Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: 96Xfb1ShH5N9czvkxUm3GYPC3g8KdEBq9L9kqNcDcRg=
Subject key identifier: 95:86:48:8F:19:90:A4:20:65:4B:CC:BB:A1:BE:78:DE:21:46:A6:07
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019D25835B2EAFDA0A7A23274689E2596595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 147A
Signing time: Wed 25 Mar 2026 15:00:58 +0000
Manifest this update: Wed 25 Mar 2026 15:00:58 +0000
Manifest next update: Thu 26 Mar 2026 15:00:58 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: xoKba+ZSg8q5qTrGTpa4sLH4iFnJVwb78/R8VtgcW8U=)
2: 8yFq5eCzFqbUHkppnTImyWd7TQ8.roa (hash: cyxrgjDYi2zADRMcxKZcX9vgUVvbqnmcfKimHV7W0bY=)
3: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
4: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5b:2e:af:da:0a:7a:23:27:46:89:e2:59:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Mar 25 15:00:58 2026 GMT
Not After : Mar 26 15:00:58 2026 GMT
Subject: CN=9586488f1990a420654bccbba1be78de2146a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:7a:2e:25:68:8e:21:c8:a4:c5:f0:84:d0:
d7:9c:c8:0b:49:cd:9a:dc:e8:5f:a5:01:de:6e:bd:
95:d0:bb:fd:8e:e9:c5:89:17:e6:77:f5:2c:15:0d:
1a:7f:89:05:e1:69:7b:24:9d:6d:51:9b:5d:93:5e:
10:10:d8:f4:4a:13:fe:ef:57:47:f4:20:14:cd:d3:
73:80:90:a3:80:a7:d9:8a:a3:0a:04:9a:b0:aa:25:
8f:83:c4:28:4c:9d:6a:13:1b:22:69:72:6b:8f:8f:
67:02:2d:80:eb:14:7c:0b:4c:21:91:3e:c6:c7:cc:
98:75:51:7d:4a:0c:ff:74:8c:92:29:c7:81:ba:2f:
37:54:1b:06:4e:4a:ec:02:fb:88:4f:43:9c:d4:43:
c0:41:f5:4e:45:1c:64:b3:0f:ae:99:57:d7:c7:9d:
36:de:55:1b:0b:74:40:2c:23:f4:17:2d:99:2d:0f:
3e:5b:76:34:fe:91:55:0d:4e:ed:15:1e:ae:0e:5e:
c9:01:e8:92:49:38:a7:fa:20:1f:95:c5:fc:8f:d5:
15:4a:2b:1b:31:b2:45:04:6e:5d:71:7d:2a:90:a9:
d0:36:a4:c2:57:7a:54:a9:81:58:d7:71:69:50:78:
d5:aa:44:94:2c:c7:97:62:75:5a:e6:b4:3f:5a:0c:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:48:8F:19:90:A4:20:65:4B:CC:BB:A1:BE:78:DE:21:46:A6:07
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:ab:36:fe:5f:f7:86:c5:69:e0:41:b9:cd:fd:24:aa:25:
a3:d8:e0:c8:1d:61:fc:6d:8b:e5:d5:40:b9:af:b8:29:3f:d3:
3e:2a:14:f5:cb:ad:4f:04:db:b5:2a:53:42:37:71:ad:6b:b3:
a6:51:6e:96:c4:cd:a3:66:0a:00:74:21:ec:6a:72:3e:89:d5:
94:e2:1d:78:83:ba:cd:83:1a:67:89:77:bd:2e:b8:5c:e0:f9:
ec:0e:5d:2d:ae:d5:f2:fd:80:d8:36:cd:05:9b:57:01:ef:55:
ce:e6:58:61:30:14:54:8f:76:0d:f3:25:7a:49:76:03:4e:9d:
91:93:ff:60:d8:d5:d4:c8:72:9b:35:89:b6:c1:cd:6f:52:b2:
3e:be:e8:88:22:87:d0:34:11:e7:6b:72:6d:fa:05:bc:ff:62:
26:98:7e:76:db:4e:93:25:b3:46:30:36:bf:30:a9:ad:d7:11:
8a:f5:69:d9:9a:03:dd:c0:c6:ec:bc:c8:89:7c:41:0a:72:1c:
f8:e7:09:06:ba:0c:8b:49:48:94:c7:2f:c4:5d:f5:2f:1a:72:
d7:63:4b:60:df:34:7e:08:ba:1a:e6:95:7a:2a:71:83:85:41:
49:22:f3:e5:00:91:1b:3b:eb:7b:6c:cf:38:4a:08:e6:a5:4f:
9b:2d:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:14 2026 by rpki-client