Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: gZAiLJcx0aDLTqDoR7qemStNui9tBg3ryg8dbGxjmrc=
Subject key identifier: A2:13:16:D3:0E:37:DA:C2:05:18:A1:DF:1C:42:C2:FE:25:E5:05:24
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 019D2816D65E1924F9BEAE0521E8D3C11422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: WQHXQ91HUde6gkIILN87bWkkcGXY0JQcG1FaRaMZ/vA=)
2: SulUeNH4yTw4wuibtQPCkvrNimE.roa (hash: /lThE7QiTo8Pw3w2T2Wjjtw5V8Pd4Y+WCHuTrGI19CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d6:5e:19:24:f9:be:ae:05:21:e8:d3:c1:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=a21316d30e37dac20518a1df1c42c2fe25e50524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:20:c3:44:8f:af:20:e7:ae:87:85:e6:2f:
ae:6e:a1:69:05:28:b5:32:f4:62:9f:19:0b:57:6c:
4f:8a:e9:85:68:4b:5f:1a:a1:b3:e8:5d:83:0f:9b:
d7:3f:3f:d7:12:fc:cc:33:18:72:e3:13:56:0b:6c:
18:b6:2a:48:46:2f:8c:bc:72:ec:f3:fc:71:30:d3:
12:f8:e6:01:6b:47:68:28:0f:1a:be:b5:30:8d:a9:
0b:8f:36:84:f6:51:e2:aa:d1:26:b2:23:7e:d9:0b:
d1:31:8e:0d:04:b3:12:d5:e4:65:6e:d9:93:15:15:
24:95:c8:59:cc:39:2b:73:95:7c:1e:eb:93:66:41:
aa:11:33:53:6c:db:32:8f:bd:29:4f:d0:50:86:4b:
9e:c2:48:d6:5d:4f:55:a9:7b:ce:d0:9d:cc:0b:14:
71:a8:62:9a:2e:50:d3:62:e4:c6:41:1e:ae:71:0f:
fd:0e:e9:de:b9:fa:5b:25:49:7e:1b:b5:d5:6c:c5:
4a:3a:f2:c0:ed:60:29:8f:03:fa:60:bd:f1:42:26:
0c:1b:aa:da:4d:21:1b:65:20:96:5f:36:4e:b5:95:
dc:4f:40:d6:d6:4c:41:64:aa:ad:1c:e8:b2:34:e7:
a5:49:f2:5c:86:42:70:cf:24:d7:39:59:c2:1d:dc:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:16:D3:0E:37:DA:C2:05:18:A1:DF:1C:42:C2:FE:25:E5:05:24
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:b1:42:5b:25:1d:71:f9:8d:6d:c3:21:51:02:95:5a:e3:
43:6e:38:c1:b8:52:95:e5:15:6f:5f:d3:b6:12:30:d5:5b:ce:
eb:58:d3:c6:5a:e1:b9:03:35:a6:ee:80:3b:c6:60:77:96:dc:
de:12:a0:e7:8b:e3:ef:81:f0:b1:90:72:dd:27:a7:1c:37:51:
f4:2d:2e:ad:7b:ce:84:d3:4e:5f:ab:d4:63:ad:91:5e:8f:cd:
0b:78:50:3c:52:75:90:87:06:38:59:a3:e0:c3:d0:5b:73:dc:
4d:fb:dc:9f:65:4c:38:01:29:b8:12:13:d6:0e:76:bc:89:af:
d1:18:7c:89:6b:ba:39:81:96:31:e9:0a:a1:e0:9e:3b:eb:eb:
bf:81:ab:b9:bd:26:e0:eb:4c:7c:61:83:ce:29:78:a7:f1:ef:
8c:a1:e8:08:00:d4:68:82:eb:37:7e:e6:41:5f:2c:49:f4:a5:
1a:e2:20:08:d0:1d:ac:e0:1b:94:9a:81:a0:29:71:0d:3c:6c:
e3:4e:9a:10:b5:07:5e:5a:e5:54:06:fd:8f:47:df:e8:63:aa:
9d:79:a8:ac:21:15:4f:42:f0:55:28:26:1f:0e:9b:af:bc:46:
f3:5a:6b:27:a3:a5:a6:0f:e8:c7:ef:28:7e:3e:c7:75:30:6e:
fa:bc:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:57 2026 by rpki-client