Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: G/vsq6k38Rr6ZpunzaRAEBASD3eH7lBYYkGGNCgUqQ8=
Subject key identifier: 13:FD:50:EE:C9:BF:64:A4:91:F4:13:4F:EB:44:A1:5A:6A:DC:D6:7F
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019D2771D86231078C8B552D52EB82BF43BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 0986
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: vyFGSkCOBr71T5YXx7Uvobq6rigdXwcFCvRzAh7vqSQ=)
2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
3: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d8:62:31:07:8c:8b:55:2d:52:eb:82:bf:43:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=13fd50eec9bf64a491f4134feb44a15a6adcd67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:ab:63:4a:b2:ac:bc:10:ff:3e:06:59:9f:
e7:f6:24:b3:7a:0b:90:13:f7:39:8f:06:cf:8f:66:
59:d8:a7:76:84:7f:48:74:ee:b1:d7:19:da:25:ed:
84:9b:8d:0a:e4:29:d6:43:87:52:d7:fa:4a:ec:fa:
a3:0b:85:e6:5a:98:19:96:a9:34:3a:c0:66:be:99:
6b:2f:67:e2:bb:0f:8c:2d:6a:b9:11:cd:1b:63:1d:
e1:6a:b8:7f:b4:02:ac:15:ae:0c:ae:14:b0:d6:43:
b4:a4:3b:38:e9:de:01:f8:4e:38:55:f1:ab:83:b9:
ff:99:57:8f:32:8c:7e:6f:7f:27:6b:ca:f2:cd:d5:
45:9c:68:f1:bb:90:15:70:f0:da:57:06:d4:69:52:
3b:fb:37:96:bd:b1:2a:38:df:46:6c:ce:5e:ce:bb:
d7:1f:1c:13:9c:cf:fb:22:0e:d6:45:cb:53:f9:7c:
59:a6:b4:0d:41:b5:9b:7d:26:fd:a6:a4:fc:2a:de:
82:df:38:78:56:db:46:b1:bd:54:ee:61:bf:65:f2:
91:3a:41:a5:06:35:b1:97:3b:18:92:8e:a8:d9:d6:
df:3e:fa:60:14:2c:1e:20:b8:20:e9:ff:72:e0:9a:
14:dc:fa:64:a9:d8:a6:2f:a9:1e:54:47:da:81:ee:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:50:EE:C9:BF:64:A4:91:F4:13:4F:EB:44:A1:5A:6A:DC:D6:7F
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:70:8e:c6:ca:48:f4:2d:e4:e9:84:b0:d5:84:a3:00:64:
52:dc:ef:b6:03:9a:c5:ea:3a:51:6f:5e:0d:5b:a0:9e:65:b9:
06:d5:9d:fd:2a:b3:26:c6:ba:6b:07:03:6e:55:fc:2b:6f:11:
e5:2e:d3:93:69:76:5a:65:df:a6:89:fc:cf:d1:77:49:69:d6:
05:77:7c:c4:bf:7b:d7:0d:72:28:55:86:2f:f8:93:1c:f1:12:
23:ab:21:27:45:cd:ab:1c:fb:cb:25:10:b4:27:cd:92:b2:0a:
f0:67:eb:70:16:19:0f:2b:7b:0f:b4:59:f5:66:d7:fc:50:75:
6f:d2:87:16:e3:a8:4c:a2:f8:5d:5c:5b:54:75:bb:00:b3:43:
36:31:32:f3:5c:13:00:76:ef:93:a6:36:c5:f3:a4:d9:2b:a6:
12:4b:b5:98:14:5d:0a:b4:a5:a9:d5:16:bb:9f:eb:f9:20:14:
25:5b:09:0c:43:35:55:48:b6:54:93:e1:0f:ba:19:99:b1:8f:
44:9c:9e:97:1e:13:82:8c:33:e8:97:60:2b:db:83:40:b5:2b:
2d:0c:c5:44:bb:2b:5c:3d:06:a2:3e:bf:8e:08:cd:e7:de:e1:
8a:61:2b:d8:b7:a6:32:c0:48:69:f1:b4:5f:fa:a9:d7:cf:8c:
da:48:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:50 2026 by rpki-client