Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: G1TGWWisG5lDvcIW1Lz1tvawmMwhZL0G4Ye7h5KbN3I=
Subject key identifier: C9:BE:AD:F4:82:06:79:EC:87:79:A1:40:F7:E6:DD:61:CB:60:FD:00
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019D284E01D78FCBAFA5AE443AD937816583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 1787
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: 9ihk5N4AakRxG/bIyJbtkUs5oWZR0O/CjggEjTDvWhQ=)
2: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (hash: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:01:d7:8f:cb:af:a5:ae:44:3a:d9:37:81:65:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=c9beadf4820679ec8779a140f7e6dd61cb60fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:97:d8:5a:6f:ad:57:a9:e8:20:94:2d:99:
41:62:ae:53:2c:5a:e3:4b:d2:c2:64:b4:36:03:c5:
c8:67:10:25:e7:72:a5:ae:a1:72:16:4d:f7:80:12:
4d:57:4a:3d:50:f2:2c:e5:dd:e1:c1:f3:0f:44:4a:
0a:4c:cb:8d:86:b1:0a:07:57:e8:73:3c:d2:93:62:
08:3f:ac:2e:0e:82:16:e5:f6:c7:7c:03:2d:34:7c:
ac:3d:9e:79:07:7c:b4:bc:27:20:2e:5f:8f:78:cd:
7b:f5:2b:84:15:97:9f:7f:d9:26:f1:bb:1e:06:42:
32:bd:d6:61:ae:73:15:86:8a:ed:00:e6:a0:12:18:
75:b3:cd:c5:5e:9f:3c:2a:8b:82:5d:08:37:3a:27:
59:5c:c3:ce:f7:13:56:1b:58:74:0d:1e:31:85:c4:
0c:a7:d4:71:f8:29:4b:b2:a3:d9:15:3f:b1:64:f9:
d9:28:5e:2c:99:59:1d:6c:96:5e:2c:0e:28:bc:0a:
e4:34:aa:7d:a0:27:62:34:13:23:f5:0e:a7:bd:19:
ce:db:19:d0:e3:9a:d8:a3:0f:24:76:2e:00:b8:eb:
84:be:34:9c:02:4a:63:e0:97:6b:e5:63:bf:0b:13:
45:97:c5:3b:67:11:f1:e3:5b:df:46:2e:cd:d8:8f:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:AD:F4:82:06:79:EC:87:79:A1:40:F7:E6:DD:61:CB:60:FD:00
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:51:28:92:f7:b2:ca:cc:3b:bd:f1:63:29:18:cd:bf:79:
52:4c:a5:36:29:13:07:e0:31:bd:92:f4:01:d9:f5:97:a3:a8:
81:c4:c1:35:e9:0a:f3:c2:bf:4d:95:d0:bb:78:45:0b:a0:3b:
00:eb:31:5f:5f:d1:c7:55:f6:29:e6:40:8e:fa:f3:d1:dc:bb:
36:37:77:36:d2:17:ea:22:f6:31:26:f4:7a:78:1a:64:dc:d0:
81:e2:f2:65:da:d5:09:57:2e:17:c9:21:7a:ad:bd:e2:1a:68:
36:18:04:a2:3e:10:3f:1a:1a:bd:2b:9d:87:8c:e9:24:e7:c9:
f5:9e:ef:14:6b:4d:4e:f4:f4:18:8a:f1:0d:7f:9b:25:e2:bf:
1c:13:8d:83:bb:09:2d:d3:b1:db:26:9c:f7:b3:40:ae:cb:8a:
31:96:cd:65:7a:c1:5e:c9:c4:e6:e3:3e:de:80:0c:ee:d0:5e:
37:36:51:01:71:89:d2:7b:68:0a:f2:46:83:4d:5c:a9:dd:14:
e4:c7:d7:76:ff:8a:ff:f3:a0:e2:5d:aa:35:55:e8:94:d4:ec:
c0:54:f7:8b:bf:e9:30:2b:00:49:18:37:06:35:5e:82:0c:f2:
34:2d:f6:ec:34:fd:ab:28:3a:3c:4f:87:56:d1:eb:9c:6f:6a:
13:01:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:28 2026 by rpki-client