Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: wwZ+bv/BvjwHpm+MyjRx4tIXTUgpDGYY37sYLBaxScQ=
Subject key identifier: 25:73:A2:EC:64:9C:FE:FF:98:D8:BB:F6:8E:2C:C2:1E:5C:6C:2B:13
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019D273AE17097B6BA1F0C56FE54BF556421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 18B7
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 1-oZ9nA1GvkJpmmO85td9UjPVOL8.roa (hash: WbrVzJ+KKcYmbA1ae+jXGRaz8FSjlb5bMrreVZGWW2A=)
2: 74FH53_qCyxdfdEDKjvoSC_Wclw.roa (hash: AIZwtyfbxw2VOFHLL9K5sj06w7V4DfeUDPOP1/okP6o=)
3: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 4EETat7Ji/2vN/vF2kTR5sr1n5z6xdim3Lli2L5FPzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e1:70:97:b6:ba:1f:0c:56:fe:54:bf:55:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=2573a2ec649cfeff98d8bbf68e2cc21e5c6c2b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:d9:bf:23:04:40:ff:3f:31:b1:31:6a:2a:
8a:d2:4f:d1:cc:7c:42:2b:d5:0a:64:de:6b:4e:49:
99:9b:f2:6e:3d:94:4d:e1:b4:4f:aa:9a:eb:70:0b:
99:5b:fb:0c:02:3f:c0:0e:9a:86:d6:f4:01:4d:a0:
27:4b:4e:44:60:91:1d:33:21:27:7a:83:bc:e7:fd:
24:d4:47:eb:23:93:89:2d:55:63:58:f7:c1:f1:99:
c1:e0:3d:2c:9c:19:8b:a7:4e:77:47:05:6e:56:5d:
42:04:0a:d8:f1:e9:da:8e:b8:78:87:1d:53:fa:93:
52:c7:8a:79:b7:16:32:e7:e9:2d:9d:75:60:40:c6:
46:b2:35:53:06:c3:56:33:64:c8:09:97:8b:16:e1:
a2:b5:39:9a:f9:96:15:9b:2b:8f:9f:66:fe:c8:b3:
dc:97:8e:31:31:f6:3f:52:8f:5d:7c:51:2f:d0:d1:
ff:fe:ef:31:fd:06:5e:23:46:5a:5a:b1:b5:ea:81:
0a:1d:00:8f:cc:a4:54:20:59:25:e8:0b:39:40:e3:
21:41:d5:15:bc:f0:fe:b0:98:a9:d8:2d:cf:9b:bb:
57:95:62:33:0e:db:b4:9e:d8:73:e7:78:e0:8e:45:
12:61:60:0f:bd:6a:9c:1b:26:f9:d5:6c:04:e3:87:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:73:A2:EC:64:9C:FE:FF:98:D8:BB:F6:8E:2C:C2:1E:5C:6C:2B:13
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:1b:4c:a6:d0:8b:af:0a:3c:0a:32:cf:80:37:f3:cc:48:
67:d4:d0:08:04:a8:1c:32:39:9f:18:b1:f5:b7:c2:bf:37:b8:
70:62:7b:a8:96:57:24:37:8c:6e:e6:0b:68:6b:75:f3:41:11:
8e:6a:79:f1:c6:a1:c1:60:0b:65:40:92:f6:22:8b:c1:fa:61:
1b:81:e3:03:66:d4:a8:81:00:09:a8:d6:f0:31:10:7e:84:aa:
89:35:10:61:d2:78:b9:68:5e:40:c0:ad:a9:f2:10:2c:39:be:
fe:1e:85:7f:50:d0:7d:79:a5:87:aa:2b:31:8c:d5:c0:28:3d:
57:26:20:7e:91:02:55:2a:2d:eb:ee:8c:73:2e:1c:36:76:49:
f9:9f:f4:74:19:6b:73:dc:55:ff:28:cc:7c:18:7f:28:22:17:
d6:4f:aa:0c:08:d9:5b:df:bb:21:68:fe:6d:79:8c:6d:4e:a0:
ab:6a:09:bf:4b:9c:d4:af:85:41:36:5c:bb:2f:77:84:ae:70:
fe:01:fc:77:f5:a9:6a:fb:dc:76:a1:49:35:be:1a:a7:3c:55:
08:54:a9:c4:8f:3f:e3:91:04:81:0b:e1:8c:28:d5:b2:84:59:
0c:dd:38:7e:ea:a4:a7:c7:31:54:7b:81:62:fc:9b:82:26:dc:
5c:50:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:25 2026 by rpki-client