Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: 1U3kHbivowea8FmxAhtMgtUVc/ZCqz0HwhzqD7OIE1c=
Subject key identifier: 1A:71:36:41:76:1D:56:A1:18:E5:33:B3:FD:05:E6:0B:D4:A3:8A:7B
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019D284E2089798D56C4AA148C3B49F1918F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:41 +0000
Manifest this update: Thu 26 Mar 2026 04:01:41 +0000
Manifest next update: Fri 27 Mar 2026 04:01:41 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: mbkSQ3hzSD9ufAmzgA0YsBms7Icb9MZvRhix2SU3cNE=)
2: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (hash: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw=)
3: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (hash: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:20:89:79:8d:56:c4:aa:14:8c:3b:49:f1:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Mar 26 04:01:41 2026 GMT
Not After : Mar 27 04:01:41 2026 GMT
Subject: CN=1a713641761d56a118e533b3fd05e60bd4a38a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:c2:52:84:18:2d:a9:96:a7:ca:a0:3f:c1:
0a:7b:40:c7:96:45:77:ae:53:fd:55:bd:91:b6:ce:
bb:13:d5:94:c2:21:50:17:6a:f1:df:fe:6e:34:ba:
19:f0:bb:db:e5:eb:f0:29:12:6c:ac:91:42:68:bd:
e3:40:d3:cc:21:9c:1c:b0:2c:83:eb:b1:ca:83:f1:
81:31:84:ce:6b:2f:a6:52:97:bf:d9:0a:66:b0:8e:
8a:c1:9d:a0:2f:b4:53:f4:34:6e:a2:e6:36:68:99:
36:fb:d5:bb:2e:8b:6b:3c:01:d8:6c:0f:3b:b9:ce:
72:38:36:b4:a5:b6:de:ef:6b:dd:6e:8e:c6:55:90:
30:93:94:42:1f:2e:37:10:22:dc:00:d3:94:bc:40:
c5:bb:7c:21:da:0b:e8:5c:b8:6b:9a:08:84:14:bb:
f2:50:71:28:75:b4:27:e0:f5:89:8e:c4:92:be:74:
10:e4:60:0b:7c:7c:a7:c1:73:d4:1a:e4:62:8c:15:
13:77:12:c8:52:0d:a0:a1:09:9f:ef:ad:7e:06:72:
24:11:b6:cf:ea:f7:67:a4:03:14:70:05:5a:db:8c:
05:6e:a0:04:01:50:00:88:78:d6:33:b6:6d:8f:10:
db:c3:69:14:e2:90:83:4c:60:af:68:9d:cc:25:cb:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:36:41:76:1D:56:A1:18:E5:33:B3:FD:05:E6:0B:D4:A3:8A:7B
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:0a:3f:90:a6:80:c1:39:63:0a:5a:58:1f:e9:51:79:52:
f9:67:53:a4:65:3f:4c:d4:bc:37:35:2d:28:a3:bc:aa:8b:93:
e0:d1:b1:29:6f:5c:f4:ed:f3:e5:62:ea:33:53:b0:bc:fe:a2:
91:c7:9e:4f:2b:f8:c2:24:5a:f8:27:7b:c0:48:43:c6:dc:5e:
ab:b7:2c:6b:6f:ce:b4:8a:54:b5:09:99:04:95:ee:28:ab:78:
84:c3:38:69:4c:f6:30:ba:32:28:d3:b3:7b:ee:c1:f8:75:0c:
59:39:b9:f3:69:97:eb:0d:68:8e:ff:73:40:ae:1a:b7:e3:9f:
47:9b:7a:6f:0b:3a:36:dd:d5:31:46:4b:9e:f8:f5:09:a4:b3:
8d:ea:eb:0e:04:29:d2:2d:43:0f:31:3d:bb:75:0d:c7:68:4a:
da:1f:58:4d:89:ad:9b:60:e1:2c:4e:0f:26:58:e4:5c:be:a0:
8f:c1:4a:5f:9f:d8:ce:61:36:7c:de:af:1a:76:a1:3d:5c:f1:
07:09:09:1e:af:73:04:20:95:2e:97:46:25:07:74:2f:a6:12:
3f:8b:b7:a6:eb:cc:cf:7d:8c:c1:62:3b:50:79:6f:e7:5c:e1:
7d:59:65:1a:1b:24:53:14:78:f7:67:a1:c8:cd:22:30:5e:75:
55:bd:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:41 2026 by rpki-client