Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: L2bGqOCY/R5vT3e2OYg8IW1L+OhGe6306UdQRiDatpo=
Subject key identifier: FC:F2:CD:44:E0:B8:D9:59:EE:02:17:0D:F7:0F:B5:37:52:12:70:82
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 019D26962B6A6EB599531CC342B7419ACB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 1478
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: 8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa (hash: saYZDeX4Ot6QjGMv9hDM9mIHKuSoX0l+GffuAagEH4k=)
2: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: fQZsoqenSlXe+ht8e81Tc0UH1SnMy/tbFzlrUkpSOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2b:6a:6e:b5:99:53:1c:c3:42:b7:41:9a:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=fcf2cd44e0b8d959ee02170df70fb53752127082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:ca:c3:00:e9:5d:b9:fc:3a:83:4f:38:b7:
08:06:7a:6e:e9:be:14:e6:11:bd:6b:bc:17:c5:e0:
db:11:61:c7:ee:3f:61:8a:35:cd:c6:36:42:6d:3b:
37:0c:29:a7:06:e7:db:59:8d:83:0e:8c:b8:25:2c:
42:93:8c:29:06:5a:92:e3:d4:e9:ed:8f:29:d4:24:
76:1d:e8:da:b5:67:3c:25:be:a7:f8:0c:5b:fa:1c:
e7:91:48:7e:64:0a:bd:c4:5b:e9:04:4c:a8:5d:ae:
71:af:30:da:0f:47:99:cc:c4:52:8c:30:5e:7e:3d:
c0:75:1e:62:79:ec:1d:fe:80:15:05:01:25:2a:9a:
cf:59:61:aa:78:ea:61:45:69:41:ab:75:39:bd:37:
f0:67:85:70:5f:01:d3:d6:2a:a8:68:c8:ad:6b:bd:
b8:0a:46:88:29:dc:b5:95:72:25:13:e2:df:eb:15:
e5:d0:40:22:33:09:50:a1:c5:a4:5e:1f:74:6e:aa:
46:4d:73:f2:d4:a4:9a:10:db:a6:00:b9:5e:e2:95:
0e:c5:aa:8a:e9:a9:83:3f:d5:de:2d:3d:ec:0d:5d:
cd:0d:3b:6d:20:f7:cc:69:45:f1:f7:4e:24:bf:4f:
04:25:b2:7b:50:ad:ab:fc:9b:02:17:e9:f5:ff:9c:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:CD:44:E0:B8:D9:59:EE:02:17:0D:F7:0F:B5:37:52:12:70:82
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a7:ce:01:e5:27:ac:15:fa:14:b1:29:46:7d:29:c9:ea:4b:
8b:b6:a1:d2:ca:0a:ec:0b:11:4f:92:e2:de:61:5b:62:ad:db:
b2:67:30:c0:fb:c4:ed:db:48:d4:4b:85:04:05:e3:85:c4:84:
d9:b2:4e:d6:55:3b:f7:c7:8b:26:fe:ea:72:13:54:35:35:b8:
29:cf:61:13:1f:82:d0:76:9d:7c:82:ea:2b:82:72:bc:44:53:
7d:cd:ad:4c:48:56:97:05:5b:16:64:f7:99:43:14:f5:41:27:
9c:5f:28:7b:b1:55:94:75:20:49:b4:2b:a0:b1:20:c3:ad:fd:
e0:6c:40:f7:da:a0:4f:82:fb:fe:8c:fa:9c:95:be:5c:16:76:
d1:37:ba:48:64:a4:3e:e2:09:8d:4a:8f:97:3d:96:b1:e0:35:
d7:c9:f3:49:3d:80:2e:ea:f7:56:47:57:5d:ea:ad:13:fc:fc:
d3:6d:95:ad:7a:a7:cf:3c:17:aa:a2:af:54:b6:3c:c5:3a:5c:
b4:27:d3:77:d2:c6:d4:a3:b3:0d:c7:cf:69:e9:dd:c3:e9:84:
1c:62:6b:1f:74:00:e6:55:97:4d:b1:43:7d:b6:bc:8a:7f:4d:
d9:73:44:52:98:4c:56:9f:8b:3a:15:f0:29:64:a0:4a:4a:13:
98:25:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:44 2026 by rpki-client