Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: YdTa/R88mLKQXqM4ie6X52p1QG67rHfUN4rv8QLB/cQ=
Subject key identifier: 5F:DB:5F:AC:1C:4B:69:06:DC:86:A1:33:22:73:E8:51:77:1E:A6:BE
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 019D284E4DD82EF4CF4D0A897A78FF172A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0EA4
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: p8Q1T6owao0UtFaI0uzL9fVOIDk.roa (hash: ETVPkMleWg5Tmk9ZZqBQNGmyAM72infgVzIH2DgSiBI=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: GTJDywnG1y/6uZLlgSseLC0cSzZKhydaSeadPTojFoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4d:d8:2e:f4:cf:4d:0a:89:7a:78:ff:17:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=5fdb5fac1c4b6906dc86a1332273e851771ea6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:22:85:ea:4b:7a:2a:75:c3:10:4f:52:18:
4a:61:f5:95:c0:8b:77:4a:e4:49:b9:a0:2a:b8:84:
83:f7:c4:30:87:d9:db:bb:5c:ab:71:59:df:26:f3:
87:99:2a:89:f3:f0:a6:21:6b:2e:ea:5c:71:0c:6c:
08:69:21:08:e6:8a:fa:fc:26:56:8a:58:99:96:2a:
a8:6f:79:96:f8:cf:20:f5:cc:86:8c:3c:f6:7d:b6:
e3:74:d8:06:52:10:c1:ff:05:a7:a0:35:b7:58:c9:
75:58:2c:e6:f1:87:43:ba:5b:59:ae:4a:5d:78:20:
6c:0a:20:c9:86:0b:9d:6d:84:8f:bd:ab:0e:78:99:
ee:d8:5f:71:75:54:ee:6e:f8:47:34:ea:b5:3e:ee:
e8:19:66:30:ed:d1:c0:55:93:ec:0f:2f:4a:1b:7e:
ea:a5:2c:b2:76:78:c6:7a:4e:ab:d5:2b:4c:a9:0a:
88:6d:88:b7:44:e5:ab:73:cb:e7:ab:a0:9a:01:8e:
f5:d8:60:3c:f6:cb:b5:cc:94:ae:47:db:dd:8e:f3:
dd:22:54:43:8d:02:4a:bd:19:af:71:26:27:95:33:
59:c6:23:50:a1:de:3f:90:bb:17:35:5f:12:dd:fd:
2e:85:f4:c6:d5:96:3c:84:78:c4:ec:f8:2e:8d:73:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:5F:AC:1C:4B:69:06:DC:86:A1:33:22:73:E8:51:77:1E:A6:BE
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:6d:e8:1a:b6:40:76:50:09:b6:df:5e:36:0f:1c:0b:b1:
dd:fa:da:36:06:97:cd:70:4b:9f:c6:37:61:16:2c:48:1b:06:
db:85:7d:ed:3c:7d:b9:e2:e4:cc:a2:7c:36:ae:36:bb:8b:97:
2a:49:2f:e0:d2:8a:d9:08:e7:b7:09:90:24:56:3b:f2:68:d2:
14:cc:50:b6:8b:b1:b1:66:91:c4:32:89:80:75:22:5a:36:69:
86:3c:88:fa:fa:de:40:0a:d1:25:55:65:6f:fa:70:8c:15:f1:
77:57:73:b4:79:2e:9d:d0:4b:2b:77:a7:92:2c:91:de:52:d2:
c9:28:47:42:aa:48:ce:fe:9b:bd:24:5b:03:8f:30:13:87:73:
18:71:6f:57:42:f2:7b:9d:99:ae:40:2c:01:06:84:98:86:fa:
7e:1c:5d:e6:da:98:1e:2f:85:2c:0a:a9:8e:fa:fb:3d:4d:97:
53:8e:0a:f2:55:a5:55:d0:52:d6:45:4a:ff:6b:95:0d:0e:67:
8f:52:a8:82:6e:ca:94:ee:f1:f9:b2:2a:d9:0a:7a:e2:b3:93:
a8:86:1e:9f:5e:26:13:08:68:1d:c6:01:f4:e8:40:19:1b:cd:
b2:9a:33:ad:d2:14:30:e4:c9:04:96:a0:3c:ed:d3:fa:01:e0:
3a:b7:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:29 2026 by rpki-client