 2026 GMT
Subject: CN=ae82a0cb02e166a1532026f06d97f7f7dc7c0c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:43:0b:e4:58:b7:0c:ee:09:ef:7d:18:60:
2d:77:1a:63:c2:87:e8:c8:77:7b:66:5a:28:7c:9c:
8e:26:9c:97:a7:bc:9a:0b:d1:59:81:5b:8b:fa:bc:
65:4d:bd:f9:45:27:7a:88:d6:6d:d7:bb:22:8f:25:
31:86:95:9d:3a:52:e5:bd:f3:78:63:ee:ae:d1:8e:
fc:04:e2:38:02:0c:12:a3:1d:f0:a9:fe:4d:56:46:
10:2c:1b:4d:79:43:62:7a:4a:2b:4e:a0:a8:f8:d8:
95:1b:11:ef:1a:10:e9:27:83:b6:9c:e4:89:d9:c5:
d9:ed:b8:9a:df:d8:c5:30:31:3f:f4:c1:2e:50:1b:
38:69:8e:ac:b4:79:5b:fd:28:a0:d1:bb:02:0b:a7:
a2:54:61:12:26:f5:bd:47:d6:53:be:50:31:3a:69:
42:d2:45:fb:7a:58:4d:f5:d4:13:39:40:d3:a8:c4:
2c:3b:b8:a4:6a:0f:40:af:ff:46:a3:4a:7d:43:80:
2d:a4:c3:60:b6:49:ab:79:80:cd:bc:d9:79:56:30:
f3:1a:82:18:11:f0:42:28:69:22:5c:93:ad:6b:00:
ab:d5:4e:44:63:b9:5f:5b:71:b2:b7:30:e1:57:d9:
e7:2a:e4:8a:70:89:dd:53:3a:ba:b7:23:28:86:72:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:82:A0:CB:02:E1:66:A1:53:20:26:F0:6D:97:F7:F7:DC:7C:0C:32
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d3:bb:87:4c:94:f0:af:be:eb:e6:31:47:01:8d:a4:3b:3e:
5e:18:c9:2c:f2:61:14:2f:b9:72:65:77:ec:2f:ac:a1:f1:cd:
84:17:0e:82:a2:3e:56:2e:fd:89:0d:41:2d:c0:73:37:95:25:
3f:e9:87:63:08:27:6f:9e:c4:96:7f:56:68:92:d1:c5:ac:a6:
48:cb:1e:53:fb:43:90:8b:c0:03:49:ec:09:ef:f5:7b:79:b0:
80:9e:d1:6a:ee:75:ee:b8:75:65:6d:22:88:f6:80:19:bb:e6:
02:f6:7f:7e:4d:58:d1:c0:0f:b2:da:f3:ba:1d:cf:25:50:d4:
a9:9e:c0:07:15:1b:85:b5:71:14:52:38:a4:3a:e9:24:52:1c:
e2:2d:87:14:f1:f5:65:28:2f:b7:f0:84:c3:90:1b:9d:41:a5:
06:56:74:b2:85:8f:b2:08:fe:27:36:a3:a2:89:2b:aa:5a:3d:
84:b1:ad:be:8e:6e:39:28:41:37:ac:88:50:24:bf:f7:6a:65:
b2:3e:d8:de:2c:0a:4d:7d:8a:2f:02:e6:4d:63:bd:79:65:43:
cc:12:40:77:64:a3:78:11:16:b3:ce:56:90:16:cd:0b:8e:d3:
2d:88:ed:38:c6:73:f8:92:60:1c:09:3f:6c:91:a1:f0:54:2a:
c9:62:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:13:11 2026 by rpki-client