Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: w/IfETZ3SeL1LR7sxRkJGZ57SHReTrsJ+ihWoyfKvfc=
Subject key identifier: F0:87:D5:5C:4B:49:09:CD:4D:C5:76:E2:06:8F:B4:92:3B:56:E8:30
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019D27A87E69BD8D60A2E545AA60F6AD331A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 0qRUcHgdmszRF6Y10PKtlX9+WJgh6dxFCl+ztZZAwsY=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7e:69:bd:8d:60:a2:e5:45:aa:60:f6:ad:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=f087d55c4b4909cd4dc576e2068fb4923b56e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:60:73:e4:3a:db:cd:57:df:69:e0:a2:29:
d6:61:8d:c2:fc:a5:b9:1e:13:07:02:03:73:d6:e4:
1c:b4:d3:b0:29:28:af:0a:2d:41:c6:33:b8:b5:83:
57:5b:e4:9f:36:3c:6b:c4:e9:16:5a:ba:d0:72:f4:
82:a1:3c:66:39:44:8f:02:7b:19:c0:23:86:44:d9:
33:18:49:d2:9b:aa:c9:0a:c7:4b:84:18:7e:be:94:
b7:9d:3e:6e:67:64:9d:3f:6e:7f:68:1c:37:54:cb:
26:ae:91:2e:04:9e:ff:d7:2a:77:65:4c:63:d3:22:
96:5e:63:b2:2a:40:68:b7:aa:b3:41:63:2f:5c:67:
4c:63:6d:da:98:c0:a6:d2:f5:da:01:78:29:dd:17:
93:30:4d:de:c2:7f:00:a1:c3:22:48:e7:f4:2b:1c:
41:93:e4:9d:e6:5f:2d:20:45:88:ee:65:fa:81:8a:
23:f5:17:d0:f9:d7:d5:c1:17:a7:40:d0:60:51:ac:
be:a2:ba:cc:cf:e3:35:13:25:e0:96:dc:f0:32:0f:
81:44:b3:dc:f9:55:e1:fb:2b:1d:6b:e8:bd:0b:15:
1b:ca:17:e2:82:e6:93:33:a6:ad:a9:bb:45:a4:82:
da:9c:a4:95:db:3e:f9:d6:94:44:8a:09:dc:02:71:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:D5:5C:4B:49:09:CD:4D:C5:76:E2:06:8F:B4:92:3B:56:E8:30
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:cb:b8:8e:af:82:6e:71:02:a0:3b:86:bd:a9:36:6c:a7:
d7:83:7e:cb:86:28:76:8c:4f:59:d5:a4:e3:47:2a:77:60:79:
d6:aa:fa:f1:8f:a6:32:b2:67:aa:c8:ea:c0:8e:8f:9f:a7:ad:
53:68:00:f1:0f:80:2c:4d:03:c1:a8:97:2d:b6:7d:d0:ec:20:
6d:bd:58:5e:b1:09:50:d3:78:ce:b9:d0:99:8b:7c:dd:a3:1a:
a1:a7:5f:96:20:38:55:33:bb:c4:c4:df:1e:a1:71:ef:e1:cc:
cc:67:63:67:ef:12:3c:44:c5:5c:cc:fa:96:51:08:42:40:52:
c0:46:6a:0e:c7:81:d9:2a:b6:61:c3:e2:31:ab:75:81:f0:53:
cc:c7:b2:6e:8a:fd:1b:ab:7a:d2:f1:51:ec:49:ee:7a:21:69:
2a:28:fa:72:08:26:09:11:8c:8a:49:a6:dc:09:a6:96:0d:9c:
d3:73:31:cf:b5:c7:db:28:27:c6:59:79:9b:83:e6:7f:b1:5d:
a1:b8:8b:14:ab:22:e9:8d:74:75:cc:3a:60:dc:5b:75:74:c4:
5a:48:4e:e6:1b:b1:60:ab:bb:f0:cc:fe:b2:8a:81:9a:3e:7e:
86:1e:6a:5c:18:f4:3e:d4:fa:aa:53:d5:76:db:33:d5:e0:d3:
5b:6b:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:30 2026 by rpki-client