Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: GH7I9uBrmmJ/6r6KU4eJdTQ0ukS+i/6tD/uz4lDddFk=
Subject key identifier: B5:3D:06:7B:00:7B:35:D0:02:95:40:82:14:32:C0:6E:D5:01:A3:F6
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019D2929091E20AE8A1983C362F69E16FB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 129B
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: gu/UkFsiBmcoFvWJZBjaFaZcABq/dmJYLAVIPVkDIbM=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:09:1e:20:ae:8a:19:83:c3:62:f6:9e:16:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=b53d067b007b35d0029540821432c06ed501a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:26:7b:c1:37:e1:4f:21:87:85:16:0c:c5:
d5:0a:f8:c4:d3:fc:cd:db:c1:2b:5f:52:a9:ec:55:
e0:f7:ee:72:75:6d:f6:f3:dc:72:cc:a9:fa:3d:d9:
10:50:8d:6d:1a:d7:20:68:ba:fb:55:61:cb:9c:8b:
df:2d:86:3c:d4:ea:35:fe:9b:cb:3e:48:3c:0f:f7:
e6:1f:45:be:23:81:b1:22:2a:2c:e8:18:e4:ec:5e:
c0:2b:4c:93:b5:11:5a:19:da:5f:15:86:95:fa:d3:
78:1a:c4:52:75:76:8d:32:11:d4:51:3f:9b:29:9c:
44:05:7c:78:f1:58:e3:4c:c9:96:a2:ed:7b:29:22:
2f:a7:b8:41:d6:3e:c8:9a:8e:e3:2d:e7:a0:89:68:
9f:78:86:b3:02:79:1f:22:e9:b1:56:78:2a:e5:0e:
27:9a:a1:eb:af:08:31:0f:34:5b:f4:a9:b1:68:bd:
bc:6a:36:c9:d9:3f:5a:ee:09:b7:cb:86:ca:9e:02:
3a:05:77:a4:89:7e:77:e7:a8:bb:79:a1:eb:7b:7e:
8a:96:58:d7:43:2e:f5:42:4c:34:e8:af:44:ad:da:
19:83:21:34:5a:a6:4b:90:c0:e8:44:32:21:13:90:
8e:7f:9c:45:cc:80:bc:ef:2a:3f:51:aa:52:59:6e:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:06:7B:00:7B:35:D0:02:95:40:82:14:32:C0:6E:D5:01:A3:F6
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5f:70:19:cd:0d:60:87:68:7b:f6:52:dc:f0:f7:47:a7:4d:
3b:b4:b4:12:d5:f4:54:95:6b:06:93:0e:b8:b1:be:be:54:0b:
8e:97:de:85:cf:3a:76:17:22:b9:4d:b4:76:e5:1f:ef:09:b3:
d7:c8:bc:16:d7:4a:bf:e7:83:da:64:30:60:d0:85:51:8c:20:
96:64:01:d8:90:59:46:6c:e1:68:12:67:e6:94:17:93:08:0b:
de:c2:b7:dd:e9:eb:f4:e4:d2:34:e3:03:d0:d9:86:2f:7c:8d:
5b:3e:80:85:07:64:38:fe:09:5f:cd:38:7c:b5:13:95:bd:75:
4e:d0:22:5e:fd:42:b4:1b:83:65:58:f8:09:36:aa:b6:9f:eb:
a0:8c:62:5a:44:cf:b1:07:82:f0:11:18:d9:9b:fc:0f:de:4f:
cf:f4:d9:73:44:95:91:52:64:a6:44:6e:e2:67:8c:93:0f:2b:
0b:da:63:4e:b8:d2:a4:12:39:51:d8:dc:3e:26:ab:e9:7c:63:
34:d9:fc:6d:6c:d8:5b:0c:13:fc:73:31:d1:4d:f0:d7:4b:9a:
76:bf:4a:25:bb:33:e6:f8:9d:08:42:20:2c:50:34:03:aa:86:
7a:47:35:41:10:d9:be:16:09:23:a8:ca:ad:3c:29:e7:1f:65:
73:30:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:34 2026 by rpki-client