Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 5oFxzvrioEtltwA8GlGNaNIro1CiSs6wMIzIUOO/oaw=
Subject key identifier: 99:22:FD:4A:9B:11:42:00:5B:E5:C2:2B:00:B3:EC:80:04:7B:3F:6B
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019D2772D0D56D973D796540916945243FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 12EC
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: OvVdpAwNeOObT3+Q8+BftkbqyRIECFnyxSCiuulMKeg=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d0:d5:6d:97:3d:79:65:40:91:69:45:24:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=9922fd4a9b1142005be5c22b00b3ec80047b3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:7c:ad:f2:8f:ec:ad:11:91:77:ff:f1:bb:
7d:5f:0c:6a:71:5a:4e:12:25:3d:48:1b:b3:6f:e5:
17:d8:72:5f:1c:9d:60:73:a4:cf:07:5f:67:6d:de:
68:df:cb:56:2d:14:65:ae:27:3f:91:55:35:e7:46:
b1:ce:0f:4f:c0:d2:38:df:36:c8:95:4e:bd:2a:f2:
d8:fd:16:b8:ad:cc:5d:42:08:8b:04:f8:c8:0b:51:
f6:a7:1c:44:66:52:7f:69:e6:a5:a2:0a:14:3a:32:
fb:47:8b:74:cf:86:97:59:fe:74:d1:bf:a4:62:71:
1a:f7:7a:44:c5:ce:fe:43:bf:d3:7f:46:53:ae:e6:
2a:fc:68:e8:c6:6b:f3:79:91:81:96:7e:2e:8d:49:
53:ea:28:6c:e7:5b:69:1e:d2:94:26:05:3f:15:88:
e6:94:ef:05:78:7e:0b:4b:ea:ab:e1:09:cd:ec:af:
51:da:ae:2a:af:77:a9:e6:e3:ea:94:6b:ed:0e:99:
cb:f2:d2:6a:28:05:f5:32:43:bd:e6:01:d6:ec:dd:
7e:11:fb:e2:f8:f4:d3:af:92:ba:a7:14:43:b8:cb:
ea:a6:93:74:17:72:26:45:8b:f4:d3:74:76:2a:cc:
e3:9c:a6:59:2b:f2:9b:3c:b0:0b:ed:8e:c0:58:72:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:FD:4A:9B:11:42:00:5B:E5:C2:2B:00:B3:EC:80:04:7B:3F:6B
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d3:fa:94:84:84:e7:27:bd:53:06:18:74:c0:44:fc:bb:ab:
f5:31:95:f4:94:e0:8c:a1:2b:04:65:1a:44:a3:8c:34:81:d5:
a5:c7:69:69:ef:ef:43:a5:0e:ac:1c:40:0c:0b:22:e2:e3:90:
41:13:ed:b4:1f:05:52:a6:f9:dc:8e:48:f3:75:9c:de:1c:7a:
ec:17:06:04:27:55:4b:c4:fd:a5:be:0c:cf:d4:75:ec:10:2f:
c1:c4:0e:db:2d:0d:4d:f3:4a:ae:a1:8d:e7:e5:b0:a9:e8:5c:
c0:ae:f9:da:e5:54:36:0c:3b:ab:5a:67:2b:84:64:c5:73:5b:
77:97:23:5e:df:95:c2:45:0a:c5:0d:bf:04:50:16:98:c5:8a:
6d:4c:35:b9:19:3f:71:8d:7d:80:90:16:7e:5e:5b:3f:3e:47:
ac:eb:2e:ff:a4:7d:96:36:ac:a2:60:8f:af:6c:4e:31:2a:36:
99:80:a1:2c:58:2e:7a:c7:34:a3:68:f8:86:4b:a3:84:4a:bb:
63:7b:0e:ef:8d:37:3e:fc:43:5b:4a:c3:58:3b:9c:1a:0a:7c:
4a:90:c2:42:b4:e6:7b:3a:0b:78:67:45:39:8b:27:a6:29:16:
8c:d1:c1:a5:d5:b6:5e:b1:44:cd:25:74:b0:50:12:2e:06:f0:
82:4d:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:21 2026 by rpki-client