Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: hQoJfz8KA7lWS/5kp5I1OfftvbLG0ybaJld18vmftdg=
Subject key identifier: AB:A9:A5:1D:83:FE:9E:89:0D:20:A3:F1:20:94:13:42:64:1B:6B:F4
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019D270404AC58DA4856FE7678546B8BA9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 16nxBw49Q7N3mzccjM09uiceJBACnzzBQpwfShZLVLQ=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:04:ac:58:da:48:56:fe:76:78:54:6b:8b:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=aba9a51d83fe9e890d20a3f120941342641b6bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:7f:88:81:c3:35:68:6a:8f:48:4e:20:93:
a0:59:c8:7f:fe:31:f9:3f:67:a2:28:b8:33:49:d5:
b6:a9:e9:cd:7a:ef:c4:fb:7e:e3:10:be:15:45:d0:
8e:e2:2c:72:8b:0b:07:28:d1:82:3c:2a:76:3b:ae:
2f:1d:90:4a:17:85:12:2a:7a:ad:d3:2c:4d:f9:bb:
69:a2:27:6d:88:c0:ec:62:0e:4c:5b:76:da:b3:58:
f5:5d:d9:62:04:24:71:97:71:00:b6:da:ed:e6:c2:
21:c9:c8:cf:15:65:d4:0a:25:fb:f3:21:5d:ba:8c:
d0:7a:34:65:7e:d6:54:2a:60:2f:5e:16:76:dd:aa:
52:60:30:71:5d:17:e4:d6:a6:85:21:4f:a6:bc:58:
cd:12:9e:d7:65:73:66:a1:ed:b9:dc:67:be:18:7e:
e3:9a:a2:ab:2e:df:88:94:f9:a4:d6:a3:a6:de:4b:
14:3d:19:36:03:7c:1e:e4:b8:57:85:c3:4f:38:16:
ed:7a:f6:c9:1c:0f:3f:06:29:2c:c0:79:d8:af:c4:
ee:a0:92:5e:46:31:a9:06:04:6c:96:16:fe:d9:88:
3c:b5:fb:60:31:b3:4f:9d:80:da:ba:a2:e5:aa:b3:
03:6f:5f:d5:e6:60:3a:36:f7:eb:6e:95:50:b0:ce:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:A5:1D:83:FE:9E:89:0D:20:A3:F1:20:94:13:42:64:1B:6B:F4
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bd:a5:60:53:4d:a7:d2:2e:72:e4:f8:d4:91:86:cb:bb:78:
99:24:7b:97:92:28:b9:26:8a:81:0f:28:a8:3a:3b:2b:c1:32:
9c:5b:13:4b:11:ec:1d:2b:f2:5f:79:99:0e:64:b0:eb:ac:ae:
de:b8:13:eb:3d:52:c4:09:9e:b2:f5:fa:10:30:1d:20:26:e7:
3a:c2:3f:73:54:4d:e0:b4:4a:94:a6:c1:13:49:d4:d7:c9:94:
19:1f:8b:ba:af:55:e9:86:4c:81:c9:65:56:cb:33:4a:3e:42:
d0:e2:56:54:27:05:35:ef:3b:3a:6d:8a:1c:d6:d8:27:cd:f3:
ff:23:2a:fd:80:2b:41:e3:05:b7:d6:b5:ee:3d:3c:85:a8:c5:
a3:3d:98:27:64:12:20:fb:02:47:df:41:c2:52:1d:f8:80:62:
a7:89:dd:2d:aa:e7:19:9e:05:94:f0:12:95:74:9b:66:d4:9a:
11:c7:2e:80:16:80:43:36:ef:8c:66:ec:d6:d4:0b:48:be:9f:
36:eb:37:3d:89:10:50:4b:b0:6d:a0:d5:f0:4e:50:52:35:a9:
5f:2f:e3:d4:a0:91:aa:91:f0:b4:fb:21:ce:62:49:c9:7e:bf:
86:fd:e5:f5:58:5f:c4:25:06:c6:31:a9:b1:2c:5d:3b:b9:43:
9b:f4:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:32 2026 by rpki-client