Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: ElysfVKVk9Nn0w0WMe9AiD6/O4jmmqO5V76ZO2UQOtM=
Subject key identifier: 36:D8:8B:E8:A8:C5:3B:F4:FF:29:E3:E7:35:67:CE:68:19:6A:BD:2D
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019D26CCF6FA7A36288C1E5A992F140FE443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 03E9
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: Ztb0GlhG1nd3rhQH2LdnobllQauq/pGH08FCjpnmYX4=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f6:fa:7a:36:28:8c:1e:5a:99:2f:14:0f:e4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=36d88be8a8c53bf4ff29e3e73567ce68196abd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:23:e1:44:7a:15:2c:50:da:de:15:c9:92:
2f:94:80:89:7e:29:6f:1f:86:6e:07:6e:5a:c6:cd:
b4:f2:61:ef:26:94:26:8b:07:1f:49:b8:97:13:74:
5d:5e:cc:6e:28:bf:48:d8:e4:be:0b:f4:a2:04:0d:
86:ef:e3:42:b8:bb:c9:8b:84:0f:e9:49:6a:86:90:
9f:94:9e:0d:db:74:85:ad:b5:51:c8:0e:ce:9c:90:
af:fb:20:ff:98:ea:65:f8:ab:93:64:c0:6b:d4:4e:
93:4a:97:86:4e:07:39:20:3b:ee:4b:e7:d0:e7:4d:
43:65:de:8b:96:63:87:d7:14:3a:f4:8a:e1:c1:5a:
6f:13:39:d5:39:a7:ef:af:69:96:71:b3:fc:71:93:
5c:97:b9:9f:29:02:d8:97:d9:cc:68:f4:7f:18:bc:
7f:1d:c7:6e:51:6f:5d:31:c4:af:3b:93:22:c3:a6:
bb:f4:c6:8d:73:85:e7:3f:f2:1b:a9:00:a7:a8:9a:
e7:1e:04:56:71:c5:b8:9e:b0:56:ac:c1:86:b8:2d:
46:c6:72:db:94:24:ec:1b:9b:f9:64:3d:4c:b4:d6:
5b:dd:47:53:f2:50:01:02:5e:44:ef:ac:f7:e8:32:
05:12:65:3d:34:f9:a9:66:52:55:b0:fa:6f:7b:df:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D8:8B:E8:A8:C5:3B:F4:FF:29:E3:E7:35:67:CE:68:19:6A:BD:2D
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:b7:41:c0:8a:eb:96:42:f9:b1:e4:18:3c:68:cb:cf:00:
0d:87:b9:96:29:e9:b9:26:bd:5c:01:cf:47:cf:96:1d:26:4a:
fb:89:a1:8e:43:7d:b8:a4:68:07:9d:ba:cc:92:cd:85:ff:dd:
cb:f1:f8:a6:35:2c:9b:44:0c:eb:52:6d:62:ef:96:3c:f7:ec:
e4:fb:25:1c:b9:c7:9e:62:68:44:2f:df:58:0a:79:af:63:7a:
18:40:48:43:17:56:e1:5e:d0:57:7f:d9:ab:c4:0f:3b:80:5f:
08:9f:9a:79:bb:5f:1c:c4:09:8b:12:4e:17:11:b2:dd:c5:e2:
6c:67:d1:93:8c:5f:a9:48:75:77:f9:33:2a:bb:8c:16:c8:30:
e5:ce:79:03:01:bd:e1:5f:23:48:4d:e6:7a:b3:e3:67:e8:ba:
ca:0a:95:cd:6f:de:40:4b:e8:16:36:af:55:77:c2:2f:a8:7b:
89:8e:6d:f7:da:f0:6f:d7:9a:a7:5b:2a:a4:23:1d:16:ad:f5:
bb:6b:c0:ab:26:e0:5e:b6:20:c2:e3:e7:e2:ff:4d:c0:a2:c0:
1a:fe:81:bd:31:92:ff:13:2b:14:f5:c2:1e:83:85:a0:50:0b:
9d:56:96:8d:c2:da:ee:21:ba:40:fa:81:68:29:4d:57:96:c2:
c2:45:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:39 2026 by rpki-client