Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: a6+adhK4IJIZVvh8Bbrj1fQo2i7+yMxxjl9pWAP5IVI=
Subject key identifier: 63:39:5A:47:DB:A0:63:05:E2:54:EC:D1:0D:4F:B1:57:88:6C:76:DE
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 019D27A8D71E7FE56080DB1A6BD6A96D4297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 17D9
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: B6ClklfZ1qYu2FUezLuaQBVrNXRMmdvjY/6r3AlA71g=)
2: CQYbA6MTIgDA1QnhJw2tzaXFN4Q.roa (hash: 27bYI9yNdjBuvKUE1PPW14H77RbPrbsTAC7BJPd8dbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d7:1e:7f:e5:60:80:db:1a:6b:d6:a9:6d:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=63395a47dba06305e254ecd10d4fb157886c76de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:c4:1c:ae:42:63:d5:e8:99:e7:23:80:27:
b8:f5:40:34:96:23:1e:83:53:ce:ea:36:47:1d:0e:
c3:d8:83:f4:28:71:16:fd:84:25:e2:1d:40:be:92:
79:93:6a:8c:a8:52:63:f5:05:bd:79:34:ec:66:23:
51:11:d5:a7:09:a8:90:da:b3:a5:1b:29:3e:67:a9:
b8:d1:71:5b:0f:43:72:88:1c:4a:cd:d4:1a:bd:eb:
86:94:e9:da:b1:0f:d3:0f:cf:6f:18:45:f7:58:eb:
99:f3:45:d7:1f:f2:da:23:c0:de:50:44:f1:00:ec:
9d:22:4a:3f:e1:d0:71:ba:41:15:ae:00:0a:30:10:
f3:de:28:72:66:a3:15:e6:cf:45:20:37:e4:b3:bc:
0c:6a:28:85:08:7d:03:b3:ad:96:33:b3:08:b5:60:
d6:27:93:b3:6a:b7:66:39:26:88:97:ea:92:8f:c0:
05:95:78:43:d2:ec:f4:ca:95:da:1c:18:a4:b6:8f:
22:15:79:be:aa:93:de:51:f5:b8:87:b3:4a:ff:b6:
88:9d:3c:1a:d2:06:72:d9:6f:ce:6e:bb:1f:60:ed:
88:e2:e5:18:cd:0c:0d:b0:48:e2:98:55:36:15:74:
7a:aa:44:9e:e9:c6:f6:f9:42:4a:80:e0:84:e0:72:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:5A:47:DB:A0:63:05:E2:54:EC:D1:0D:4F:B1:57:88:6C:76:DE
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:fc:81:f5:48:b5:d8:60:1d:33:b5:c1:08:3b:87:bc:41:
e9:96:8c:aa:af:e1:63:7e:7d:71:b4:73:3b:c7:27:01:13:80:
75:46:6d:73:24:7b:0a:15:97:48:ec:28:a9:6c:a4:8a:a6:41:
1d:32:09:67:fe:05:7a:62:31:9f:05:16:cd:91:22:7c:bb:ab:
2e:68:b6:66:0a:b5:0e:fb:fa:06:23:21:2b:c8:1c:6c:7c:7f:
ba:30:1c:70:a5:cc:32:5b:0d:d5:92:37:6e:78:b9:65:27:25:
18:b2:11:0c:f0:d0:93:0d:57:9c:68:9d:fb:dc:db:44:8a:2c:
2d:4e:51:10:e8:f6:8e:8d:d3:85:f9:f1:40:24:d8:f1:de:72:
87:58:dc:d8:ef:4a:b8:72:cc:0e:a2:2d:37:41:74:e6:3c:0e:
19:9e:46:76:9c:0b:8b:49:6c:da:76:30:ed:8f:88:b9:0d:ba:
e5:b9:61:8e:43:41:0f:7f:fc:01:79:51:b5:2b:a6:65:30:0c:
07:01:f0:9e:7a:22:b6:73:50:c0:6a:c0:cc:64:53:b9:9e:40:
09:f3:7f:ea:56:79:11:37:29:00:ff:38:33:b9:06:4d:35:82:
06:ba:f3:06:c2:0c:0a:7f:7c:21:41:36:13:1e:cb:10:30:86:
7f:e7:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:13 2026 by rpki-client