Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: rHuIMuZbXElt4xdJHffLg8mV4cJLMFW5z+Et+NEQiAE=
Subject key identifier: EA:4F:B5:12:A8:88:CF:0D:CD:59:98:C4:50:68:22:73:B9:D6:CC:CE
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 019D29616BF7521372A68610A9E4EC3115EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: 40
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: YQJiag+sGJYEZhdHgJvbVP2EiI8oT1qVnhLpQBcKl7w=)
2: Enn1Z95SJUj-kQC0mI3ujuSfT6g.roa (hash: Gd2qySANZPLxtHLuoGOCJth0WOvRnEBZd5Otcvn54o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6b:f7:52:13:72:a6:86:10:a9:e4:ec:31:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=ea4fb512a888cf0dcd5998c450682273b9d6ccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:53:7b:57:d1:95:f4:e0:70:db:19:6a:e2:
da:aa:1b:b4:69:73:ba:a6:d9:98:b2:54:a8:5d:4e:
76:38:aa:ac:a7:ef:92:b9:3e:4d:f9:a4:79:c0:af:
72:21:b0:94:03:6c:ca:f3:9a:45:df:57:0e:c9:3a:
b6:12:dc:52:20:fd:33:5d:f1:e9:ef:b8:0b:c8:bc:
87:f6:fa:d8:e4:68:0e:00:6a:13:3c:ca:70:b5:b9:
cb:3d:9d:7f:81:3a:61:fb:fa:c7:24:b6:99:d2:3c:
d9:b9:43:d2:3b:bd:09:37:a7:e9:6f:62:8a:dc:95:
ab:2b:5a:1f:2d:e6:1d:20:6c:6e:d3:9b:92:20:30:
eb:91:af:bb:d7:c3:2b:cf:3e:68:db:80:f2:9a:de:
fc:0e:3c:44:ff:a7:fc:6a:d0:3e:9a:f0:a8:8b:84:
48:4c:1b:96:f5:4d:8c:96:ed:24:a1:4a:cc:90:f7:
f7:71:28:c4:1d:11:5f:de:b9:8b:32:db:a6:85:a4:
b7:7c:11:84:e1:4f:30:62:ff:e5:c0:b0:25:a4:26:
ba:39:2b:e9:0e:d3:4b:a2:bb:60:f1:0b:ad:36:1f:
a5:ef:c1:6f:0d:e6:1d:6f:25:ad:8f:9a:44:03:5e:
38:a4:81:af:ab:db:b9:9c:56:ee:6c:3a:e5:24:bc:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:B5:12:A8:88:CF:0D:CD:59:98:C4:50:68:22:73:B9:D6:CC:CE
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:3b:8e:ff:4d:46:5e:08:20:ae:e5:5e:b5:89:57:e1:3b:
83:eb:86:bb:d6:0f:81:12:38:e5:16:f5:a7:02:f0:a6:24:81:
0c:02:b0:f2:85:ac:9e:9d:b0:75:b5:87:49:35:a8:9b:bd:4d:
fc:2c:f4:df:91:24:cc:a3:4f:8c:25:b6:42:81:9e:34:9a:b9:
dd:97:7d:34:30:93:b9:59:6b:3d:20:b6:1c:98:6e:9c:70:7f:
c8:8f:b6:b8:64:dc:94:af:ce:54:e8:4b:07:c4:c7:8a:68:48:
ac:ae:de:df:7c:0a:f6:df:88:73:dd:ff:9f:b3:02:e7:7c:7f:
0d:1a:8c:ef:11:56:1e:5f:c9:87:08:ce:7b:b3:82:ce:37:72:
ef:56:f3:21:5e:25:8c:e8:05:6d:22:39:e7:2e:d0:e4:15:c1:
98:26:b5:2c:08:99:83:d0:8d:d8:61:0c:57:b0:bf:df:21:d2:
c1:19:2b:15:2f:eb:f6:dc:6f:94:a1:de:05:f0:82:b9:73:8f:
11:26:1b:0f:0b:30:ca:29:70:80:1f:96:eb:0c:0e:a7:c6:53:
17:08:3b:4c:5e:c9:12:82:fa:4c:a5:4d:66:eb:6e:09:1d:ef:
15:07:ce:03:21:54:33:8f:7e:d3:00:5d:ac:16:db:c0:22:fe:
1e:54:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:33 2026 by rpki-client