Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File: 8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier: +z/HOc6pqXDN/WZhSezqiCpjULXzY8DCZgyyLKHSO/g=
Subject key identifier: E8:5F:AD:C6:6F:6D:FB:01:9C:B5:E0:A4:E4:E2:0C:D0:F9:CF:81:A0
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial: 019D2884435FBEC599FA41D71E572EF01B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number: 0CD3
Signing time: Thu 26 Mar 2026 05:00:49 +0000
Manifest this update: Thu 26 Mar 2026 05:00:49 +0000
Manifest next update: Fri 27 Mar 2026 05:00:49 +0000
Files and hashes: 1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: uKnnmf6rh3sKuJcRf2wPpMh2bfff0JeHb3tLGbxHHhc=)
2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:43:5f:be:c5:99:fa:41:d7:1e:57:2e:f0:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Validity
Not Before: Mar 26 05:00:49 2026 GMT
Not After : Mar 27 05:00:49 2026 GMT
Subject: CN=e85fadc66f6dfb019cb5e0a4e4e20cd0f9cf81a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:03:3c:94:43:9b:d1:5a:5b:0b:97:02:9e:
86:54:f7:57:0e:10:29:76:34:74:23:d0:d5:f0:82:
5f:fa:e7:5b:eb:29:2a:44:70:7c:f3:53:a1:0d:de:
56:79:83:4b:6f:13:1e:65:b4:72:08:e0:33:c3:96:
42:d6:13:46:bf:d7:2c:3e:16:45:3f:a8:3d:73:0f:
11:d9:90:f2:c2:06:e6:ec:bd:27:fd:20:4e:63:56:
21:29:78:03:7e:21:fd:35:c1:2e:8c:42:9e:78:39:
e7:36:a9:ef:8a:a2:b4:64:b5:a4:21:a1:f4:d6:46:
40:f3:0d:21:4d:bf:d0:db:c4:c6:7a:2c:2e:53:88:
0d:86:7a:ab:c3:a9:ad:16:36:e4:64:ba:da:83:1b:
ca:4e:8a:cb:39:af:8e:9c:ea:58:e9:d5:49:1d:f0:
31:ab:be:98:3c:e0:b6:11:bf:c3:b3:f4:27:15:d2:
85:52:4b:02:07:02:00:cf:84:e3:07:b3:c5:a4:68:
d6:59:d8:76:80:80:2c:bd:35:60:1c:78:a7:3a:47:
47:7b:8b:bd:0e:fa:a7:08:a6:a0:75:53:02:44:0a:
df:95:d3:5f:1e:a7:ae:a9:f6:35:64:84:ad:3f:fc:
8e:40:c9:23:74:4f:48:08:85:73:c7:29:b5:8b:75:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:AD:C6:6F:6D:FB:01:9C:B5:E0:A4:E4:E2:0C:D0:F9:CF:81:A0
X509v3 Authority Key Identifier:
keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:ea:c2:5e:b9:36:3d:0b:e8:16:99:0d:c0:4d:1b:3b:f7:
f5:4e:7b:57:12:7d:9a:95:cc:05:42:1f:8f:20:7c:f8:13:62:
45:fc:f0:ab:34:1d:15:d8:8b:83:0e:fd:03:ca:1d:a8:83:92:
8c:70:65:4e:9b:c8:e7:d5:55:16:15:57:da:cc:45:cc:e3:b1:
f3:04:e2:0e:1e:6a:2d:01:08:15:d4:d4:ff:fe:b2:e5:05:46:
e6:40:52:7c:dc:f9:8e:a9:a1:13:f3:5a:66:9f:d3:88:ba:f1:
f1:be:cf:ae:6d:a7:26:96:a2:82:e1:9a:05:3b:2d:36:e6:6e:
bb:70:33:fc:9e:8a:70:72:71:be:79:1d:d7:b4:d9:16:0c:a3:
16:f4:ec:49:8b:2e:03:8b:01:72:1f:0f:1d:af:b1:a9:4a:9b:
4c:71:a8:bb:4e:7b:16:a5:20:64:16:93:0b:0b:63:68:64:8a:
98:d9:e3:39:a5:09:42:7a:10:8b:37:35:b7:60:2e:60:d0:af:
22:d2:15:81:1b:e8:68:d2:37:6f:5f:15:a8:70:6b:02:44:18:
fc:18:e0:d8:35:65:68:10:a9:24:94:80:31:33:e0:34:5a:41:
0b:8f:ee:af:65:c6:90:dc:40:29:84:fd:38:7c:56:55:17:1e:
08:c9:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:56 2026 by rpki-client