Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: ICKyAz8mkOdwK0AUfDMqgc04XaHgT2/tbJEF8ARu7rE=
Subject key identifier: 35:A3:42:0F:B6:F2:7C:9F:D5:DC:5C:C0:F9:8C:AA:31:8F:7A:70:85
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019D2628084241E210A4DB068397CD84CE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0C49
Signing time: Wed 25 Mar 2026 18:00:50 +0000
Manifest this update: Wed 25 Mar 2026 18:00:50 +0000
Manifest next update: Thu 26 Mar 2026 18:00:50 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: DEGpD8Xi+j8XMD7cVMgD758gZbGSHuZt9xPdnvxQcng=)
2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:08:42:41:e2:10:a4:db:06:83:97:cd:84:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Mar 25 18:00:50 2026 GMT
Not After : Mar 26 18:00:50 2026 GMT
Subject: CN=35a3420fb6f27c9fd5dc5cc0f98caa318f7a7085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:b8:95:52:dd:09:08:12:ef:e6:1b:e3:a1:
18:3f:05:ae:80:69:58:10:a9:a3:f2:67:72:e6:7d:
6b:27:22:30:3d:6a:3e:10:e0:0d:10:c1:f8:22:f8:
ff:ae:4b:b1:b6:f7:90:c0:46:56:71:77:49:fe:1f:
01:0f:03:b8:ea:15:47:12:7b:ef:cf:09:ec:0c:d9:
e6:1a:48:ab:23:db:81:dc:94:04:3f:b8:47:c3:cd:
a2:4d:65:f3:96:96:d4:8f:9e:78:fa:56:98:0a:29:
fd:71:ec:d4:52:ca:50:29:f0:ed:c0:2a:f3:85:66:
93:6d:83:a9:dd:50:c4:97:ae:03:dc:8f:45:ef:a7:
82:ff:0a:9d:27:66:f9:0b:a5:df:11:36:0b:82:a1:
23:f5:e1:5f:21:54:01:e6:d4:7c:ee:a1:bf:fe:c1:
d8:5f:e1:fe:a9:c7:0e:a6:af:b3:36:d5:ba:0f:01:
6f:50:92:68:33:80:61:db:a8:02:4d:09:67:17:90:
af:1d:47:5d:eb:9f:1d:3b:d6:9e:2f:6b:8b:e4:b9:
d3:0e:32:10:53:f6:90:8f:94:25:72:45:a1:e0:14:
68:0d:53:7c:a0:03:fd:b8:85:7e:2c:b8:4d:48:e7:
8e:4e:6c:ad:77:c8:dd:d2:e5:f8:0e:06:6e:f5:1a:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:42:0F:B6:F2:7C:9F:D5:DC:5C:C0:F9:8C:AA:31:8F:7A:70:85
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:20:4f:fe:3d:b2:0c:c4:bb:c9:8b:53:8d:9b:44:52:ce:
1f:70:d1:0d:40:9a:4a:93:da:91:4c:38:43:9a:75:5c:cc:4c:
c9:bb:ac:a5:68:d2:4c:29:31:d6:7c:90:bd:c7:aa:f4:93:70:
e9:06:fa:6d:11:4a:44:98:69:b4:00:9d:25:29:66:87:a6:1a:
ad:ef:ff:1e:68:65:f6:25:66:56:4c:91:66:b9:52:7f:a3:64:
71:ca:af:d6:37:94:a6:c6:28:ec:f6:03:6c:42:63:87:54:64:
0b:61:b1:32:2f:c4:61:b1:ae:16:0e:93:ed:7f:10:52:bb:58:
c9:e9:e1:fc:79:ff:52:8e:cb:b4:f4:dd:11:17:8b:1c:f1:8d:
93:f2:5a:6f:66:08:10:75:9b:44:16:58:c8:35:6d:c6:ad:57:
4c:e3:3e:e2:5f:54:61:fe:50:31:51:07:9c:f8:89:dd:28:2e:
84:bd:02:70:b5:e8:ad:3b:2b:1d:c6:e1:ea:e7:25:d2:71:df:
87:25:3b:77:30:05:0f:e0:7a:98:4c:b3:a5:e2:19:b8:c9:e3:
2d:e7:93:1b:b8:56:56:8c:4d:0b:c9:b2:31:38:24:86:59:67:
ce:d9:59:e8:c0:03:fa:82:55:e1:b1:55:a4:8d:51:d2:4a:08:
7f:e9:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:32 2026 by rpki-client