Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: MxHxe9F2o4vm8HVNnGb/N4GTG/fic1ejOym3yy24W7A=
Subject key identifier: B5:D5:23:BF:45:E7:5C:39:87:39:5D:B9:A0:3E:B3:23:B5:BB:83:7C
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 019D28164DA609EA272D60377F99524F7C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 0C31
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: IsfzurOE5reouDP2rJpsWpipB/RVuE9hvDtQF0BP3ok=)
2: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (hash: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4d:a6:09:ea:27:2d:60:37:7f:99:52:4f:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=b5d523bf45e75c3987395db9a03eb323b5bb837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:39:b7:d3:cf:bd:a1:1c:b8:0a:8a:2f:ed:
93:b1:19:f3:da:ae:3b:2c:70:36:7a:be:7f:a5:62:
05:a7:bf:36:3a:8f:57:ae:ce:e8:79:5c:94:fe:75:
af:35:60:8b:52:79:52:8e:59:8a:af:89:39:ab:2e:
6e:92:cf:87:97:be:4a:80:a8:db:e4:65:86:91:59:
7a:21:fe:b6:f1:2d:4e:ba:8c:16:de:fd:f1:5a:05:
8a:82:b8:02:44:31:37:be:1e:66:13:f1:23:4e:12:
45:4c:85:42:09:a2:76:0b:b7:89:0d:61:50:87:c6:
5c:c5:c9:e6:cd:a7:11:f4:a2:d4:45:60:c5:b8:f2:
57:0c:9d:df:9e:a9:4f:a3:83:fa:18:e7:8b:d8:37:
ad:68:90:c3:01:dd:3d:7a:ed:42:aa:a5:ab:82:1c:
83:ce:41:b4:9b:3c:a1:43:67:54:70:1f:da:a8:75:
12:cd:7d:de:9c:b5:79:22:39:31:ba:a8:5b:3a:c4:
26:6e:8d:00:48:88:8a:5f:e5:4f:d2:11:92:21:18:
39:a6:9e:13:5b:45:29:70:e2:94:cc:cb:4a:f3:4a:
b5:cb:d4:1a:75:26:80:48:95:a9:6a:5a:fb:37:1d:
26:1c:d2:a2:86:be:e4:6b:65:9e:23:a4:99:5a:4e:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:23:BF:45:E7:5C:39:87:39:5D:B9:A0:3E:B3:23:B5:BB:83:7C
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e8:bd:66:4a:3d:7f:28:bf:8e:13:01:d5:58:5c:13:d0:ff:
99:14:22:6e:1e:a0:83:69:25:16:85:90:6f:df:fc:e4:cb:d6:
32:0f:69:91:19:15:a8:da:52:42:2a:63:44:39:32:52:c3:7f:
79:71:fc:8f:83:58:6e:08:73:39:9a:5a:b8:08:dd:49:15:7a:
bd:54:47:7f:7f:5d:56:90:99:84:5e:7b:e9:82:61:09:32:49:
ea:ca:fb:f4:ab:a5:07:a2:7f:c9:a8:7d:7b:2a:a4:7c:5f:55:
a8:1b:b1:1a:a8:5e:fe:d9:8c:ff:8e:ef:44:88:ab:f0:8f:cc:
3c:be:db:86:f5:0c:79:df:8b:a7:b3:0b:d7:d8:e1:26:31:39:
44:1e:f1:3e:bc:f4:fb:77:1f:ce:82:87:9c:47:b4:f8:f7:44:
3e:9d:3e:6b:62:f5:90:ab:f1:5c:26:75:e3:b3:d4:2e:f4:c7:
b6:77:4d:6f:3e:f5:40:ac:05:5d:98:e9:80:a8:f2:b8:48:ac:
57:44:38:5c:18:61:15:99:00:a2:cd:be:fe:8b:85:d7:a4:cd:
ff:1f:a3:55:0d:32:a5:fe:15:76:a8:6d:8f:49:a6:06:78:d2:
4c:01:e1:2e:2e:5d:5c:fc:1b:6e:2e:13:66:e9:34:de:5c:d6:
01:87:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:25 2026 by rpki-client