Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: 8XcTzuNPmBpByKRsEK5ZdHI96mWCJAUw0i/9XdGXTfM=
Subject key identifier: D5:27:ED:31:08:05:13:8A:07:5F:9A:C6:5F:D4:69:76:84:80:40:1C
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 019D333E68AFEF1990DF4BAA26BC8B715F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 0870
Signing time: Sat 28 Mar 2026 07:00:21 +0000
Manifest this update: Sat 28 Mar 2026 07:00:21 +0000
Manifest next update: Sun 29 Mar 2026 07:00:21 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: hxfA0FQea1civdkaUCxh0xKsi93fBxA2Zbje9N+f1HU=)
2: MOE6KwN-epUQMdljICsn17Njfbg.roa (hash: iNc+kg2dbOxkcfPRJ+ToFioDzAzKbLX2bomVYrhE+a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:68:af:ef:19:90:df:4b:aa:26:bc:8b:71:5f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Mar 28 07:00:21 2026 GMT
Not After : Mar 29 07:00:21 2026 GMT
Subject: CN=d527ed310805138a075f9ac65fd469768480401c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:51:d9:e4:3b:00:c7:dd:0e:61:5c:ff:92:
a4:e8:e7:1b:1f:c8:f4:5b:31:bd:ce:d9:4c:58:40:
4a:b1:fc:fa:7e:97:2f:86:9d:96:eb:8d:84:e3:c2:
2c:a5:b5:07:98:19:a4:71:8e:61:56:87:0d:3a:5b:
e7:80:7e:35:a0:54:af:2d:78:ee:a4:5f:d0:e8:33:
d1:b4:ff:d4:d2:a3:12:80:15:be:da:fa:26:04:54:
9c:b0:fd:ee:09:5d:6a:b4:88:22:3f:0a:13:78:0e:
b3:de:5c:97:76:c4:d4:cc:41:2d:a9:7e:da:b4:44:
f7:64:9f:21:fa:32:4a:5a:63:3e:8e:8d:ba:95:df:
83:94:b8:7f:21:07:c6:e3:5e:8c:ab:d5:b6:69:4a:
5a:b3:29:ea:bf:65:cd:d0:a6:3a:6a:93:3c:50:54:
0b:e7:ea:61:f8:96:47:7e:f3:46:28:d2:d7:96:c5:
bd:3c:f4:11:84:34:44:8c:1e:ff:da:29:b4:a7:32:
87:58:4d:55:8b:f4:e3:a6:17:2a:67:ad:d5:ad:f0:
4b:f9:9f:df:b4:b9:19:a3:f2:0b:9e:b0:e3:95:79:
cc:20:2d:2b:c1:4f:0e:a6:de:19:0e:d2:3c:7c:13:
f2:ea:d9:1d:5f:ba:ff:08:91:29:67:d9:39:a5:06:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:ED:31:08:05:13:8A:07:5F:9A:C6:5F:D4:69:76:84:80:40:1C
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:d4:33:19:f7:fb:ea:44:8a:81:98:0c:31:62:72:2e:29:
98:e5:9e:f7:7a:32:0d:15:16:75:8f:61:ad:96:a0:fd:8b:11:
b7:69:85:40:68:f8:60:66:64:a2:c4:ae:71:f2:b9:db:06:5a:
ad:72:2a:a1:dc:f6:e8:26:4d:59:c1:09:da:3a:e7:f4:38:44:
f0:85:a2:b5:85:92:a1:9c:f1:8d:a3:4f:87:4f:85:bb:c8:e9:
1e:63:d7:77:56:88:b5:b8:b1:37:35:62:3e:20:3e:cc:cd:6e:
fc:7c:15:d6:3e:e8:26:c5:a9:5d:58:64:40:c0:29:ab:29:c4:
1e:41:79:9f:40:ff:99:46:46:73:75:cb:ea:d2:7c:f9:5a:78:
e0:e0:86:24:6d:a6:bc:41:ba:40:55:58:97:df:c3:83:a5:1a:
7e:8c:10:80:87:70:95:e9:9c:48:43:31:e9:34:02:70:51:98:
6a:00:5e:ad:66:97:b8:d1:f8:ac:de:9c:6d:a1:1e:b6:ea:d0:
29:9f:0a:35:0b:b5:7c:e7:52:17:65:e1:69:87:61:e4:93:f7:
a4:c5:20:3e:f3:3c:db:a0:c1:9f:85:3c:f2:63:7a:6f:73:9f:
32:c1:32:79:dc:35:4b:3d:2e:2a:6c:99:11:ac:c6:ef:8c:f0:
4e:de:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:03 2026 by rpki-client