Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: m0q7RsUa5kY/lRTDDQpVlTkm5yYsl1dbKLTtavwfHpg=
Subject key identifier: 02:07:B3:55:41:D7:92:FF:5D:B5:DA:C4:9D:7C:1B:F7:7F:DA:D6:36
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019D31F4CDD769E792B6BBF494D29B46537D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 088D
Signing time: Sat 28 Mar 2026 01:00:19 +0000
Manifest this update: Sat 28 Mar 2026 01:00:19 +0000
Manifest next update: Sun 29 Mar 2026 01:00:19 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: W9hrU1/XCRggVOWWuQeiFi3yZcu37/rqH9bIUokCET0=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:cd:d7:69:e7:92:b6:bb:f4:94:d2:9b:46:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Mar 28 01:00:19 2026 GMT
Not After : Mar 29 01:00:19 2026 GMT
Subject: CN=0207b35541d792ff5db5dac49d7c1bf77fdad636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:25:91:08:a8:dd:f4:d6:3e:56:f7:ca:76:
c0:f8:d6:d4:a4:9b:a8:de:b7:77:2f:0a:7c:ba:f4:
07:21:34:58:80:5a:43:ef:fe:89:6c:3e:2d:0b:13:
05:42:e2:57:d1:71:5e:ea:2e:b1:11:cc:19:ee:37:
6b:21:e9:39:2f:c1:22:dc:ac:17:08:ff:f7:cd:3d:
d4:1e:f7:6f:1f:8c:93:bd:e7:12:1e:51:f6:c4:49:
b6:44:47:af:33:c7:f8:e2:f8:79:0d:ac:43:10:8e:
fb:c2:0e:f4:74:ea:e5:7b:77:79:9a:6b:05:e1:2a:
98:20:32:78:96:3a:f7:d9:f3:22:e9:51:f7:24:50:
f6:05:cf:ff:35:e2:03:3f:08:c0:81:14:41:07:1f:
c4:3d:45:75:2b:a4:f9:ed:3d:af:f1:0d:19:59:a8:
8f:ea:3b:5c:5c:b8:b3:6d:0b:bf:a3:7c:c7:3f:74:
8d:77:01:29:a6:25:0d:05:4a:3c:ca:58:71:a3:0b:
a7:dd:0d:88:a7:38:3f:5d:53:e2:b2:d8:58:b6:5f:
71:bb:24:07:3f:f4:ec:86:0f:c2:f3:15:57:c6:c4:
d7:a5:10:a9:65:d1:0b:7e:43:83:9b:02:0b:67:f3:
03:60:17:94:4f:1b:5a:99:64:33:af:1a:bc:ec:f1:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:B3:55:41:D7:92:FF:5D:B5:DA:C4:9D:7C:1B:F7:7F:DA:D6:36
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:a1:b9:97:73:37:88:e1:e3:9a:58:22:8c:6f:7b:fb:97:
7f:02:6d:6f:f5:27:dd:4e:ec:06:24:29:d8:cb:7f:25:3e:d9:
d2:af:e4:8e:73:6d:0a:1e:3d:41:5f:6d:99:08:e8:28:2f:ce:
ce:6b:68:12:93:4b:84:59:bd:be:d4:28:c6:5c:94:ee:32:04:
ab:18:dc:31:78:6a:a2:80:25:9b:fb:5f:58:b1:49:86:ef:29:
a8:1b:bd:bc:2e:53:2e:be:15:ef:56:5e:75:b3:20:0f:41:7f:
fe:e9:f6:c6:72:6e:2e:36:08:b6:d9:9d:bd:c8:b7:3e:30:d5:
29:32:d5:8b:ec:49:c1:d9:cc:a4:0b:d8:0a:9c:7a:33:61:d5:
60:20:66:6d:1a:13:93:58:98:a5:4a:b2:0e:4b:3b:65:36:a2:
24:2a:ad:58:0f:5c:7c:06:21:9b:13:dd:db:fe:7b:3a:9e:42:
43:d8:c3:71:64:f3:bf:f6:c3:cf:97:2b:5a:64:57:8a:3c:82:
f0:93:ad:c6:6f:bc:5c:24:25:9d:87:63:92:2b:fc:3c:10:8e:
7d:93:a6:e7:0a:60:6b:34:12:e2:1b:d6:f0:c2:87:85:71:c9:
33:c0:ee:13:28:d6:5a:8e:e9:e0:ce:69:95:63:8b:cf:4b:74:
80:ff:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:57 2026 by rpki-client