Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: Gj0NPRLTiRys87lRrCR4JOg1b0huikdPxlfsyh9R/qM=
Subject key identifier: B6:96:1D:A1:35:41:9A:36:5B:95:60:09:04:9F:AC:2B:75:D8:C3:AF
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 019D26283BA3B7CDF2CB30CF52C9D5F4ED8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 06DD
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: ICpIhbQgmyU+Z3snhowZJtQqVgbK/9KR3a3lVB3Rfq4=)
2: C9oMe1YGJS29C9D0RZNPa4l9ZGs.asa (hash: m/CMHyBpsoSrORDL0dlkFqewhiO241S8p6mdES9DKBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3b:a3:b7:cd:f2:cb:30:cf:52:c9:d5:f4:ed:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=b6961da135419a365b956009049fac2b75d8c3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:6f:ee:ae:10:0b:9d:c9:b7:7b:7d:0f:0b:
ad:50:4f:ad:fe:3e:0d:85:d2:ef:9c:1a:dc:9f:e5:
81:66:38:51:68:c4:29:11:bf:ce:b7:33:a2:f7:d0:
01:28:8d:19:22:5d:b8:5f:b1:46:72:9c:6d:50:f9:
ad:3d:74:66:12:07:6b:61:c8:da:ec:b2:fc:9c:57:
8e:11:eb:c4:67:5c:4f:98:e2:13:85:14:26:0d:c5:
7a:49:77:53:e2:4b:eb:6c:22:f8:17:1d:c0:5d:b8:
7a:0d:8b:dc:4a:8e:42:04:e9:75:a4:c0:1e:57:63:
f6:45:49:45:16:28:a8:14:f7:7a:fa:b5:a6:e3:e6:
79:8f:68:4a:50:42:a9:c2:f4:c2:0f:e3:2d:ff:a6:
67:29:26:4e:7f:0b:28:d0:aa:07:3e:51:54:05:e5:
36:5a:31:83:c4:b7:7b:4e:13:f1:f9:31:38:37:cc:
1f:b0:2c:2f:19:53:a0:87:e9:52:f1:1d:2c:0f:f0:
73:94:0f:5a:5e:7e:cd:60:cd:5a:d4:88:5f:a3:3e:
43:eb:1e:e4:41:9c:20:f8:a7:1b:8f:f5:10:c4:24:
0c:f0:21:40:4a:75:2d:54:73:bc:c5:b9:4c:93:e2:
af:d9:d3:67:14:16:2d:06:6b:a0:22:9d:9e:f8:45:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:96:1D:A1:35:41:9A:36:5B:95:60:09:04:9F:AC:2B:75:D8:C3:AF
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:31:38:dd:4d:fa:97:11:20:76:f4:77:bb:f7:df:6f:cd:
97:76:47:16:22:9d:15:66:d6:0b:40:9b:2f:58:a0:3d:06:a9:
6e:b4:37:ff:90:4c:fd:ef:7c:94:40:f9:4f:da:c8:ff:69:9c:
68:9f:eb:7b:11:af:39:54:22:19:f1:c7:d7:82:3c:74:f8:78:
89:5b:aa:2f:82:67:35:c2:b9:57:6e:b1:60:5d:59:aa:f6:e8:
4e:11:3f:a3:d7:26:9b:b7:9e:31:75:f0:c8:7a:5f:4b:43:9d:
47:fa:8d:4b:bb:12:f1:02:f4:d4:33:f9:25:0e:4f:be:c4:25:
4c:d9:1c:04:b3:15:7a:17:1e:2c:6d:94:13:eb:0e:3e:7e:12:
5c:1d:3f:b7:0b:bc:8f:21:49:d9:51:ba:c8:8f:43:12:96:e9:
ba:85:ed:58:f3:1e:62:05:0e:51:be:19:ea:41:52:38:e5:8b:
85:b0:09:9a:11:b2:aa:d7:09:01:0e:37:8b:8a:5e:9b:4d:af:
b9:00:de:62:08:fc:82:2f:8c:72:a5:2c:24:2b:d8:8e:1f:c6:
4e:b1:f3:e3:3a:87:44:d7:cd:97:3d:d4:e9:7e:ed:ed:80:1e:
f2:d9:6a:69:29:65:a1:67:cf:2f:77:af:54:cb:c3:aa:e0:bc:
7f:f5:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:07 2026 by rpki-client