Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
File: 8qrILhYayAqgqo7qnwiE43ONkn8.mft (raw, json)
Hash identifier: 8NkNxM5Fd9nrtIAI3qDnxVXHMc9NF/VjvWihuzFJt0o=
Subject key identifier: 11:4A:1C:34:2F:05:2F:90:D1:57:8F:2F:1F:F4:E8:8F:F6:B4:A2:BA
Authority key identifier: F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
Certificate issuer: /CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Certificate serial: 019D333EECE96B239CB985760A86E46C5CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
Manifest number: 0E
Signing time: Sat 28 Mar 2026 07:00:55 +0000
Manifest this update: Sat 28 Mar 2026 07:00:55 +0000
Manifest next update: Sun 29 Mar 2026 07:00:55 +0000
Files and hashes: 1: 8qrILhYayAqgqo7qnwiE43ONkn8.crl (hash: 2DaO812cD6uUFudMm4+Qm6SiVWK0pKtDoXmGoYCblGE=)
2: p-im3QVnalbsusM3ZnGz60SJPow.roa (hash: Ldo09DRRNUU18hQdQ2aHYFadGWK1+VYL8twJrEqztGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:ec:e9:6b:23:9c:b9:85:76:0a:86:e4:6c:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Validity
Not Before: Mar 28 07:00:55 2026 GMT
Not After : Mar 29 07:00:55 2026 GMT
Subject: CN=114a1c342f052f90d1578f2f1ff4e88ff6b4a2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:79:86:a7:30:22:61:18:76:b9:ec:be:7c:
10:64:8a:e3:42:64:bd:3b:0c:23:ee:85:65:6a:85:
9e:f4:ad:3b:87:31:0d:43:9a:a3:bc:68:f3:06:83:
99:b3:61:c1:af:4f:c0:1f:d4:b9:09:c3:7b:6b:f4:
b9:62:8b:7b:ff:35:7d:cd:b8:65:7a:e2:57:23:22:
69:43:cc:58:d3:7f:f0:f9:b9:05:a6:46:1b:85:35:
3f:72:39:47:ac:4c:a9:f2:34:2a:2a:4f:92:b7:af:
c8:e9:07:31:00:f0:90:23:5f:37:7c:a3:77:68:8c:
2e:66:fe:86:7f:88:40:fd:01:7e:c7:a3:e4:ec:54:
2d:39:e0:fc:5b:c0:1c:a1:74:e9:9d:17:1f:e3:b0:
cb:7f:a2:5e:e1:75:6d:31:32:c3:15:a8:99:d3:be:
80:4d:cc:6b:63:0b:d4:99:bb:9a:cc:6e:38:86:6c:
d9:eb:bf:e8:78:8e:08:7a:b3:a9:b3:61:5d:f5:ac:
0c:ad:c7:b5:9e:9d:2d:4a:62:44:7f:3d:60:bd:6c:
6a:c1:96:79:5f:d0:b8:88:58:9f:0a:1a:b3:19:d0:
3b:18:e9:8e:ba:db:70:2f:1c:2b:95:97:6f:f2:77:
32:c9:c3:de:19:33:13:56:99:b9:ca:6c:6d:ec:6c:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:1C:34:2F:05:2F:90:D1:57:8F:2F:1F:F4:E8:8F:F6:B4:A2:BA
X509v3 Authority Key Identifier:
keyid:F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7d:a7:18:0d:e6:61:cb:be:4c:2c:a8:d2:a2:98:94:2a:86:
4a:22:cf:73:db:eb:4f:8a:38:31:c0:a9:fd:75:17:04:63:b4:
ec:7c:06:33:4e:ab:9f:3d:6b:b1:8b:e2:6a:3e:32:a3:49:2d:
54:a1:fe:1a:b6:73:ba:4c:2d:a8:07:a1:b0:b3:dd:43:6d:e4:
c9:7b:0b:72:3c:61:b6:1c:b2:54:91:5c:38:17:18:d8:90:9b:
b1:a3:1e:6a:b9:0b:20:13:fa:5f:3f:e6:15:1d:34:9f:86:57:
ef:65:81:1f:66:bb:86:31:7d:3e:0e:ca:54:1a:46:0b:62:7f:
26:14:48:ed:1b:7a:36:d1:19:11:3c:2c:6b:ee:dc:ba:73:b6:
33:5a:3b:de:bd:69:54:70:ad:84:70:ea:81:9a:de:86:d6:f8:
70:ac:04:bc:3a:28:b5:d9:cf:ac:d6:4b:72:d8:ed:73:68:d0:
48:ee:98:f0:36:f8:76:73:03:1e:d8:3f:ce:ec:00:58:f7:40:
62:ef:6f:21:57:d3:47:45:c1:68:57:2f:b3:34:82:b7:38:a2:
3c:6b:8a:42:1d:7b:39:f8:8d:02:a8:72:ab:99:92:0a:cd:d5:
c9:f2:76:c0:21:52:7e:a7:62:96:57:17:7a:76:2d:78:5b:ad:
f7:e5:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:33 2026 by rpki-client