Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: uE31BEegSsX8m1maoICS91R0JpOXYtSfASCwBHjdwFk=
Subject key identifier: B0:0B:66:AC:EE:F4:DF:A8:93:09:6E:AE:6D:94:09:F4:CE:DF:41:2D
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019D27A87DCEB6EB022DAA18896A8A46A007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: S5mqVC/tt5Xm23jk5h0d4aRd2mJMtPduQ1VPeeK1ySc=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7d:ce:b6:eb:02:2d:aa:18:89:6a:8a:46:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=b00b66aceef4dfa893096eae6d9409f4cedf412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:5d:95:9a:81:ea:15:0a:18:74:12:51:ac:
b1:3d:15:de:4d:b1:5f:73:0a:33:d0:4d:51:40:92:
e9:2a:e9:dc:8a:11:39:c2:80:a7:fd:ae:20:9a:70:
57:73:fd:c4:35:24:a1:d3:4c:ba:b9:0d:db:ff:30:
88:5b:4f:f1:ad:63:19:a4:b1:c8:9e:71:eb:c9:7a:
cc:67:77:81:8c:cf:27:5f:e5:f4:2d:db:e0:0a:23:
90:c8:81:c5:d0:79:a0:7c:36:6f:44:fe:6d:57:e7:
22:ae:1e:fc:d5:7b:1e:a4:53:04:5d:5e:c4:bb:b5:
07:e5:71:1f:65:aa:b7:f2:81:ae:b2:e5:a8:94:5c:
10:08:cb:9b:fd:91:37:9b:be:ec:1d:57:10:a4:29:
c8:1f:c3:3d:1a:0f:1d:4c:cd:52:f6:1c:24:76:e9:
4e:39:01:ca:ab:b1:0b:ba:b9:39:c1:63:fc:a2:b7:
47:98:82:4e:f4:f3:d2:f3:1e:72:cd:ca:2e:f5:e2:
e4:8e:99:20:41:5b:3d:2d:4c:52:1c:07:c6:c1:88:
85:ec:4e:a3:09:5b:8f:c2:f3:4d:fd:17:45:ee:24:
8b:dc:74:3e:2d:af:df:1a:89:51:a2:1f:3e:8e:1f:
71:22:d2:7a:8d:de:37:7f:ec:0b:0d:0b:41:78:ae:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:66:AC:EE:F4:DF:A8:93:09:6E:AE:6D:94:09:F4:CE:DF:41:2D
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:d6:15:9c:04:47:28:91:41:d4:d9:5d:f3:c8:f6:58:24:
f7:ca:70:39:6d:fd:66:2d:b9:3c:12:f7:25:9e:aa:61:67:6c:
59:a1:c7:3f:3e:77:7e:b9:93:98:c3:cf:b8:47:9b:62:63:48:
16:58:6b:ec:12:58:6b:d8:1f:13:a3:aa:83:00:4d:0d:8e:3d:
ac:61:03:ed:35:e3:d2:7b:6d:b9:e9:89:cf:7a:64:28:e7:94:
f8:1e:04:61:1f:c6:6b:f9:1e:30:2e:75:e4:58:7a:48:01:7a:
0e:77:63:14:db:af:75:ce:59:b4:c8:68:77:b0:35:5c:09:7d:
ed:fd:f7:9a:b6:aa:81:6b:f5:12:d0:aa:aa:19:0c:aa:ef:30:
b0:79:cc:4e:03:e3:12:80:5f:9e:b4:90:eb:eb:b9:32:f7:be:
40:07:a6:6d:25:14:58:23:bb:9f:36:dc:2b:16:24:12:bf:bd:
47:8f:22:15:d5:22:40:e4:6f:17:22:8c:1b:de:3a:d9:1a:e9:
1b:d8:95:3a:6d:c5:12:f6:af:0d:69:04:bb:4c:6a:c9:49:f7:
48:c0:8d:2c:4d:74:dd:bf:fc:af:57:7b:13:77:39:c8:50:33:
74:77:c8:0d:cc:cc:80:df:74:52:92:1d:3d:88:df:f0:a5:96:
a9:15:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:03 2026 by rpki-client