Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: aIWFRiGhgUpWVuhlOgJzdnjRocrp8caTbqj1zQLhqsg=
Subject key identifier: 5B:57:F2:86:AD:19:A6:9E:B2:2D:09:AB:4F:5C:2E:D2:94:0B:55:CE
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 019D2A7272DDA053377F8AE4FE06C87010B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 14:00:36 +0000
Manifest this update: Thu 26 Mar 2026 14:00:36 +0000
Manifest next update: Fri 27 Mar 2026 14:00:36 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: lOXn6tYj+RJ0Z9JDYi+MkZe0XLfGIxK2dE6VYyhBC/M=)
2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:72:dd:a0:53:37:7f:8a:e4:fe:06:c8:70:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Mar 26 14:00:36 2026 GMT
Not After : Mar 27 14:00:36 2026 GMT
Subject: CN=5b57f286ad19a69eb22d09ab4f5c2ed2940b55ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:10:8d:ed:b6:53:15:c3:aa:03:57:12:5b:
f3:30:f9:ff:78:c0:15:d5:78:e0:ba:29:6e:04:35:
9b:48:e2:94:d5:45:91:eb:7c:98:ad:67:d8:6d:4d:
3b:e2:f8:99:45:75:9a:b6:cd:84:21:a7:53:8f:1d:
ce:6e:ab:69:08:45:27:f1:8a:a4:82:ac:3d:81:4c:
4a:c7:b3:ec:47:59:af:4d:f3:87:ba:11:32:d5:09:
00:3e:45:44:64:94:7a:95:34:20:16:83:93:d3:b9:
bf:bf:27:f0:04:dd:94:c4:53:0c:55:84:38:bc:d4:
c7:ea:22:e1:01:89:ab:b3:3b:a7:52:42:83:64:5e:
d8:e0:2b:08:85:a0:f0:e5:e6:c2:a7:31:d7:2e:76:
8b:f2:5b:b7:e6:19:ff:75:32:0c:e4:3c:2a:6a:33:
97:19:11:62:17:6b:ef:94:85:3a:ea:41:7d:ba:c6:
61:50:69:6f:c0:a5:4a:30:b1:9d:cd:fc:d4:36:46:
7b:17:8d:79:9a:52:cc:8f:51:d7:88:23:fd:e0:e1:
3d:37:0b:7d:2f:63:e0:d6:25:d8:0d:11:c2:c4:30:
09:36:df:cd:38:59:91:86:80:8f:11:91:11:43:96:
96:9a:b2:a7:e4:b0:56:f7:0a:20:b2:95:d1:31:f7:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:F2:86:AD:19:A6:9E:B2:2D:09:AB:4F:5C:2E:D2:94:0B:55:CE
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:22:4b:0f:43:f7:7f:61:1e:2f:ac:b9:5e:4f:25:fc:1e:
2f:f6:30:ec:56:24:06:3d:d0:83:6f:1b:2a:8b:ce:8d:1b:5c:
7e:8f:16:a1:ca:c5:07:97:a9:09:b9:59:0c:16:3e:c7:49:88:
22:66:cc:b4:8e:b0:0f:8e:0c:05:99:31:37:15:4f:bb:0e:62:
49:8a:98:fb:4d:9f:b5:d8:10:ea:73:da:6a:d0:83:1a:ee:d4:
80:9a:ff:91:1e:f2:e4:12:35:82:82:9f:1d:d7:cf:ec:f8:a5:
fb:77:86:8c:d3:2c:b6:d3:29:27:6b:81:b6:91:5e:01:d0:67:
f2:db:04:02:08:4b:6e:6a:25:61:92:96:4f:22:6a:9d:9d:48:
f6:11:03:d4:a9:36:5d:59:52:7b:df:7e:bf:68:0a:cc:3f:47:
82:e1:81:3e:63:2e:e9:84:85:59:fd:ac:f1:83:30:5e:9f:c7:
0e:8a:e9:e1:e9:ff:0d:54:38:8d:ef:f2:7f:dc:44:92:c1:96:
c5:28:e2:3e:89:70:b6:d6:e9:76:f0:97:59:6d:22:6b:ac:fb:
57:83:5f:8e:ec:27:32:f1:c9:61:fd:c0:ec:cf:57:48:20:ef:
04:56:91:34:91:3a:02:0d:b9:57:8d:ac:6e:ef:17:f1:cd:f3:
6c:f3:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:21 2026 by rpki-client