Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: lKZQMFUh9PiK6XKMlICuDZQidQebhMkRu/PwH1BW3qc=
Subject key identifier: F1:CE:7C:58:28:16:F6:B4:FA:53:59:9D:94:63:98:DC:60:17:A9:96
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019D28F322D3CD0AB742BC345959113C08C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 047D
Signing time: Thu 26 Mar 2026 07:01:55 +0000
Manifest this update: Thu 26 Mar 2026 07:01:55 +0000
Manifest next update: Fri 27 Mar 2026 07:01:55 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: 2DDxAYGOmT/LjXJnlF4C8SEmHbPH/LqD38nk5mkmgZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:22:d3:cd:0a:b7:42:bc:34:59:59:11:3c:08:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Mar 26 07:01:55 2026 GMT
Not After : Mar 27 07:01:55 2026 GMT
Subject: CN=f1ce7c582816f6b4fa53599d946398dc6017a996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:e7:e9:50:7e:3b:ba:03:08:1d:5e:b4:27:
29:82:f9:b5:29:ed:40:9c:3b:eb:ee:4b:e8:a0:9e:
e7:0c:d8:84:80:b8:5b:fd:54:cf:d4:d4:8d:18:8b:
de:17:6f:9d:4b:d9:8b:8c:b7:43:a7:54:35:2b:2d:
0b:d9:d2:2e:c9:29:1b:da:52:ac:44:a0:86:90:2d:
a4:67:f2:21:15:61:c3:ab:95:e0:77:49:8c:7d:3b:
ff:39:ed:13:40:cd:6b:fa:63:4e:92:1b:a0:2d:b9:
7a:53:9f:50:2e:d4:ab:50:f5:93:2b:61:3f:c0:05:
eb:be:a1:13:53:6a:9e:83:6d:f6:50:50:b3:11:f8:
e4:09:d4:62:a4:1e:5e:20:5c:c1:32:61:08:e4:fc:
9f:57:c4:46:e2:97:f0:33:04:cc:9e:5c:58:9b:3a:
d7:ff:f1:2c:d4:81:e9:c1:57:3f:2e:af:2e:dd:38:
c1:5c:86:8a:74:85:8c:62:62:24:bd:09:a6:f4:f8:
bd:a8:fe:c2:05:2d:56:ad:5b:21:b0:b7:4d:d9:59:
fe:42:55:ca:5a:5a:ed:97:bf:65:4c:53:b0:97:fd:
b2:79:72:e2:c3:0e:3d:f8:7c:52:db:23:d8:bd:6c:
4c:a7:0c:dc:57:81:8f:5a:fa:65:77:cf:35:aa:f2:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:7C:58:28:16:F6:B4:FA:53:59:9D:94:63:98:DC:60:17:A9:96
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c4:77:46:e5:01:18:52:a2:c5:8b:08:59:e3:a1:f6:c6:14:
e0:c4:53:0b:6d:fd:85:e2:cc:67:0e:a3:00:d7:62:e4:f2:7f:
8d:eb:5e:4d:2d:a4:8a:47:d8:28:7f:9b:d1:26:c9:d4:23:82:
ac:22:da:ca:b4:c7:4d:56:b7:28:5d:f3:43:4b:1b:54:2d:b2:
7e:06:5d:00:0c:8b:63:eb:d4:f9:9f:3b:a6:3b:ca:17:ea:24:
75:e4:e7:dc:58:ed:ad:9a:d9:ee:a2:03:99:b3:ea:11:bb:bb:
c1:c0:b8:e4:ab:f2:a2:2d:aa:a8:97:05:ec:b4:58:03:f7:6a:
2d:0c:63:c7:d4:4c:e5:5c:9f:74:21:75:ee:9f:12:24:bc:3c:
5e:2b:7a:9a:a0:c4:6f:29:f1:65:32:ad:9a:ea:f3:c6:04:13:
44:6f:40:e4:2c:8b:93:50:87:14:4d:6b:84:cd:17:2f:b7:8d:
19:20:30:8b:e4:1a:c4:ca:a7:d9:15:cc:3a:19:b0:9f:b9:3b:
23:77:78:d0:aa:55:3e:f7:c5:c1:68:07:35:fc:84:04:92:dc:
49:79:c8:bd:8a:9b:63:41:0c:79:4c:ab:eb:47:b1:2a:bc:80:
1b:60:b1:ce:08:6d:e2:13:81:c2:51:ed:14:de:09:f7:46:61:
2e:87:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:55 2026 by rpki-client