Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: wsHnisEchhzQ8S8RzhGDCo0bWmKazlLQNXj+fvO4lxY=
Subject key identifier: 8C:09:F0:1E:55:B0:04:BC:8F:34:3A:2F:F3:E0:14:47:42:BA:55:73
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019D284D7F53FB8A5699A704C39B79080144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1876
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: S2HaiHMqmb5sIFdSmuIjngeumws7A9CHGjnQ0RosTm8=)
2: NaRt1HVL2Kx-sncfnj_qlUg6AzA.roa (hash: eMNf8UixOg4CJ2lG1Z2ydmE1AwqLlbPFY92TlJawe5o=)
3: h71Yv2JT78lZ32-boHdqirguohk.roa (hash: lsiFcaLhUojE1P30MtDW0JIDCpauP4wSFeSBzKbGvF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7f:53:fb:8a:56:99:a7:04:c3:9b:79:08:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=8c09f01e55b004bc8f343a2ff3e0144742ba5573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:c8:d5:c4:cf:a2:51:47:f4:71:02:6f:86:
37:1a:68:ca:70:1d:b3:f6:5b:16:a0:a2:87:e1:75:
29:ed:ea:a7:d0:96:8d:64:59:c1:2a:0c:04:5e:2c:
ce:ba:f8:8e:05:ef:92:00:a9:29:0d:14:3a:35:69:
61:58:18:80:0f:31:2c:1f:b4:1c:b5:08:ce:a0:49:
f1:92:7f:4b:1b:9d:33:60:a3:93:a5:cd:f7:04:f4:
1e:e1:c9:45:61:80:be:97:4d:fb:d7:01:1c:77:7e:
2c:27:20:d6:1b:a2:4a:76:72:8c:f4:a1:b9:f6:f5:
11:22:3f:1f:ff:8f:88:e2:54:fe:14:71:01:54:76:
f7:4a:fb:61:f3:fa:5d:8e:17:90:3a:79:97:e7:f1:
e9:2c:e2:82:1a:01:e1:05:cc:e1:6d:d2:1f:3d:45:
db:36:11:9f:cd:11:21:a2:a2:d5:5c:e4:15:60:ce:
59:83:02:a6:81:65:ab:76:4f:0a:74:8d:5c:d3:fa:
b6:7e:1e:02:10:b1:e8:23:85:4c:60:3e:41:79:95:
fa:63:cd:e4:d6:23:60:38:4e:9a:30:6f:80:63:10:
56:3b:5a:d7:7d:54:7b:02:93:34:bf:d4:cc:51:03:
c3:69:14:a0:55:4f:cc:dc:92:fc:dc:dc:ae:74:24:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:F0:1E:55:B0:04:BC:8F:34:3A:2F:F3:E0:14:47:42:BA:55:73
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a7:e0:4a:59:db:c1:21:ff:95:8e:4a:8e:9d:59:4d:2e:d7:
aa:df:1b:a4:9d:da:d5:fb:c1:4a:9e:ed:9c:70:86:c2:1f:9f:
c7:95:3c:75:ac:fd:e9:29:d5:b6:75:41:5e:a7:9d:95:04:d6:
7d:75:81:f8:f6:cd:f2:ba:76:89:b5:3a:0b:a6:19:6c:0d:c1:
a2:4b:0a:1e:a8:3b:eb:cd:34:92:17:ed:8f:9d:b4:a7:0b:23:
d3:43:95:b9:6d:65:2b:da:6c:e0:50:d4:12:53:3e:9e:70:13:
18:00:7d:42:52:2d:51:3d:e7:f8:b2:5e:7b:a9:1b:d4:2b:fa:
41:84:65:dd:c5:6b:53:70:22:7d:96:e1:70:97:89:93:0c:5e:
ca:f6:3d:a8:29:ec:3b:18:12:94:46:1b:27:2c:be:34:7f:cb:
74:44:db:d7:c2:54:fd:cb:42:27:a3:35:39:35:50:08:7e:7a:
a2:05:19:d7:4f:28:a2:c3:36:82:a1:3d:e1:48:45:ff:e6:ff:
32:06:27:5e:51:9f:a9:df:7e:56:6c:02:d5:d2:1e:c2:1a:c7:
d1:f8:87:a1:ca:35:54:4f:d6:a2:5b:47:60:66:66:31:7b:bb:
82:92:6a:87:20:83:d6:c8:13:a5:63:95:49:c7:91:8b:87:4a:
79:b0:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:24 2026 by rpki-client