Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: fnyld7bGq2pAaREmdd2pGcFpbC/Zyr5ihbd/5uvJ3bE=
Subject key identifier: 5E:25:B6:43:28:75:C8:F0:8E:99:14:8E:95:6D:98:BA:6B:72:39:6A
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019D2583AD5ACB0196BA4435EF05DE1B1233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0B3E
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: is43BrthvXGI8naIsTeSVPpzTBkGO2Gd8TIx2vca5WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ad:5a:cb:01:96:ba:44:35:ef:05:de:1b:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=5e25b6432875c8f08e99148e956d98ba6b72396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:10:46:f6:fe:01:2a:d9:2c:1d:0b:eb:4b:
40:64:75:e5:fe:2d:95:99:f6:ef:de:44:8b:99:03:
cf:36:fe:f4:a5:ff:e6:24:51:da:a3:dd:1b:3a:55:
f6:72:b9:72:1f:15:2b:aa:15:6d:72:8d:42:6e:a3:
e4:17:ad:4c:ec:fe:74:3c:e6:6f:b7:17:df:80:eb:
2b:be:da:84:b6:63:5c:2f:ae:6d:d7:f5:ea:f7:f2:
a0:e0:53:b9:ac:b9:1c:a2:55:39:48:0b:ec:12:e4:
ab:92:2a:d1:5d:30:da:4f:ae:b3:f4:e4:bf:55:7b:
59:62:df:34:8c:d3:c9:fa:9c:66:d1:29:ed:c2:bd:
f4:f4:8a:9c:cc:27:89:e1:66:b8:60:fa:73:a8:66:
25:28:35:ca:e4:ec:bb:86:73:e0:79:10:85:30:e0:
8a:aa:9b:9a:d8:cc:ce:10:f3:1e:80:09:c9:59:f6:
17:10:8e:a1:88:b9:51:7c:1d:72:c4:de:9f:fc:bf:
88:d7:a8:b5:22:2c:c6:55:04:37:85:73:3a:12:78:
04:40:b8:e7:73:88:e2:37:85:7c:43:75:00:93:88:
83:99:cd:2f:27:db:cb:74:d9:31:a2:ad:91:7b:63:
bf:92:57:ad:3e:99:52:7a:e6:78:08:20:46:e5:8f:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:B6:43:28:75:C8:F0:8E:99:14:8E:95:6D:98:BA:6B:72:39:6A
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:88:97:be:65:c5:2e:5f:a6:0b:ff:53:ac:40:99:76:de:
00:4e:e1:ce:91:cd:40:46:f0:e7:bd:e9:54:19:74:34:e5:28:
08:0b:bd:f5:36:2d:c7:96:a7:ae:70:fd:78:b9:2b:70:be:f2:
19:b8:12:dc:c6:f4:4a:2a:cc:4a:f6:13:e3:1e:92:d3:d3:45:
42:1a:64:37:94:35:9e:44:df:c7:73:83:dd:d4:57:ea:c0:da:
9f:d6:f1:29:90:cd:4b:20:37:a3:61:ed:06:4e:ec:fa:bb:8d:
cb:eb:e8:aa:2c:e9:64:a7:17:51:e9:82:77:33:57:7f:5c:17:
ab:aa:66:f0:16:ea:1f:60:db:65:f5:26:0a:2a:34:ae:58:b6:
53:ae:a5:aa:8a:fa:4f:10:3c:cf:29:51:6d:9b:22:f3:c5:1a:
ea:6e:a4:ec:ea:f4:77:48:d5:d6:e1:cb:02:6d:5a:29:a2:35:
a1:66:03:fd:f8:9c:18:17:24:c6:22:80:63:67:78:31:33:6a:
6b:49:2a:f3:49:bb:b1:17:b7:43:b6:40:39:7c:4b:f9:21:20:
6f:f2:f6:55:56:2a:1a:8e:68:5b:f1:d0:18:9e:0f:06:a1:1c:
ef:d6:10:06:1f:8e:d1:a3:e7:ce:db:ba:3e:75:48:2e:a5:36:
aa:88:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:26 2026 by rpki-client