Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: agNICysLY4cqG7qaisuWrgFcwMBRMIuYHoUBtV5Xpnw=
Subject key identifier: 27:31:BB:9A:18:9F:00:B1:C1:F4:D4:F5:86:C3:28:F7:05:C5:6F:F9
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 019D2704B8B0E324267752741047699B7E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: rkSjBCn3RLt4FqHQTaj/L6ou/dN/SfsLLFshjnuz47s=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b8:b0:e3:24:26:77:52:74:10:47:69:9b:7e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=2731bb9a189f00b1c1f4d4f586c328f705c56ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:2e:e4:88:1f:47:4d:8e:91:40:60:ed:87:
90:74:af:be:59:c0:fc:b1:6f:0b:9c:bf:b6:21:55:
63:7f:10:1f:2a:bd:2b:e6:63:8d:92:76:92:63:6b:
db:25:91:35:d8:30:a3:db:8f:31:ab:93:e9:04:10:
1b:1d:93:a3:52:0a:64:55:a4:ca:2d:2f:ad:79:cf:
ba:04:ef:f4:31:42:1a:6c:49:7a:7e:9e:96:07:1b:
f3:e6:62:f4:5d:4d:9c:d7:f0:1b:28:e6:74:f1:05:
8f:ce:a8:79:ff:2f:e3:5f:ee:2d:0d:b5:7a:17:d7:
19:58:72:4e:17:f8:32:c7:7e:79:4a:7b:24:4e:09:
68:d2:66:36:f8:7b:87:7d:82:ee:be:7d:1f:7e:3d:
2e:c7:b4:b2:48:14:06:fe:d7:d0:48:6c:bd:b0:68:
10:45:2a:83:a5:92:ab:c3:4c:01:4a:94:4c:9f:ea:
da:60:c9:11:05:e0:39:ee:3b:33:0c:d7:07:ba:ac:
d6:fb:c7:16:dd:fc:4a:60:11:f4:6b:9d:ef:cf:d9:
0d:4a:e7:5d:67:77:d2:7b:b2:37:53:4e:97:e5:4d:
85:63:0f:ca:a7:1c:ce:82:2f:9d:60:b9:bf:f2:10:
87:52:bf:3b:ae:15:8a:4b:6c:69:39:31:87:27:13:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:BB:9A:18:9F:00:B1:C1:F4:D4:F5:86:C3:28:F7:05:C5:6F:F9
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:a3:e0:64:8b:8c:f2:39:41:20:78:91:87:c3:12:26:20:
a2:c4:15:6a:ae:03:5b:8a:02:bc:17:34:c1:37:5e:fe:f8:23:
12:54:cb:6a:4a:b5:94:76:c9:64:96:66:52:65:9c:e4:fa:48:
5d:af:66:c8:35:02:85:c5:a0:d8:2f:4c:3a:f5:e1:61:49:bf:
52:b1:3c:85:59:aa:82:15:a0:27:f7:7c:67:bb:e0:33:4f:8a:
5b:12:cb:f3:37:7b:74:5c:12:2a:db:3f:8d:72:d4:4a:f8:51:
e5:24:6f:5c:5c:93:90:ed:b8:6a:ee:95:2a:5e:b3:b1:18:29:
0c:0e:be:29:f4:8f:05:29:83:5a:b1:03:56:ca:c2:21:93:f5:
80:56:2a:b5:08:5f:5f:de:89:68:73:22:eb:46:0a:a7:40:7d:
ce:f6:fd:8f:a8:12:87:92:b8:6e:c2:f8:82:25:82:6a:f2:1e:
f5:b0:09:31:60:54:96:18:50:ba:a5:91:b5:49:23:42:f1:da:
f1:49:a0:fa:d6:58:2e:fd:15:78:f8:31:db:f6:41:89:5d:16:
41:5f:36:f9:75:cd:4b:a4:23:a1:3c:c2:8b:13:19:aa:47:4e:
0f:a4:b5:f0:f8:24:46:d2:42:a9:b2:03:1b:bf:e2:5b:c3:e1:
54:00:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:47 2026 by rpki-client