Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: bUMgaDP+TMjbjAfTlDHvouQjJYI5aE0MzGyY1kqCQJU=
Subject key identifier: E0:A7:95:90:EB:51:2F:C4:34:AB:39:EE:7A:B9:48:5E:BC:EA:6A:26
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 019D26280CEB672C0C2746727BE6CCFF3994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 066F
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: yEz0RErCDRMjtLtlAa0sD8fyfpXeD4VSlYKe1egenHk=)
2: a4XNDj5KBUiCw6Y9PE9_OHh03CE.asa (hash: 6Ea74joQApWeaiFS62DqckBP5FeCv4s4l+v1lODuQ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0c:eb:67:2c:0c:27:46:72:7b:e6:cc:ff:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=e0a79590eb512fc434ab39ee7ab9485ebcea6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:eb:2f:5d:b5:da:a0:65:c6:f1:87:b1:af:
e4:25:1d:e0:03:3c:c6:57:3c:cf:84:da:5e:9d:37:
24:60:99:93:1c:63:62:23:42:7d:e8:1a:10:69:30:
37:7b:38:94:0c:44:2a:11:88:b0:9f:b9:5d:84:0e:
0c:7a:f0:2b:7a:f9:8a:a2:03:9e:e2:e2:82:69:d2:
ee:f1:d2:c8:a8:18:68:0c:64:a3:a1:ce:b3:28:9d:
81:db:72:e5:54:ea:0d:f6:ac:a7:0d:ce:58:03:c2:
5f:37:ef:d9:c3:b3:e4:98:df:d4:66:ab:dc:fe:b6:
f2:f7:fd:79:7a:ad:e9:8b:b3:8e:ac:48:46:13:90:
fb:d8:c9:6e:1a:0c:71:7e:f5:6c:c8:a6:f7:54:69:
d4:be:40:73:e0:8f:25:3c:89:d4:c5:09:50:47:83:
05:d0:53:b4:cf:fe:17:89:2d:be:1f:8d:94:80:bf:
85:ab:a4:43:ec:22:c1:82:16:a5:55:66:41:b7:3a:
9d:fb:39:66:56:75:1f:5d:c6:25:c5:e6:e6:0a:b7:
53:3f:80:46:73:5a:13:14:eb:11:35:f4:5e:2b:c3:
3f:7b:1c:0d:22:46:1d:5b:5b:c1:7f:09:34:f6:70:
c5:38:b2:1d:5a:63:f4:3b:cc:a6:ad:50:a4:51:50:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:95:90:EB:51:2F:C4:34:AB:39:EE:7A:B9:48:5E:BC:EA:6A:26
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e8:c7:68:9b:55:3b:74:9a:48:3e:f6:73:b7:48:de:f9:5d:
84:8a:24:eb:b6:e5:51:99:02:33:09:d4:66:c4:e9:96:21:63:
b7:cc:3f:2c:15:46:ee:59:61:b3:7d:c4:b8:57:ff:e9:16:67:
47:80:d8:b0:d7:aa:56:9a:5e:15:50:37:36:a4:35:d5:69:dd:
34:29:26:7b:df:09:6f:c8:84:3c:fb:6f:68:d5:21:28:05:1b:
32:f9:4e:13:52:35:c0:a0:c6:af:20:6d:75:aa:0c:df:48:f9:
4d:04:81:d6:cc:ff:1d:ba:51:0e:2e:80:0c:bd:55:ef:af:90:
d1:5a:4a:a0:6d:d3:b2:cf:65:4e:68:99:28:b7:9a:f5:59:8f:
57:83:c1:db:db:58:3b:3c:93:ef:5a:b5:97:d3:ae:94:03:f6:
46:ab:a8:ac:9d:95:d1:24:1a:f2:0e:5a:f0:4e:c2:c8:1a:26:
c8:a2:36:72:86:41:71:50:26:20:4c:86:53:9f:2c:cc:15:2a:
ba:2f:d5:7e:36:49:2a:7a:cb:91:f6:dc:1c:d3:80:70:f2:dc:
cb:57:41:e6:46:4f:c3:4f:d8:ca:ee:02:fa:80:23:b5:31:bb:
d6:36:19:6c:14:26:d0:a7:39:23:85:cb:57:b3:96:90:e4:9f:
fc:7e:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:48 2026 by rpki-client