Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: X6EF1guank7zKQTodVoTDpAw/69u7QhATm6IE6/PGw4=
Subject key identifier: B3:E9:DE:83:CF:EA:82:14:DB:E2:B5:2E:14:1B:D2:8A:80:2D:A4:1B
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019D2A3B41E465CA9E7C5E1B6442C1823514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 08DA
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: sOJkHL1kwM7JnTPMweo5yaqRKDtEHGDF5+eCVnYm06E=)
2: WaED3SoIx0pc71pBr-UbfEWpe4A.roa (hash: fqPX1btBnDCtajfDjm6TTas+rikJHiohkz70SBZRDMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:41:e4:65:ca:9e:7c:5e:1b:64:42:c1:82:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=b3e9de83cfea8214dbe2b52e141bd28a802da41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:e3:75:b0:d5:86:7b:e6:b7:47:df:89:95:
36:a9:2c:be:cc:8d:c7:fd:0a:e6:fc:e6:b4:12:ee:
fb:06:e6:2a:f9:46:7f:24:9e:60:5e:3d:cb:a6:7d:
2a:3d:98:56:61:c8:e6:64:af:15:49:61:0f:5a:a2:
97:50:3c:35:71:85:0e:51:83:dd:30:27:a0:d8:95:
ab:e9:5e:be:84:90:67:9b:89:d3:01:04:1e:4c:1c:
78:4b:18:2f:fb:65:ed:fb:a4:8d:ee:70:ab:49:a5:
8e:a0:47:db:e8:f2:90:75:bd:0a:a6:41:ce:52:4f:
3d:3e:e4:d5:77:54:27:8d:e0:65:d9:6d:ae:1c:c8:
49:e8:da:0f:2f:9d:3b:20:b7:82:ec:78:5f:c8:05:
1f:d0:3f:67:c7:3c:f3:d5:84:74:e4:ac:98:a9:cf:
66:b4:82:89:7b:c4:94:44:a5:f4:50:ac:07:49:21:
44:22:ea:77:88:cb:6a:f6:2f:90:36:8c:e8:09:d0:
ef:d6:e7:65:f9:81:be:91:3b:50:c3:45:fb:d2:49:
74:60:5a:47:1f:01:20:56:3e:37:2a:b4:9e:c8:cf:
d1:9a:d5:0a:3e:79:1d:4c:95:1e:64:45:e5:c3:6c:
22:7b:d3:d4:2c:dd:c0:13:32:89:97:73:f0:b3:a0:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:DE:83:CF:EA:82:14:DB:E2:B5:2E:14:1B:D2:8A:80:2D:A4:1B
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:d8:7f:cb:05:f2:75:86:0a:d7:11:b4:90:70:86:02:13:
bf:a1:39:6b:37:17:45:10:fc:07:eb:cc:e9:c8:2d:e3:15:4f:
be:f2:86:e8:b9:06:10:d2:90:7f:f3:4a:58:41:c4:68:61:9a:
9d:85:f2:92:ff:8f:ce:90:ab:5b:ef:31:b1:c0:e0:ce:75:d4:
5c:61:f4:af:2f:5d:e0:c3:ac:5d:ef:b5:18:ed:43:b9:18:c4:
a4:54:a3:cb:23:66:62:78:3d:d5:3a:90:58:ca:c8:89:1a:1b:
72:af:03:b7:b0:7b:32:5d:b2:05:06:01:b6:d1:fe:f3:76:18:
77:68:8f:ca:2f:d6:d8:fa:80:fb:3a:c1:13:ec:2d:48:9f:7b:
c4:d8:f5:91:64:c8:9b:a8:e4:13:fe:41:ea:5c:9c:b9:30:24:
52:ea:60:4e:c2:2e:c4:92:ab:ce:59:a7:6b:7e:b8:00:99:e4:
33:74:1a:e2:50:b9:09:fb:95:0b:e2:1d:a3:71:76:6b:b4:81:
a9:48:b1:a0:6d:f8:aa:5f:1d:94:c7:42:cd:50:ba:0d:8e:15:
38:7b:39:c8:f9:1f:84:8c:a9:4e:03:08:b9:10:ae:f9:b2:e4:
4c:0c:e5:da:29:a6:61:35:e3:4b:da:14:5d:d6:ef:9e:25:83:
9d:c5:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:50 2026 by rpki-client