Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: IhsVZXRiuTkAqSj8A8dwnED0zjJTWvbo+8OvE6EPnF8=
Subject key identifier: 52:0D:AB:03:A6:66:19:D1:E9:DE:F9:25:A9:6E:F0:50:58:1C:26:63
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 019D27DFFD5AD2F0005D64FAAB8215186A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 1762
Signing time: Thu 26 Mar 2026 02:01:23 +0000
Manifest this update: Thu 26 Mar 2026 02:01:23 +0000
Manifest next update: Fri 27 Mar 2026 02:01:23 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: cY25XrRIT4SrPFqUfEjErZ8J6p4/pdaKfMd6m1tjgSM=)
2: HSSEA9Em0ptRddp4bZHLYz47Pwc.roa (hash: tCTQJ4a04Vb+F29LJgpWJiZhzVqLIw989oQi9ddJVUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fd:5a:d2:f0:00:5d:64:fa:ab:82:15:18:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Mar 26 02:01:23 2026 GMT
Not After : Mar 27 02:01:23 2026 GMT
Subject: CN=520dab03a66619d1e9def925a96ef050581c2663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:ca:6a:52:4e:ae:1f:93:46:76:a0:46:b1:
2c:87:0c:44:86:67:f6:9a:c5:45:2d:f0:ab:06:26:
10:35:c6:a1:f5:0f:b2:ca:25:82:f3:ee:1f:ab:a2:
8e:00:ad:6e:52:51:87:2d:25:3d:92:8b:2e:09:9e:
3f:37:9d:95:13:55:74:c0:c9:de:05:be:29:2b:90:
04:1a:da:f6:62:2b:a9:5b:e2:51:c1:4b:3b:58:cd:
83:e3:22:7a:b0:c6:24:c8:1c:df:95:10:4a:87:5e:
1c:2f:94:60:4d:19:15:83:a2:df:d2:d7:87:83:12:
25:df:eb:c9:74:ec:94:eb:2d:5a:5a:d6:99:bc:6b:
8a:b0:fa:d3:2f:70:ce:20:40:08:a7:76:69:87:b1:
b8:2f:4e:05:f3:68:4e:7b:39:0f:7b:86:7b:4e:5b:
08:04:5c:b7:e5:a0:ce:2a:23:6a:3a:75:cc:57:4d:
38:86:4f:fd:56:d2:f1:c5:16:7f:5d:f8:a3:93:83:
b3:9c:4b:0c:31:e5:21:ec:78:61:95:16:00:fe:22:
3d:95:9c:4e:6b:87:e3:12:48:bf:09:63:51:2b:ad:
48:e4:59:e6:14:31:50:bf:fb:39:62:91:2a:59:5b:
3c:a6:19:a4:1b:e4:fd:b4:31:3c:2e:5a:94:f1:11:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:AB:03:A6:66:19:D1:E9:DE:F9:25:A9:6E:F0:50:58:1C:26:63
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a6:db:8c:f6:64:a4:3f:2d:7d:0b:aa:04:e7:b9:39:98:27:
c5:f0:a2:bd:f9:8a:7b:7c:aa:8b:fe:15:c0:ee:ae:7b:cf:e3:
9d:24:95:55:ef:01:58:0b:66:cf:0e:9b:b2:18:6b:a6:58:a1:
34:0a:7d:63:8c:a3:ac:93:02:80:72:16:1b:3c:0c:55:36:cb:
0d:0a:27:11:48:b8:d6:18:93:42:1c:df:7e:65:1e:5e:f2:84:
0a:d4:4c:df:63:b0:0f:45:a6:61:f3:d6:6f:76:1f:06:84:6b:
25:de:62:c1:eb:21:6a:94:9e:a1:31:df:12:13:f5:1c:47:4a:
d2:f9:8a:ca:9d:38:d5:c6:a4:73:b3:ac:2f:a8:21:5f:bc:04:
de:83:73:e3:df:2d:9c:54:3b:c5:22:02:b6:49:e0:52:f0:a9:
f0:f3:f5:af:44:dd:79:c6:d9:8b:3e:26:db:bb:f7:53:73:73:
61:a9:1f:4e:b8:6d:77:08:f6:9f:d4:1c:bd:c3:33:6e:65:a4:
dd:01:22:76:05:8e:e5:b1:8e:46:92:ea:6d:fd:62:99:cc:38:
18:9d:fc:5e:33:cf:15:27:93:a2:b4:16:dd:7e:b2:09:35:c5:
78:02:52:c5:31:cb:bb:2b:72:29:7d:65:7d:e6:b1:3e:fa:ff:
42:a4:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:53 2026 by rpki-client