Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
File: 8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json)
Hash identifier: I8Kjk5ZADtdeifesL+gMxvvDaBaynYujgbCvGPAhQPs=
Subject key identifier: CA:95:C0:91:45:51:4F:FE:7B:EC:65:72:7F:CA:B8:07:52:F2:E7:0C
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial: 019D299758CD94408B1A8032E5EF72DE121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
Manifest number: 01EB
Signing time: Thu 26 Mar 2026 10:01:17 +0000
Manifest this update: Thu 26 Mar 2026 10:01:17 +0000
Manifest next update: Fri 27 Mar 2026 10:01:17 +0000
Files and hashes: 1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: LY+bmSb8o7OqauOr6gLrKS1Ci7TZm2JHaA2VJ770xcU=)
2: bk4lZusY2_Koxe78KPF98kBhHJ4.roa (hash: 1Foi9h5PHolKa1KqV3ZXYBv+pGOywWlibfdBplpePww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:58:cd:94:40:8b:1a:80:32:e5:ef:72:de:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Validity
Not Before: Mar 26 10:01:17 2026 GMT
Not After : Mar 27 10:01:17 2026 GMT
Subject: CN=ca95c09145514ffe7bec65727fcab80752f2e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:43:9d:e3:54:3f:7c:f6:c7:d1:88:92:88:
d9:4c:5a:2a:a3:ac:5c:ce:5f:ae:ef:63:6f:c0:6e:
6a:84:7b:ac:c1:d8:b3:fd:fc:5d:64:96:b9:a2:9c:
be:47:e3:da:ad:7e:ae:11:8b:db:5e:c9:ec:db:eb:
c9:b6:fe:4e:10:b1:75:e7:f5:56:e3:b5:4e:d4:b7:
5d:ea:ac:87:0e:36:78:a9:3a:2a:bc:00:a1:50:0a:
1b:95:3e:01:34:64:e4:86:50:a8:34:79:00:57:09:
9a:90:cc:8e:e7:8b:86:03:a5:0b:fb:93:f8:4e:0a:
92:ce:90:be:01:e0:a1:2f:f2:9d:54:3d:89:36:c5:
0e:63:5b:b8:43:2b:5c:20:2e:60:8f:c7:59:13:00:
ff:41:b2:1b:70:be:76:bb:d0:72:65:a7:4f:d4:67:
d7:aa:b3:e5:f5:8e:ab:0a:e8:4e:d9:6a:03:5d:62:
4b:f2:a5:f3:82:34:f5:e1:e6:ec:c2:0b:83:11:3d:
14:a8:ad:3a:15:47:ab:fb:c5:00:2b:18:53:73:ae:
50:c5:24:49:0e:d4:80:5a:ab:d4:bf:fe:4a:68:a6:
1e:c7:24:c6:51:09:8d:1f:38:97:c5:88:b8:45:d1:
40:c0:a9:61:e1:33:7e:a7:d5:3d:8b:c2:69:99:0a:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:C0:91:45:51:4F:FE:7B:EC:65:72:7F:CA:B8:07:52:F2:E7:0C
X509v3 Authority Key Identifier:
keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:11:57:bb:9c:91:2a:73:c9:6b:c2:c5:37:2c:38:21:58:
6d:a7:45:6f:1b:cf:82:67:17:cb:12:c0:45:ed:b2:25:66:1d:
e4:2d:91:b5:c8:f6:3b:0d:86:fa:dd:15:06:68:15:50:94:06:
e5:3f:b1:de:5f:4a:5d:57:dd:77:97:8f:eb:ff:a4:64:ea:38:
81:59:9d:22:be:c1:3d:28:4b:22:a7:6d:c6:e6:7d:17:f6:a5:
50:1d:4e:46:78:f9:59:93:15:3f:ae:67:43:7e:21:6c:93:89:
89:03:f8:e0:14:2a:6c:41:69:ca:f2:73:f5:3d:a1:b0:78:a5:
68:6a:63:99:73:fc:e4:50:15:d1:b7:77:58:dc:bc:99:92:ab:
31:3e:17:a7:33:83:3a:5b:ed:83:a6:e0:a4:43:bd:ed:57:95:
42:09:4c:ad:4e:b2:15:04:60:88:1c:85:3c:24:ec:4e:c7:4a:
94:9c:dc:18:c1:97:49:96:81:af:30:09:eb:c9:e5:86:69:5f:
75:74:10:0b:c6:44:da:1c:ba:04:5a:40:04:97:3f:7c:71:0d:
20:48:aa:a6:c7:74:a0:12:c4:8f:0a:60:1f:b6:50:04:71:d1:
19:56:c5:52:ef:3a:45:18:a9:6a:fe:ba:55:68:c3:5c:8d:6d:
ef:b9:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:28 2026 by rpki-client