Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: 0+Hrzi69ajowUYuBlFbLngCqImX/bYkznNzsHDN0NBI=
Subject key identifier: A4:54:41:39:F2:3C:5C:3A:F3:DB:8D:73:9C:6C:6F:8B:29:DA:CC:11
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 019D2772B62CA6E21CF40881101AE474F9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 06E5
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: WFhsaxeoKpUqkqXhs17qK5E8R9LEg+qyVJdcQY8jZ6o=)
2: Hkxvl640wTVaCG4wxC1K28YsvUQ.roa (hash: ekA7LP7tcvUQDtaAhAw2EppmtQVZSvzCUQgbHmX4j7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b6:2c:a6:e2:1c:f4:08:81:10:1a:e4:74:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=a4544139f23c5c3af3db8d739c6c6f8b29dacc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:b3:2b:cc:2d:81:8a:d2:b5:55:88:33:49:
67:e4:dd:0f:3a:cc:5d:98:af:fb:b4:0c:ba:51:8d:
9f:18:42:09:a8:26:0b:20:29:66:6d:f7:b1:cf:51:
07:e6:63:79:90:4a:84:90:6b:df:17:95:ab:37:56:
a6:6d:bd:eb:72:d0:20:02:c5:b6:be:df:4f:54:6b:
fd:02:24:e6:6a:7d:88:a1:0b:19:b4:57:b1:4a:1f:
3e:10:39:b1:18:cb:6e:b0:1a:b1:d7:98:05:b3:5c:
d8:fc:db:56:e6:4a:7c:ac:f0:d2:e7:a8:d1:31:1d:
0e:51:99:9e:cb:8d:64:01:3c:ef:b5:ba:63:da:f1:
a4:a9:08:26:13:32:d1:45:db:6e:c7:66:66:d7:08:
91:b0:48:8d:ff:82:f4:77:a1:db:0a:43:95:7d:08:
38:d4:0f:04:31:1c:2e:0e:45:8f:8d:78:35:2c:61:
e3:f5:80:0d:90:7c:2b:22:f7:42:43:04:c4:65:9f:
d9:1b:0e:6d:35:1f:9b:43:15:9e:a3:40:1e:ac:64:
17:37:d1:a3:a7:1b:87:5e:9e:34:e7:6b:22:f4:be:
51:a4:ca:91:1b:2e:1d:6d:29:04:4f:69:02:56:ae:
55:33:6b:02:86:ea:a4:d6:2f:0e:7c:b4:25:f9:8e:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:41:39:F2:3C:5C:3A:F3:DB:8D:73:9C:6C:6F:8B:29:DA:CC:11
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:23:7e:0b:09:e6:1c:be:59:27:fc:78:08:d1:40:59:3a:b1:
92:61:20:9e:08:72:d3:37:d6:41:f9:d3:70:d7:11:fe:78:9b:
1c:fc:c0:8b:44:07:25:0e:03:21:bd:aa:2f:a3:43:2d:a4:a3:
7e:43:cb:cc:ed:00:52:5b:20:a6:2e:f7:1f:22:29:f3:e7:d9:
52:b5:3e:bd:49:56:f6:ed:c6:d2:51:12:e1:42:85:5e:d7:a2:
64:c3:e9:41:aa:28:a4:0b:0f:74:ab:6b:36:5b:68:17:37:f4:
74:90:c5:c9:ae:88:86:10:56:ba:23:cf:54:12:85:c5:cd:d8:
f5:ea:06:cb:fa:f3:ab:94:da:88:8d:8d:5c:85:56:10:fb:6b:
50:d2:43:e1:50:b8:3c:87:90:5f:e7:1c:44:0d:62:0a:50:1d:
65:40:77:b8:c3:c8:ed:9f:13:e5:20:6f:d8:4f:8a:b5:3c:f3:
fc:03:cb:13:e0:00:20:5b:73:a5:de:e6:1b:e9:65:5c:5f:a0:
f6:3a:37:0b:b3:21:09:5b:f2:a2:07:ea:e0:1a:67:7a:1d:3c:
09:c7:c3:a4:6b:be:5a:a4:97:4a:b9:7d:08:7a:c5:9d:9f:a6:
36:6a:67:9b:46:b7:be:03:93:16:54:96:09:d9:54:06:ea:37:
47:33:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:46 2026 by rpki-client