Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: UIOaxk37Vr8zTSgy012ASnUNm5/QtpDg63qMNjbX9/c=
Subject key identifier: 11:CB:0F:A9:47:C9:A4:63:4C:83:7E:52:83:40:69:4F:B8:E1:10:07
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019D29CE36CA2F707459DAEDBE8EEEE0CF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0F7F
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: q70luaaikM1okO5asbDdHpZ54HC5KFSvAnEbR/CfDPg=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:36:ca:2f:70:74:59:da:ed:be:8e:ee:e0:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=11cb0fa947c9a4634c837e528340694fb8e11007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:59:e6:90:f1:8d:7d:ca:28:4a:3a:2a:e0:
f3:b0:dd:f2:fe:6d:df:8f:b7:8d:62:dc:ab:99:d1:
05:68:2a:32:20:15:1d:ad:d9:1a:9a:3c:47:26:70:
58:aa:11:cd:7b:8e:d3:74:48:cd:80:c9:d1:ac:cd:
25:9d:d1:1e:21:f8:57:1f:75:25:50:b5:36:ae:72:
6d:86:82:8c:09:ba:a1:5f:f0:f3:27:71:47:64:67:
a6:14:bc:5f:b4:91:4e:52:f6:94:9b:e3:c4:ef:d0:
f3:82:16:c0:0f:c6:97:8d:27:c8:58:e6:bf:f0:57:
a2:36:08:23:d3:c9:7b:19:bb:03:2b:23:c2:a7:49:
68:c3:33:f2:6f:8f:e6:33:fb:bc:2d:9a:11:64:de:
35:14:8e:1e:df:d6:23:7f:c4:08:1a:4d:84:59:3a:
8b:fb:40:26:5f:00:0c:c3:fc:43:8c:73:38:34:91:
f4:ce:05:f3:52:6b:06:b2:0e:c0:a3:ca:2d:8c:66:
7d:14:65:42:38:88:2f:08:c0:ec:93:b2:ad:29:80:
df:e7:cc:6e:b6:35:26:d6:88:60:f7:0f:11:1c:6b:
08:69:62:2d:96:ca:21:6e:6b:70:4f:e3:c5:20:85:
fa:4e:5a:23:2d:1c:ac:93:52:cc:17:22:db:8a:90:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:0F:A9:47:C9:A4:63:4C:83:7E:52:83:40:69:4F:B8:E1:10:07
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bb:1b:1e:4a:20:90:b8:d1:f2:2c:18:64:66:a0:f1:a4:d9:
12:e4:f4:ef:87:b4:55:02:8d:dc:47:0c:14:27:a3:68:dc:19:
2f:85:19:92:4d:17:47:4d:c5:d7:c8:a9:36:b8:d0:81:82:b2:
0f:cf:c5:0c:59:98:d0:ce:5f:54:43:d6:48:d7:c3:98:c0:82:
4a:5c:9d:0c:79:c8:86:ec:20:65:fd:d1:91:5c:20:ec:32:4a:
c1:2c:af:4e:79:b6:cc:b8:8f:f7:ee:3b:9f:aa:c7:d3:63:a6:
fb:f1:10:4d:23:4b:25:b2:0f:1a:4b:9a:f6:fa:6c:2d:43:b6:
42:4c:9e:df:33:f0:35:2b:96:2e:30:da:d3:36:88:5a:4b:92:
47:51:7f:4e:ae:18:95:93:a2:dd:f9:e1:85:9b:72:cf:d8:b3:
55:5b:10:ac:e1:51:d4:a2:80:4d:24:8e:23:fc:06:a7:b0:44:
b6:4e:d3:0e:eb:5b:be:60:a5:71:22:21:86:51:30:ef:9d:df:
52:ac:67:a5:3b:21:0c:b9:f4:ff:df:13:2f:b5:30:72:db:b8:
30:54:df:8c:bd:0b:5c:0c:ab:f5:6f:28:75:76:7e:e3:8e:be:
2e:a0:ba:c2:69:d7:94:9a:9b:1d:c8:5c:8a:34:d9:37:78:15:
fd:9f:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:30 2026 by rpki-client