Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: 1BT5A7keGF0XrA3Oe+Euv9Ml+3cGJ2S69HCQSPKIY5g=
Subject key identifier: 9F:F3:EB:72:4E:FB:B3:7B:26:B2:4A:E2:83:28:17:91:3F:AD:69:90
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019D25F1814AC9AA1DD1B0217B0553E6AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0E8C
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: aprbECpwZzMwCooxC97AP22Ccrc6rhJ0I1a7mfEnTQM=)
2: EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (hash: Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=)
3: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:81:4a:c9:aa:1d:d1:b0:21:7b:05:53:e6:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=9ff3eb724efbb37b26b24ae2832817913fad6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:c0:c4:4d:c7:cb:94:bf:e5:33:55:a7:94:
cd:d8:4b:50:1e:e9:8f:bb:8e:c5:cc:c3:7d:f1:5a:
27:2e:37:7c:96:b1:1d:28:ab:cd:90:fc:78:81:d6:
df:de:0a:04:af:e4:cc:a6:3b:dd:29:a0:6d:e4:17:
70:a0:80:1a:f2:ec:9f:5f:1c:c7:e1:4b:3f:55:bd:
5a:ba:03:0d:07:15:ef:33:eb:ca:dc:fb:02:1e:df:
10:57:b5:b7:bf:73:52:15:ec:f7:f5:cf:9a:4c:6f:
e0:46:32:7c:93:38:a2:0a:f5:91:60:5b:1a:84:2e:
69:05:5b:1a:4a:25:26:1b:5c:e6:50:9c:20:21:fc:
ad:fd:be:a1:95:b0:a2:65:8f:d2:70:45:ba:08:6e:
18:4a:59:f7:2d:57:a6:d1:69:29:11:de:1f:ad:d1:
04:a3:14:98:12:f0:e8:c1:f0:b4:e5:c4:a8:a1:44:
77:fc:2d:78:f7:3f:f1:9b:f1:87:fa:d4:7a:7e:6c:
f9:75:35:48:1b:ac:f6:5c:47:eb:33:86:e7:b1:13:
03:a9:dc:7b:80:8f:4f:36:68:91:ae:c6:e0:bd:a6:
e0:37:a2:a2:7a:73:2d:12:6d:ee:3d:97:2e:9f:c9:
ad:9b:fa:88:ab:ab:43:bf:22:70:93:46:cd:08:f1:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F3:EB:72:4E:FB:B3:7B:26:B2:4A:E2:83:28:17:91:3F:AD:69:90
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:3d:8c:62:8b:39:fa:72:28:98:a4:c1:ed:2e:17:13:58:
8a:bf:45:20:14:a9:39:4a:44:65:3b:1f:5d:ae:69:70:7b:e9:
e9:06:1d:ad:02:cc:e5:27:e1:72:3e:f9:6a:7f:40:92:be:82:
53:a8:b5:40:58:95:87:b3:58:a0:9c:08:68:fa:73:c0:c4:e8:
34:4a:35:ab:43:de:59:12:92:cd:6f:7c:8f:6a:ac:ed:b7:5c:
7c:74:cc:5b:bb:2c:68:24:d0:15:cb:82:44:54:95:00:c1:09:
8d:b6:46:f3:ee:94:62:84:aa:35:49:6b:9f:90:0d:2c:12:b1:
55:8e:8e:54:be:35:74:78:1e:33:54:58:aa:dc:ad:c4:aa:6d:
e9:9a:83:5b:26:e5:6e:5d:91:8c:7d:ea:02:91:f6:31:5e:05:
6f:c8:53:6b:21:5a:55:03:e4:2f:3a:53:ab:0f:aa:08:a3:77:
f0:d2:69:9d:02:02:1e:10:f9:b6:8f:4c:3f:16:ff:6f:8f:d5:
f7:8a:51:66:a4:02:f9:4d:1e:43:0c:39:29:ff:81:ab:70:c2:
8c:42:a6:1f:a9:3a:4f:c2:cc:f4:c0:46:47:cf:dc:cb:c0:ee:
10:7b:0f:84:04:17:a5:7c:95:f2:cd:18:43:da:c9:09:2a:cf:
d1:28:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:47 2026 by rpki-client