Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: TR9VWEAhXjY9hvqQ6P7cKiiMaMovuUscN+kUcwvj1Ec=
Subject key identifier: 2A:B9:3B:89:23:B0:0C:FA:54:7A:47:AA:AD:81:82:2F:A1:0B:76:65
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019D24DEE506E01DC5EF445AF42F1E3BDC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 011E
Signing time: Wed 25 Mar 2026 12:01:20 +0000
Manifest this update: Wed 25 Mar 2026 12:01:20 +0000
Manifest next update: Thu 26 Mar 2026 12:01:20 +0000
Files and hashes: 1: EEdFeU3OD4oK76Yk28EPB4ZyAUo.roa (hash: VPVnKiIWehqGx9/jXmfxd9B/SMafslCiM6Ch4IlHBpY=)
2: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: SqlDtdv5oqgtZfqmCB/lQEWSAONV8zolKnOLxJnAEtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:e5:06:e0:1d:c5:ef:44:5a:f4:2f:1e:3b:dc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Mar 25 12:01:20 2026 GMT
Not After : Mar 26 12:01:20 2026 GMT
Subject: CN=2ab93b8923b00cfa547a47aaad81822fa10b7665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:14:38:7a:65:33:49:e7:df:9f:3f:03:bb:
48:62:d2:20:b8:24:a9:2d:74:68:3b:0d:e0:63:90:
e2:ab:25:6c:d4:c0:03:11:70:a3:26:2b:ac:1d:0c:
a4:db:49:04:f7:2e:3e:f8:c1:1d:f7:14:48:f0:c8:
10:36:5c:64:ba:c7:6b:69:ce:3b:f6:35:48:47:7e:
bf:66:ac:89:f7:d1:3c:22:f6:37:cd:e5:5e:26:09:
13:ac:56:79:41:84:60:d5:48:66:fe:4b:3b:72:4c:
84:c4:8e:10:bd:3d:4b:51:59:fd:8d:7e:b2:97:c7:
7b:58:8e:61:32:e7:0f:07:dd:f5:e2:e2:a3:a7:ce:
fc:67:91:9c:9d:11:6e:8c:70:8e:46:48:42:86:93:
22:37:0b:d0:5d:2d:5a:51:55:5c:f2:f3:8e:d0:ae:
a4:4c:22:66:0a:56:34:71:96:02:eb:0b:72:9f:43:
0e:27:99:de:8d:17:ac:d4:42:b2:8f:2f:fc:be:0f:
53:c6:5d:0a:ab:7a:3f:50:91:3d:ac:60:71:58:5b:
86:84:64:9a:c0:d6:03:15:83:0f:a1:00:06:f7:bd:
01:b2:02:61:ab:5e:06:c2:35:1a:0d:87:47:f6:2b:
dc:5b:26:90:1e:4e:23:9a:cb:f1:a9:87:22:b3:ab:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:3B:89:23:B0:0C:FA:54:7A:47:AA:AD:81:82:2F:A1:0B:76:65
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:94:a2:f0:d9:37:cb:d0:42:5e:ab:6d:f1:9c:b7:3b:f9:a1:
d4:62:16:63:ab:3f:85:f3:d1:94:2e:6b:92:93:50:15:98:05:
f8:d4:6f:87:48:10:4f:72:42:13:67:19:bc:44:c7:31:f1:07:
3a:47:b1:b6:b6:ed:5e:a3:e5:e3:1a:9e:56:01:33:57:a6:c7:
ff:0a:14:99:82:d8:55:4b:eb:8e:b4:05:7d:36:e1:9a:fe:36:
a1:79:2a:25:97:c8:4d:57:25:0f:6a:9f:e2:30:78:16:fc:3f:
50:9d:bc:de:db:70:e2:be:70:e8:41:12:be:59:78:8c:af:08:
b9:ed:28:90:52:51:7b:fb:27:03:40:d6:a3:c3:c3:ed:4e:33:
21:5a:d9:46:35:84:27:88:4b:60:01:31:d2:03:35:38:9b:99:
75:1f:69:4d:9e:a9:70:bb:3a:dc:cc:6b:11:9c:e2:b4:22:6b:
ba:ef:9b:58:00:81:27:c6:66:6f:de:e4:6e:74:05:46:a4:3f:
62:a4:26:c7:7a:54:6b:5b:67:bd:6b:ce:9f:4b:ec:b5:ad:42:
1a:f9:99:59:5b:48:36:f9:37:39:4d:9a:ec:b8:1e:47:c2:9c:
f3:3f:d4:1b:82:86:94:e0:5b:a4:60:9a:26:e3:65:83:84:ae:
77:65:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:25 2026 by rpki-client