Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: sRjwZ+Z2UPZyMf+FZFQX/8vzH7xr56KGYa/X6vd3+V4=
Subject key identifier: 45:81:83:9E:79:F2:76:D5:78:29:28:75:C0:91:BE:5A:A7:76:A4:FD
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019D26967EFC37094AE38A7FF140A8761C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0EE2
Signing time: Wed 25 Mar 2026 20:01:30 +0000
Manifest this update: Wed 25 Mar 2026 20:01:30 +0000
Manifest next update: Thu 26 Mar 2026 20:01:30 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: jrLecQ294e2XbaORaUcYP5MOdZPUIpolRbVk9oOp/Cs=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:7e:fc:37:09:4a:e3:8a:7f:f1:40:a8:76:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Mar 25 20:01:30 2026 GMT
Not After : Mar 26 20:01:30 2026 GMT
Subject: CN=4581839e79f276d578292875c091be5aa776a4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:64:8c:09:32:d0:7b:1d:34:b0:ed:0a:1f:
57:94:b1:c3:bc:39:b6:f6:42:3c:3b:fa:3b:e5:b1:
be:d6:8b:58:ee:65:42:24:8b:20:04:40:a3:ae:c3:
05:f9:99:6d:f4:c5:48:79:b8:9c:11:c6:2c:ef:72:
aa:58:0d:65:38:37:fd:b8:f6:46:ed:f3:a9:62:24:
2f:cc:d4:33:4e:3b:d0:d1:b7:0a:c5:83:9e:f6:e1:
be:f8:54:16:59:fc:f9:bf:06:61:da:a7:58:0e:57:
cf:c5:d4:ee:4f:42:71:f1:23:1d:3e:e9:21:f9:1f:
00:3a:9e:d0:dd:a3:48:06:0a:44:75:d0:fe:da:00:
af:88:a3:8f:c8:56:a0:eb:c8:7a:67:ba:90:cc:ff:
5d:f2:1e:28:45:df:7d:6c:7d:b9:25:22:97:d9:6f:
37:26:27:07:68:c9:22:82:d6:5d:ab:57:47:8d:34:
b2:3c:e6:51:f7:ab:28:dd:f8:4d:a4:08:69:ad:58:
c2:d3:93:d4:40:cf:b7:5d:94:35:ea:86:b0:f2:37:
19:87:0e:e6:ca:a4:f0:8c:ff:46:46:a1:02:90:7a:
1d:15:83:70:83:36:a2:b4:a1:8d:06:27:bf:d8:c4:
f8:6a:14:8f:b2:64:51:25:8b:f4:ed:a0:80:22:b4:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:83:9E:79:F2:76:D5:78:29:28:75:C0:91:BE:5A:A7:76:A4:FD
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:7b:e7:3d:79:08:06:8d:44:dd:ea:f7:3d:78:97:40:60:
67:6b:eb:ec:67:32:7e:52:b0:aa:b5:24:84:4c:45:2c:7a:28:
30:a7:02:47:81:fc:5f:ea:bd:cd:29:28:af:aa:f3:36:16:ee:
dc:4e:eb:4d:9e:1e:ab:c4:fd:39:7d:62:ef:80:5a:a7:0f:e3:
1c:7c:7f:5a:e9:41:52:6b:50:51:b1:f7:85:57:bc:e7:c7:19:
c4:29:80:c9:58:2b:88:cd:57:27:c1:71:c9:71:e2:ff:fa:e4:
44:98:c9:12:ff:70:83:b2:96:2e:b0:33:ba:f0:5e:db:d8:36:
05:4c:88:ae:4e:24:f5:a2:18:5e:c9:42:a0:da:71:65:4f:2b:
b1:0c:07:9d:5c:91:83:90:11:4e:e0:8a:95:fc:c5:4a:12:a7:
8f:da:28:fa:71:b2:4d:7e:ed:e2:eb:c0:17:82:ef:b8:1d:b3:
fa:fb:ae:1e:d8:ad:a7:8f:61:f7:c6:86:ac:84:40:55:1a:2b:
94:8f:34:47:f7:86:f0:27:7e:8a:3b:ec:8f:29:f8:61:d2:8c:
cb:c5:53:b9:e3:ee:23:8d:d4:95:92:76:52:c4:93:a0:f0:4e:
ea:4f:2e:9d:41:66:f7:c2:48:3c:33:47:e6:ca:18:7b:88:af:
e9:a3:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:22 2026 by rpki-client