Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: aWagGdyPwLAHeFXNWsxItr82E+L8wLFmOCgRy9qEeHQ=
Subject key identifier: F4:DA:84:30:84:D2:67:92:DE:3C:33:FA:0A:58:D0:E7:A0:DD:7E:A5
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019D273ADF5A7B1708024C58760E7CC9BB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1771
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: DmB1y+cZbSfaRr1RN3807YUgGaj4fFhRynsPxI+GWM0=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:df:5a:7b:17:08:02:4c:58:76:0e:7c:c9:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=f4da843084d26792de3c33fa0a58d0e7a0dd7ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:8b:1c:1c:31:b1:84:19:b5:56:d4:0d:92:
72:4a:d5:10:48:c8:3f:0c:d0:68:d4:be:27:e8:15:
bf:18:14:e3:b9:69:60:7f:54:34:b4:f8:fa:19:a5:
de:aa:b5:78:69:dc:da:d2:a9:e2:87:19:4c:7b:6e:
1d:c8:49:1f:40:a5:4b:6d:de:48:00:3b:ab:86:1b:
2d:59:c1:76:a4:a1:98:12:50:63:91:95:c9:b2:99:
b9:b4:5d:e2:9a:23:36:75:c6:e2:3b:4e:71:26:2e:
76:c3:61:73:70:a0:45:94:9e:0f:4d:61:b0:5b:1e:
ad:41:a7:1b:e8:44:92:0f:2c:3d:14:ad:b1:15:62:
19:1f:11:2e:5f:49:f7:5c:3a:52:e8:b1:d8:b4:83:
59:fb:cd:bc:f9:c6:bc:bf:31:94:a9:59:e6:20:f3:
27:91:fc:22:6d:e5:99:51:05:ad:23:33:4a:bb:d9:
8e:67:82:3e:ca:56:bb:99:b0:42:74:e9:96:ef:65:
47:6d:7d:de:4a:3c:ce:fe:e6:50:4b:e2:b4:a4:21:
8f:a8:28:2c:99:aa:cd:d2:86:65:4f:29:40:09:45:
14:dd:18:ce:22:f1:da:37:18:cc:29:0f:01:22:9f:
25:77:27:31:36:bc:6b:79:05:f7:b4:29:db:09:b8:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:84:30:84:D2:67:92:DE:3C:33:FA:0A:58:D0:E7:A0:DD:7E:A5
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bd:14:c7:91:81:b3:81:a7:97:ef:47:95:06:f3:19:b0:e3:
2c:65:89:1a:fc:ab:2a:bc:61:35:89:9c:6d:af:a5:d7:5e:5f:
6f:ac:24:83:21:5a:72:97:4e:3d:0a:2c:a6:95:7e:82:20:c7:
3a:41:dc:e8:f6:59:64:17:4d:5c:b8:27:00:40:4b:5d:a1:09:
ac:76:cf:40:9c:86:6a:3c:8c:b2:95:8a:dd:2d:8e:52:ac:6d:
55:5a:dc:51:fa:5a:c6:a0:04:e8:d1:44:fb:0d:96:1e:bb:df:
9c:95:b1:82:fc:49:b8:6c:a8:01:61:b5:a2:fe:5c:62:86:0c:
df:d4:80:13:2e:b3:23:c9:f2:5b:27:3c:35:c6:dc:d2:51:97:
39:13:d4:a1:7e:50:13:09:57:e9:21:02:42:c4:d1:fc:b0:ce:
91:9b:ec:17:84:1e:04:5a:b5:07:39:bc:6f:17:c0:d9:8b:70:
ed:99:bd:bb:54:d6:e2:65:bd:01:cd:9f:d0:7d:4d:16:86:30:
b5:b2:34:ff:29:55:07:23:5b:a4:50:ce:5a:27:25:a8:a5:8b:
10:19:60:85:78:3c:57:1d:e6:26:86:4f:f9:ef:2c:ad:dd:79:
df:b1:1d:31:57:55:b6:ee:46:ca:56:ba:f1:b0:5b:c8:0d:47:
65:e7:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:13 2026 by rpki-client