Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
File: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft (raw, json)
Hash identifier: +oGXGHt/fhKUXIjyNcFECx9TNmdKsoYktfkO7+gFVLM=
Subject key identifier: A2:14:CF:18:D4:67:62:EC:E6:20:AF:1C:B5:77:EF:9E:A5:7E:92:82
Authority key identifier: F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
Certificate issuer: /CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Certificate serial: 019D345186BA3281F4FDFC5ED38012C0C3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
Manifest number: 8A
Signing time: Sat 28 Mar 2026 12:00:51 +0000
Manifest this update: Sat 28 Mar 2026 12:00:51 +0000
Manifest next update: Sun 29 Mar 2026 12:00:51 +0000
Files and hashes: 1: 4hUo9slD_WYqWgnSusuLi5aYgKk.roa (hash: Xmxn5Zro/2pB9LNtV2YLqCKLpWDCyVWpsb7YiPBgbM0=)
2: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl (hash: 3XUZEjli2c6gvaFaHEhgC5B3uS5mJgZUpREtEQisgps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:86:ba:32:81:f4:fd:fc:5e:d3:80:12:c0:c3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Validity
Not Before: Mar 28 12:00:51 2026 GMT
Not After : Mar 29 12:00:51 2026 GMT
Subject: CN=a214cf18d46762ece620af1cb577ef9ea57e9282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:4d:45:a2:b1:40:33:23:7a:74:4f:f4:a4:
3b:ed:c1:e3:e3:99:63:ec:76:fe:e5:8c:2f:4d:40:
77:56:37:9e:2b:99:09:47:61:74:23:7d:94:85:dc:
82:60:da:d0:c1:31:e0:7a:25:24:8f:bd:d1:39:d1:
cd:ed:a5:02:ef:55:7f:ce:ab:7b:b0:5d:e2:3c:cf:
2c:ff:ed:0f:ce:7e:4b:e1:58:e7:d2:80:86:0a:e7:
90:e6:86:df:32:94:ac:96:27:d3:df:ac:69:6d:13:
db:24:9c:74:71:e6:33:2c:e3:d0:2b:e9:35:c4:f1:
3a:29:e5:f3:d1:41:f5:a8:c2:dc:1f:9b:c1:f3:3b:
ff:c0:75:6e:b8:4c:0e:6e:e7:53:6d:e7:5c:0a:63:
2b:b5:8b:d4:2b:df:70:9d:fe:06:6b:19:d2:d7:91:
10:52:59:26:c4:21:2f:c3:87:13:a0:e2:50:df:df:
34:eb:a5:21:a7:b3:d2:eb:d3:c6:1c:20:89:2c:a2:
87:5f:15:79:e1:cf:18:1d:85:65:10:7a:96:b4:35:
08:a1:e0:67:b4:f7:f1:b0:3b:9c:d0:e8:d2:0f:50:
e5:28:f5:33:5f:b7:1a:a9:5d:cc:1f:f3:2b:b2:ae:
89:2e:a5:3c:a9:8c:c9:d6:55:46:dc:c8:09:aa:01:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:CF:18:D4:67:62:EC:E6:20:AF:1C:B5:77:EF:9E:A5:7E:92:82
X509v3 Authority Key Identifier:
keyid:F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:99:ef:b3:13:3f:16:77:6d:82:f5:34:e9:35:62:96:6f:fb:
8f:bf:67:18:11:7c:82:5b:70:8a:c2:43:99:1f:b7:ff:2f:49:
bb:80:d9:f9:c2:ba:b0:1f:f1:5a:5f:c0:31:57:f6:11:70:57:
3b:a7:26:32:cb:8d:e8:81:de:65:e5:f7:db:48:7e:83:1d:62:
e8:af:81:ab:f1:1a:d9:02:cf:fa:98:5e:9b:5d:cc:a3:f9:d0:
58:ea:83:17:3a:ad:fa:84:e9:91:bb:5b:ac:cb:59:57:0f:ce:
de:42:8d:b1:ab:ca:1d:11:9c:f2:52:c7:ac:14:2c:7e:f4:8f:
89:63:5e:b4:2b:0c:c9:99:57:5c:f1:c5:6b:69:19:a4:94:94:
94:00:91:0e:ea:54:1c:ae:36:66:b8:23:15:08:5b:ec:d7:08:
0a:0e:86:d5:3f:1f:a0:82:10:2d:10:19:32:0e:bf:44:b4:a7:
a2:d4:52:a9:5b:35:6d:13:37:6b:06:0e:01:b3:0c:26:a1:ec:
38:0a:1e:36:d7:db:73:e8:7f:c1:3a:5f:58:52:50:fd:51:99:
e5:a1:d2:10:54:82:08:02:61:65:c3:9e:b7:57:e6:34:20:a5:
07:5f:a0:ba:be:3e:18:1a:e5:ef:88:33:32:d4:7e:cf:2a:40:
2c:b4:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:54:59 2026 by rpki-client