Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: +f6BMrZZS83VIE46uNUfKCL0fpHJE6M/QrlVSiPAI+4=
Subject key identifier: 5E:C1:1F:55:55:55:7A:AE:1C:09:DA:F5:49:69:03:DF:02:B1:A4:C8
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019D27E03D2E036DC18C30D4146EDF16D152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 1431
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: MwCLiWsSMsydlGle1yUXnUL7X/KeSXYQtxOKmgIM1Hw=)
2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3d:2e:03:6d:c1:8c:30:d4:14:6e:df:16:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=5ec11f5555557aae1c09daf5496903df02b1a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:de:93:84:7d:b7:27:91:4e:1b:ca:5d:0c:
2a:51:df:0c:54:c0:bb:5a:2f:06:52:71:32:a0:e4:
f9:1b:80:29:74:22:cc:34:27:03:eb:0c:70:7a:5c:
d5:61:7f:e3:c3:e5:66:58:16:96:ac:98:6a:94:4b:
c2:fa:1f:0b:46:74:61:1f:57:3c:1d:cf:40:23:18:
85:da:5d:62:a2:75:5e:71:66:48:a2:a7:b4:c5:15:
ce:f2:b8:80:74:e9:0d:9e:83:81:79:93:5e:0f:45:
3e:34:19:5a:82:c8:4e:2d:30:9f:e8:5b:d1:db:2f:
12:92:44:25:84:00:8b:7d:c7:03:8a:d2:81:cc:9c:
a8:4d:f8:a6:7c:f5:84:6b:fc:31:12:5a:e9:82:a2:
bd:24:9f:f8:52:4d:e3:14:3b:15:02:74:9c:5f:75:
c5:21:92:00:9a:75:20:c3:eb:37:3e:f4:5d:32:e9:
e7:9f:d3:7c:29:c3:ea:fe:07:27:9f:3a:33:87:10:
d9:5f:16:70:55:dd:ff:ca:df:90:30:10:96:8d:a8:
ab:84:aa:8e:66:15:54:c6:b4:a0:3b:7b:36:51:dd:
2c:9c:65:49:81:fe:ab:57:a0:c2:ee:df:a7:ee:8a:
f3:27:94:ae:65:de:ca:46:e7:90:27:d7:c8:08:a7:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:1F:55:55:55:7A:AE:1C:09:DA:F5:49:69:03:DF:02:B1:A4:C8
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:32:da:9d:18:9a:11:36:3b:c8:c8:bf:4b:ca:87:53:dd:
29:35:43:49:6e:45:98:c2:32:92:4e:a5:9c:0c:83:8c:fc:a3:
cb:c6:6e:c1:5c:a2:a8:f0:62:88:8f:7a:5c:2b:c5:0e:3a:36:
12:39:ac:b4:21:5c:18:79:9b:b6:ac:c8:2d:bf:88:9e:fb:23:
38:5e:86:bc:f8:e6:aa:d5:cf:68:59:80:54:0e:40:b4:90:a6:
d9:e9:73:8f:20:10:fc:53:91:2e:17:73:6a:89:c4:3e:47:a0:
ba:61:09:89:a9:90:54:4d:cf:97:8a:71:c0:d3:24:67:e3:56:
30:d3:bf:c6:74:db:b1:88:0d:e7:ee:03:08:a1:70:d4:81:09:
77:4b:49:5f:ac:14:b3:db:a6:8e:e0:f0:8f:86:7e:c3:2b:7f:
5e:fe:cb:b6:69:d1:45:26:c0:9f:33:5b:83:dd:f6:eb:2c:ed:
9d:13:3f:a0:3c:79:0a:0e:23:9e:26:c9:ef:02:1d:f6:f3:ff:
b1:91:9b:a4:e8:6c:5b:04:7c:94:56:86:4f:ca:4b:18:37:27:
82:b9:d8:61:c1:68:c4:ea:5c:a2:ce:4a:7a:54:99:a5:4f:b8:
03:9b:6f:d2:64:6b:85:3f:94:ee:75:91:39:92:54:4e:bd:3c:
eb:d8:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:27 2026 by rpki-client