Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: 3bWjVMGb41WkcaM9fPlCSPvaN98txVeq4ouZay1UT8s=
Subject key identifier: C3:58:1D:6A:97:76:07:78:CF:40:01:53:68:9C:2F:1B:7D:8A:9C:81
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019D2996F900E7EBAC8A1EAC0D21A014B85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:53 +0000
Manifest this update: Thu 26 Mar 2026 10:00:53 +0000
Manifest next update: Fri 27 Mar 2026 10:00:53 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: r+GMHEkdKKNc85+lCaPtHqSxa9MW3jEk51jK28wR5RA=)
2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f9:00:e7:eb:ac:8a:1e:ac:0d:21:a0:14:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Mar 26 10:00:53 2026 GMT
Not After : Mar 27 10:00:53 2026 GMT
Subject: CN=c3581d6a97760778cf400153689c2f1b7d8a9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:35:a4:e0:49:30:c6:08:29:bb:71:92:14:
64:6d:03:42:00:72:4a:91:06:b2:df:ee:00:74:da:
f3:f5:58:eb:b0:21:c8:2a:b7:dc:b4:ff:24:7c:03:
cd:c2:35:f2:69:ff:b9:90:20:30:e1:bf:64:a1:c5:
d8:da:b8:82:7d:70:50:19:6b:17:1a:dd:5a:09:58:
14:9b:94:ef:a1:be:5f:ef:5f:10:e0:74:82:9c:f6:
df:48:fd:25:bf:a2:f4:f2:ee:ee:77:87:52:f4:88:
5a:de:84:91:33:fb:0c:4c:ec:ce:a4:9a:8f:a4:72:
c6:25:de:64:f6:ec:eb:f9:24:d2:16:cc:2a:43:76:
ac:74:08:20:59:31:16:1f:79:db:96:10:cd:84:44:
9b:59:44:48:c3:80:ad:f9:68:55:63:9b:83:a0:01:
24:32:fa:cc:24:ba:bf:c4:de:59:a5:6c:29:58:f0:
87:56:ae:00:3b:53:64:5d:ba:6e:db:50:53:c8:0f:
ec:71:89:a1:f4:19:da:86:88:12:b0:74:9b:12:e5:
b0:f3:07:cd:5c:f6:6a:05:b8:fd:37:d5:8a:4c:45:
a0:72:43:9c:12:13:6d:67:5d:f3:fc:23:09:f9:e8:
4d:59:61:4b:f1:7f:1f:24:2d:16:e5:ad:f4:3d:94:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:1D:6A:97:76:07:78:CF:40:01:53:68:9C:2F:1B:7D:8A:9C:81
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:01:67:c4:0a:25:ac:ad:88:a7:23:fa:01:25:c8:8e:41:3b:
6f:1c:2b:de:21:c6:83:31:b2:ad:91:e3:bf:9b:22:ed:31:0d:
ed:55:b7:de:13:39:a2:c1:aa:54:d8:22:08:12:fa:ef:29:50:
b4:0f:18:c8:d9:d6:08:25:ff:c5:b6:e3:86:62:67:22:fb:b7:
83:cc:15:67:ea:3a:4d:44:ce:62:48:00:a2:71:d8:00:e1:e8:
e9:b7:e2:e8:e3:46:3e:45:a7:0a:1e:63:c4:6c:45:34:56:12:
82:33:d0:05:99:ad:d7:76:35:4f:4b:0b:6c:07:ae:04:ed:13:
cb:d0:b8:d8:d5:75:87:84:12:1e:27:d9:90:8b:87:25:61:c9:
10:d9:ad:82:41:32:dc:4b:34:62:92:bb:b6:31:10:ca:41:cc:
2d:20:67:c1:84:ac:ba:7c:34:54:57:c5:2f:96:9d:6e:15:dd:
d4:4d:24:6e:a8:c3:f7:47:0e:80:4c:9f:b9:18:8a:93:0d:21:
49:61:98:b4:dd:59:18:fb:9c:97:3c:30:b5:b8:6d:55:cd:17:
3f:38:f6:91:7b:ce:ed:2e:d7:b2:cd:11:50:9e:91:e4:8e:e5:
8f:f3:03:57:4a:15:91:ca:a6:b1:42:10:c4:a0:fe:1d:9a:41:
0c:f1:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:27 2026 by rpki-client