Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: TFxeMp7oKA7TZvQjHnXv8DRLJ0QlALdYFiBqslSwWVg=
Subject key identifier: 72:60:3D:FE:60:E6:F0:13:3C:D7:D5:A9:5D:E6:7B:80:E4:AB:16:1D
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019D2A3BA00EA3DE95C56DE4C0080186DC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0C88
Signing time: Thu 26 Mar 2026 13:00:43 +0000
Manifest this update: Thu 26 Mar 2026 13:00:43 +0000
Manifest next update: Fri 27 Mar 2026 13:00:43 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: sM45nhniFoPf3d01FGDH2YPmTL52nKCFX5m/68v2OPI=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a0:0e:a3:de:95:c5:6d:e4:c0:08:01:86:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Mar 26 13:00:43 2026 GMT
Not After : Mar 27 13:00:43 2026 GMT
Subject: CN=72603dfe60e6f0133cd7d5a95de67b80e4ab161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:15:10:75:79:bd:b4:67:d3:d2:ff:84:98:
2f:57:ed:40:e9:fe:ad:1b:ac:fa:98:79:65:48:4f:
54:85:54:0f:a8:90:5c:f9:81:ae:50:21:98:66:3e:
37:ab:b3:cb:44:ee:24:0e:19:fd:7d:26:94:95:2d:
07:61:ea:59:b3:69:e7:32:3b:c7:1f:c1:15:8b:af:
7e:d8:ac:e8:9e:4a:e5:e6:28:84:cb:44:e3:94:e5:
32:cc:f1:26:88:5e:f0:fb:e4:f0:1c:3d:3e:0c:8d:
8a:b8:a1:6c:f8:e2:25:67:91:95:62:f7:46:4a:a9:
cb:ce:fb:e7:7d:32:6d:4b:1e:ef:de:2e:b0:60:08:
66:8a:57:11:ab:32:d3:85:fe:4c:ff:f8:e8:75:59:
ab:40:3e:48:0b:99:5f:ea:3b:d0:ae:24:d8:c9:fe:
00:bd:c1:e6:4d:34:f4:a8:b3:35:4c:e0:76:4f:e0:
44:e9:ee:b5:84:05:ba:27:d3:3b:13:95:63:2b:9d:
50:6d:96:23:5a:25:e9:53:ac:6d:54:3c:27:b9:9b:
55:ac:37:58:91:0b:95:6b:a1:10:6b:24:d1:9e:45:
06:15:e6:5e:36:4e:44:3e:f9:9d:7f:91:c4:32:d3:
d8:79:69:3b:d5:70:06:bf:9c:b1:0d:23:08:7e:7f:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:3D:FE:60:E6:F0:13:3C:D7:D5:A9:5D:E6:7B:80:E4:AB:16:1D
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0b:74:95:aa:93:36:41:ce:63:0c:2f:20:9c:a0:6c:1b:69:
27:6d:cf:cd:5f:e5:0e:6b:94:ed:b7:2c:1d:79:e5:b0:c8:ef:
a3:ab:0f:76:4e:92:d1:ef:df:a9:6b:c3:b6:83:10:f6:10:33:
44:fe:23:f1:eb:79:98:8f:f3:68:dd:f3:84:82:56:17:3b:a7:
af:1e:16:47:59:81:6e:7f:92:f0:66:f4:0d:56:4d:f4:c9:dc:
d9:66:9a:5c:c3:61:ac:ed:a4:37:01:36:dc:ad:f9:f6:1c:79:
02:22:0d:e0:b5:82:fe:5b:9b:8c:e9:5e:cf:ac:79:4a:8a:73:
ae:8a:0a:64:06:5f:fb:2f:f0:90:fb:c7:af:b8:8c:20:4c:c9:
13:3f:37:4a:31:ab:f2:8a:ea:50:de:a0:f7:b4:76:9a:61:06:
12:1b:a0:c3:53:0d:47:ad:63:86:da:3b:80:78:b8:0a:7f:67:
1b:fc:55:da:5e:3b:35:2b:d1:6c:ec:49:70:d4:fa:f9:6f:21:
f2:ac:05:20:4f:ae:c6:ee:b9:75:6f:79:35:51:b7:62:87:a0:
2d:7c:0f:c7:b1:9a:5f:50:e9:3b:b1:b7:8c:56:a6:07:f6:aa:
99:11:c3:99:08:3b:21:d8:3d:fa:4c:70:46:ef:98:7a:39:71:
a1:5d:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:52 2026 by rpki-client