Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: wc5S1cS919/MKb9FNDEXlHEFyKK/ZNJp5O65JGSCYOM=
Subject key identifier: A9:0A:87:C3:7B:B5:79:02:F2:55:5C:E9:77:F5:0E:09:D9:81:A7:37
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019D2A04A63E41D8DE7E504F97FFCA2E613B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0CE1
Signing time: Thu 26 Mar 2026 12:00:40 +0000
Manifest this update: Thu 26 Mar 2026 12:00:40 +0000
Manifest next update: Fri 27 Mar 2026 12:00:40 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 1kjMDGil0IfnhcmdNVVRMYCVqLTL7DknmqwabWGk9xE=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a6:3e:41:d8:de:7e:50:4f:97:ff:ca:2e:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Mar 26 12:00:40 2026 GMT
Not After : Mar 27 12:00:40 2026 GMT
Subject: CN=a90a87c37bb57902f2555ce977f50e09d981a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:c3:b5:9a:f3:14:d6:58:65:f5:55:f7:09:
58:62:2a:6d:10:e7:97:e0:3e:f5:77:75:b3:b8:3c:
d3:5f:68:e8:64:78:dd:7c:ac:7d:d4:d3:c6:25:06:
9b:8a:00:0f:f5:7b:4e:c9:9b:30:5d:ce:fe:1c:08:
c2:d6:ef:cc:32:f4:09:3f:a5:26:26:db:cd:49:0c:
e1:df:61:c0:9b:34:82:cb:32:d5:e9:3f:4d:18:c1:
d9:50:fd:91:c1:c8:48:db:ad:30:9b:f3:b8:5f:ed:
1e:fe:c9:5c:df:03:d0:b1:20:07:af:cf:1e:cf:0e:
a5:cb:65:da:c2:93:cf:fa:57:a3:1a:37:1e:61:d3:
7d:64:a7:50:d7:55:36:91:9e:98:0d:95:9b:09:b0:
cb:cb:b9:de:8c:ab:ba:45:ad:cf:e0:63:f0:36:8f:
ca:e8:2c:91:4a:20:43:bf:e7:50:d4:69:0d:f1:c0:
5b:fa:72:ec:d9:26:4b:fd:d9:73:93:de:bd:cd:8a:
12:03:96:2e:39:2a:a2:1d:e4:9d:4b:a8:14:49:2b:
19:ef:91:d5:5c:a6:e1:85:d1:35:cd:76:af:0b:2b:
1b:be:11:ca:53:f1:f7:ab:9e:ed:26:5c:94:b2:9b:
17:85:cb:ef:1a:76:92:28:88:e8:55:90:d2:fb:2d:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:87:C3:7B:B5:79:02:F2:55:5C:E9:77:F5:0E:09:D9:81:A7:37
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:11:52:0b:de:28:bc:dd:93:c3:c0:53:0f:ca:ab:7f:f0:ef:
db:0c:57:bc:d5:3f:40:40:81:29:9a:11:62:31:ca:82:c1:7f:
5a:ee:d7:27:84:df:68:17:45:89:d5:16:95:fe:99:38:3a:9e:
f1:10:5f:6c:90:95:b7:8a:ab:66:7b:c2:63:04:5d:4c:58:9b:
4b:8a:75:a1:27:79:38:22:57:91:85:f6:c7:1f:a7:30:d7:9b:
57:6b:0a:1b:d7:b5:28:6f:58:aa:21:ea:ac:a1:f4:4a:f2:8a:
06:66:8a:f1:b3:59:b1:c6:0d:62:a5:c5:52:80:3f:e0:e4:1a:
0c:86:ae:cf:99:50:a4:93:19:3a:9e:48:91:45:28:48:46:33:
19:3c:7f:3e:3c:06:36:69:de:4b:2f:d0:91:90:53:79:a6:26:
22:a7:b7:c8:eb:87:90:d4:2e:6e:99:4a:a2:85:ee:7b:d4:6c:
7f:b2:c8:e2:4d:3c:e8:a3:0a:8a:fa:3d:6f:e8:e7:af:2a:13:
8a:82:29:05:4b:b1:77:1f:8a:6e:a0:e2:02:4d:f7:4d:ef:01:
11:5e:c3:79:11:65:c0:39:af:cd:8d:8c:bc:13:d6:5a:55:31:
7c:09:97:bc:00:5e:d2:72:a7:6b:07:05:13:a1:09:0b:c8:c5:
20:ca:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:19 2026 by rpki-client