Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: EEWiuG5O7AQAuHu5IuNtL16SxlfcULQsHZYsqD85dSM=
Subject key identifier: 65:19:EB:B9:79:5C:E9:64:55:FD:26:D0:B5:E6:E1:5D:AD:A9:31:B0
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019D2703DB5D956926324A0DB542EFBDC121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0947
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: VQP33G73HDdsfk7jPzESlrbEaVsSvLBCx6hLWmYuURQ=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:db:5d:95:69:26:32:4a:0d:b5:42:ef:bd:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=6519ebb9795ce96455fd26d0b5e6e15dada931b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:00:ea:57:86:0a:34:a1:19:aa:60:bb:d5:
e2:2a:6f:be:99:47:55:5d:83:d3:ec:a6:02:4f:b4:
48:c5:e6:cf:8f:3e:d6:73:ba:20:ea:6c:1f:b3:63:
60:f6:a8:66:c7:63:b0:12:11:f3:23:63:af:bc:ae:
67:9f:ae:1a:34:e8:8a:f8:87:04:a0:29:ff:f4:a6:
6c:2f:2e:d8:71:f3:bd:c1:f7:40:d0:e5:1e:4b:27:
31:f0:49:c6:2b:9d:8e:26:55:e6:04:4d:29:34:7b:
a9:52:53:03:e4:fb:81:50:68:24:0d:f2:f0:c9:c6:
b2:11:d7:32:dd:26:fe:bc:cd:83:a2:1f:da:ed:4d:
48:81:a1:3f:da:91:66:44:2c:ba:1a:56:31:1c:00:
e4:b3:15:07:e7:08:d7:00:fc:26:87:67:77:d9:46:
07:5a:56:10:d4:bb:67:6d:67:c9:5c:97:c8:bb:e6:
85:f4:4a:c7:04:83:a7:46:84:0b:0e:a1:cb:f9:5c:
8b:4a:4c:d3:f6:8d:40:7d:ca:9c:7e:a1:43:16:e4:
aa:09:62:67:1e:8c:37:7f:95:93:25:ec:f3:f6:85:
42:31:78:8e:7e:24:39:5e:2e:c4:92:5f:0c:ba:af:
cf:60:36:d4:47:0f:dd:f7:b5:ae:34:b7:e5:68:f8:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:EB:B9:79:5C:E9:64:55:FD:26:D0:B5:E6:E1:5D:AD:A9:31:B0
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:17:53:bf:8f:5f:48:66:c1:bb:7a:b7:ca:82:9c:fb:34:
3d:5d:6f:64:2e:cb:44:08:81:1d:20:1c:a9:3a:fe:69:ee:ee:
60:78:9a:b1:a5:f3:21:1d:0e:d0:c7:ae:60:35:e8:a2:9e:85:
11:de:d7:f6:e4:0b:9b:82:93:f1:26:e9:2d:7d:46:22:85:b0:
0a:c8:6f:bc:db:08:f5:72:99:a0:e9:78:14:0c:99:53:01:ab:
b9:94:32:f9:ca:1f:8a:30:5f:7d:40:ae:42:98:e3:49:ac:cc:
ad:65:f0:91:41:03:f7:a7:95:6c:3c:43:c4:f9:84:f5:e5:df:
b5:d0:8e:a1:a1:e4:23:da:13:fe:12:7a:ca:b4:d0:79:f8:d2:
b5:55:ef:32:63:cd:95:c5:8f:23:0b:15:75:f5:12:b3:5d:e8:
fb:6e:70:df:50:3d:87:a4:f5:8e:ef:e3:bc:09:80:f5:c6:44:
a0:c5:99:8c:3c:f7:fc:06:4c:79:15:50:af:0d:25:b4:1f:7f:
ab:f5:9e:1d:a7:31:44:d1:af:f8:e7:68:b7:34:e5:46:58:00:
08:52:72:85:90:ab:2b:9d:22:41:84:e3:cb:2f:6e:22:7c:fd:
35:4b:5e:f7:89:11:fd:cd:c3:24:73:6f:f2:82:22:5b:2c:15:
cd:7e:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:08 2026 by rpki-client