Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: +FpvO9ZcAf0xRRN/0vNeQ7OOZyy0x17biVVUkcC5+7Q=
Subject key identifier: C6:30:50:7B:F1:41:DC:F3:23:0C:24:71:7D:DE:4F:75:27:E6:23:6A
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019D2A3C4210CA750BF861C4512419C580D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 089D
Signing time: Thu 26 Mar 2026 13:01:25 +0000
Manifest this update: Thu 26 Mar 2026 13:01:25 +0000
Manifest next update: Fri 27 Mar 2026 13:01:25 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: 74Olscx0oG6Sysfoi5JaY/bHM4Knz/9BEmnkZQgJvO8=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:42:10:ca:75:0b:f8:61:c4:51:24:19:c5:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Mar 26 13:01:25 2026 GMT
Not After : Mar 27 13:01:25 2026 GMT
Subject: CN=c630507bf141dcf3230c24717dde4f7527e6236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:b0:da:af:54:fa:59:3a:33:81:c5:6f:b6:
85:5b:b1:77:47:93:29:08:f6:c1:f6:6b:18:b3:e0:
82:b0:24:10:01:4d:de:33:33:1a:47:c4:f6:b7:b9:
33:e1:d3:9d:00:67:be:1d:d9:64:39:8e:31:77:f1:
3f:75:cf:7e:26:be:72:42:ce:78:c4:b2:61:b7:84:
af:b0:45:ef:d7:84:0c:0d:30:40:22:8a:b4:8e:b5:
8c:06:d1:2d:2a:91:8a:2e:8b:72:33:64:5c:0a:30:
75:18:f7:0a:1c:13:39:ec:af:51:46:76:20:a7:f4:
a4:d9:84:9c:9a:52:54:ca:7c:2c:cb:06:0b:26:78:
44:0d:a2:ae:cc:1e:29:73:09:45:68:92:95:ed:0b:
6f:1f:b9:f0:78:70:0c:a5:cb:ef:f2:80:cd:49:32:
a4:24:49:21:9a:79:0a:13:f5:62:ca:cd:14:34:70:
94:35:c0:cb:a0:3d:48:fe:81:6c:9f:14:ed:5c:b9:
15:5f:8a:71:4b:2e:ce:8f:ab:54:4f:e7:fe:1c:b4:
ec:73:cb:ff:d9:8a:41:e4:8d:f7:a6:2b:cb:1b:ef:
50:09:19:67:78:e2:a5:3b:5f:7c:25:c7:f9:a7:c7:
d2:9d:a2:91:f8:a0:71:c0:e1:db:14:23:bc:1b:88:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:50:7B:F1:41:DC:F3:23:0C:24:71:7D:DE:4F:75:27:E6:23:6A
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:54:b2:85:24:3d:a9:87:ce:12:94:01:29:4e:b2:0d:4f:6d:
d1:55:ad:68:f2:26:61:88:87:27:8b:78:52:aa:2e:4e:a1:5b:
cd:65:3f:10:54:55:4d:6e:e0:27:23:30:f4:1d:04:73:f0:ba:
0b:0c:4b:86:24:b1:ec:ee:8d:d0:87:eb:00:99:87:4e:2d:cf:
85:23:fc:74:58:23:d9:09:2b:dd:64:ba:f1:f0:c3:26:b0:75:
a3:ba:12:fa:ac:03:f8:94:b8:a9:25:be:67:54:df:61:1a:d2:
27:e2:68:b3:3f:72:2a:8f:24:bd:80:6a:31:60:a2:cb:5e:72:
4f:28:7d:dc:63:43:03:04:0c:2c:ef:ed:c5:fc:a6:cb:af:4e:
88:7d:e5:95:5b:a2:94:2a:05:dc:8d:47:ef:1d:8b:49:2d:86:
13:c6:5f:17:28:65:aa:d5:62:92:d8:67:02:a5:5f:ab:32:fe:
80:01:53:f3:c2:ba:12:3c:ed:0a:2d:95:9d:2e:c9:9d:f1:36:
93:df:73:84:2d:31:e8:fe:ba:c8:ea:1d:1a:51:e1:4c:b8:63:
71:56:25:c2:7f:cf:42:32:0d:dd:32:c5:45:26:09:2a:b2:d7:
c4:e6:3c:09:f6:ed:ea:df:fc:88:a0:1b:00:ee:d8:18:03:ba:
f7:83:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:54 2026 by rpki-client