Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: WVhOWoluR+OaDFaEkHucAZyMZvHIVXk+sDXWx2Noen8=
Subject key identifier: E7:E2:52:F3:C4:39:05:52:2A:9A:DB:5C:8B:C8:98:D3:58:92:AE:C1
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 019D2703C6C8D9151BF91BB3638FF56314FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 0D81
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: WBBtCejo8mnzjijEXhD2ciWAJzDjypkGfx2QqJJM804=)
2: Xo5fFGYUqhi1mHeQLpxNA7Txd2I.roa (hash: 7BEYJ6Z27LV8hRl7JxOpGRBg3lkYZDCNIK4576IwVX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c6:c8:d9:15:1b:f9:1b:b3:63:8f:f5:63:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=e7e252f3c43905522a9adb5c8bc898d35892aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:e0:8f:a3:2e:f8:7f:fe:20:01:c1:5b:10:
73:6a:0d:49:7d:1e:c5:f3:53:01:bf:b7:62:e1:d3:
6b:0f:38:a7:cd:24:93:d1:54:66:cb:1e:81:23:3f:
fa:6b:5f:92:2f:f5:fb:77:f0:e0:52:ce:c2:1f:06:
d0:f1:d1:1d:6f:51:95:30:74:0d:c9:38:66:cd:43:
95:2b:fc:94:db:f2:7b:ce:9c:05:27:e7:a7:f5:41:
63:fa:ce:6b:9e:cb:11:1c:a4:df:fc:46:dd:6e:d2:
9f:9f:83:85:29:aa:d0:50:d9:06:d3:83:50:0a:52:
ba:1d:8c:c4:ab:1b:f7:60:92:69:7d:f7:dd:1d:b2:
da:1e:5d:2e:b6:c1:0a:66:86:2a:25:1b:a0:ab:f8:
4d:8c:2d:70:d9:f9:b7:ea:57:da:6e:9f:51:a8:15:
cc:35:63:64:db:e6:19:5e:f9:a5:fb:02:1d:fd:63:
d1:4a:06:9c:8f:50:fc:5d:e0:f5:8f:17:72:44:3d:
27:e9:0e:b0:65:7a:9d:63:12:e2:23:bd:34:8f:da:
e1:de:ee:ad:23:5a:64:7b:1f:22:22:fe:13:e6:a8:
33:53:3f:d1:43:b3:3a:64:8b:76:f4:9c:55:c4:6d:
25:d0:f5:57:63:16:b8:a5:3f:02:f4:38:f7:e8:97:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:52:F3:C4:39:05:52:2A:9A:DB:5C:8B:C8:98:D3:58:92:AE:C1
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:9a:12:9e:4f:64:2e:c7:c5:c5:ae:1d:fb:ed:09:d5:ed:
28:4c:e2:1e:8e:2a:41:74:e1:14:3e:f4:9a:32:43:52:b4:66:
22:28:7c:96:34:60:6a:06:2a:b9:08:b9:fd:ea:04:ed:8b:2c:
95:fe:60:93:07:0a:4b:66:85:19:7d:4b:7b:95:06:af:82:99:
41:31:22:7a:83:fa:22:5d:42:87:f9:ae:86:2a:03:f6:c3:74:
88:ef:4d:02:92:9e:27:b4:ff:32:95:e8:00:f2:fe:ef:af:f2:
74:3f:1e:15:99:ef:51:d8:04:ca:52:b4:3b:e5:23:a9:c2:02:
e9:83:bc:19:02:f4:eb:f7:1a:ee:63:95:5b:f2:7b:07:ea:f4:
3b:0a:3b:70:c0:64:72:a0:7a:a2:b9:b2:69:bc:bb:a1:14:19:
ff:e6:68:f9:03:16:75:90:20:56:c1:13:d0:07:5d:b3:66:35:
6f:ee:61:ef:43:be:4d:49:e8:18:33:ca:8b:da:f6:89:97:84:
e6:ca:1a:5d:8f:ba:09:2e:35:0c:1c:2a:b2:eb:8c:82:d5:ae:
c5:6a:1b:a3:a4:b6:bb:d5:c0:42:a0:15:24:4f:79:56:63:54:
cb:32:23:40:a9:2e:7d:c3:6f:bc:5b:f4:dc:d8:e2:20:f9:16:
59:75:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:54 2026 by rpki-client