Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: Pt0i5hlsTbmmKKMHvPDVn4VH1ukXhcdZBc63yf8zuMU=
Subject key identifier: ED:22:F1:E6:46:CB:28:CD:12:06:7D:B9:3A:F8:5A:F1:20:83:EE:68
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 019D265FB907DA38CB35521DF338E978809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 15D1
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: TBHOd+4RQsNdVEdBdJN5Jo+dZQQ1bNFdbz7EZJpniWU=)
2: w2Ta-rPPbmIQNKq-ipxVWX-8dg4.roa (hash: gcIiCCsS3PcYcJA4aDFua+5XE66yaXHV16D0VY59VUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b9:07:da:38:cb:35:52:1d:f3:38:e9:78:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=ed22f1e646cb28cd12067db93af85af12083ee68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:94:40:c8:78:5f:ab:49:1f:66:5e:d6:72:
79:89:1e:26:40:87:54:00:2b:62:e5:92:bd:97:ef:
c9:29:70:38:6b:9f:2b:9f:5a:08:58:b6:b7:92:0b:
bd:2e:ab:ab:48:d0:12:ab:3f:d2:a1:4d:b4:2c:64:
fa:fe:1b:e4:4b:1d:3a:f5:73:da:84:d2:2b:45:a0:
dd:b9:75:23:01:93:1c:b7:e7:48:43:de:66:eb:82:
70:75:08:22:00:23:73:ab:2a:9c:52:40:5b:e0:06:
91:11:11:12:db:7c:af:c9:79:e7:1c:6b:87:38:42:
db:97:7b:ce:77:70:f1:7c:90:c4:fb:d5:62:13:61:
41:79:47:97:a0:08:e0:66:51:16:3c:da:c3:eb:e3:
b5:42:8a:7e:7a:93:28:ac:62:bd:41:a1:56:5e:ad:
09:4f:11:e5:08:d8:33:00:31:93:51:8e:94:2e:dd:
72:bd:91:8e:37:63:07:86:54:d3:96:c3:4b:9e:56:
6b:d6:42:7f:6b:aa:75:4b:67:d4:8d:4a:b6:fd:db:
8e:24:13:ed:bc:b6:7f:58:c3:55:e8:2f:8c:ac:73:
99:2e:44:45:6e:02:13:7a:25:a1:4f:ec:41:f0:50:
5a:a3:72:fc:b8:c5:bf:85:20:a7:12:46:ec:05:04:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:F1:E6:46:CB:28:CD:12:06:7D:B9:3A:F8:5A:F1:20:83:EE:68
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:61:bd:68:83:a7:ee:29:d4:05:79:a5:e3:fd:00:d5:b3:
a1:41:75:be:90:56:61:fe:15:84:d3:b1:32:23:ea:99:36:37:
d3:d9:98:a8:75:4e:94:fe:55:5d:e8:e5:ee:aa:e7:cc:7b:de:
70:48:a8:df:a5:c6:17:fb:e5:0f:6d:c4:a0:da:9b:bf:c5:12:
07:76:44:13:f9:f7:5f:bb:20:e7:85:d4:0f:f1:45:97:1b:88:
92:08:59:d4:d0:57:80:19:d5:76:46:18:ec:23:9d:2a:75:eb:
00:f9:fc:30:a5:47:82:28:d9:e9:5a:85:3a:4d:47:56:28:8f:
c9:34:3b:4b:2b:c7:fa:d8:08:a1:0f:a1:b2:16:69:77:f4:9b:
e7:18:91:46:1a:62:df:0b:c4:8e:c3:b7:12:5c:6c:77:07:47:
a6:63:1b:a2:88:44:2b:99:7e:07:a9:84:ac:63:c5:6f:6f:09:
ff:69:ad:02:04:a4:1d:98:d5:f5:d3:e1:cf:58:99:7c:c4:b2:
75:aa:43:d0:f4:8a:7d:d0:a7:95:fe:d3:6f:b5:6b:1f:17:f6:
6e:22:d7:ee:52:04:ec:ea:c5:a8:11:6f:85:23:47:4f:7e:8a:
30:8d:c8:d3:64:e7:a2:c6:9f:0c:f9:00:0f:01:51:bf:97:93:
cf:3e:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:00 2026 by rpki-client