Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: cGPeheeza1PIbTlm7aDYdCe779cKL1saBRdVqdc52j0=
Subject key identifier: 30:F2:A2:E8:F3:D7:2F:A9:04:DB:AC:17:06:D5:B7:AA:C9:70:D6:1F
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 019D288485AE52020CF4891F3A208EBE5E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 13C4
Signing time: Thu 26 Mar 2026 05:01:06 +0000
Manifest this update: Thu 26 Mar 2026 05:01:06 +0000
Manifest next update: Fri 27 Mar 2026 05:01:06 +0000
Files and hashes: 1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: teANuua7ypipLCxQMpibAPUd4NpZl62Q84z1Xyp0V90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:85:ae:52:02:0c:f4:89:1f:3a:20:8e:be:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Mar 26 05:01:06 2026 GMT
Not After : Mar 27 05:01:06 2026 GMT
Subject: CN=30f2a2e8f3d72fa904dbac1706d5b7aac970d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:5d:f0:c3:b2:2e:9d:28:1f:6e:d8:2f:52:
54:8c:2e:ba:91:cf:65:62:55:2c:9c:1f:d8:6c:fc:
be:3a:ff:a2:d4:b7:bf:aa:54:7a:fa:ca:15:f2:bc:
87:84:fd:5f:d7:db:9d:02:a9:dd:80:0e:4a:db:61:
18:f7:34:2d:a0:05:b6:89:46:d7:51:ac:ce:f2:81:
be:20:4e:d9:5b:4c:1d:77:b2:79:3b:26:7f:2e:d7:
69:79:41:5c:25:92:61:a3:3f:85:63:68:49:cc:75:
fb:17:47:e3:10:71:99:c1:02:f7:c2:6c:91:85:16:
c1:8b:0f:d4:e9:99:5f:38:17:70:28:04:7e:7a:a5:
40:96:45:5c:15:74:d1:8c:12:ea:2c:78:75:3c:61:
fe:d3:e3:3c:50:42:2e:8e:18:6f:6d:44:ee:3f:19:
1a:a3:f7:50:16:fa:e2:d3:33:2a:f4:9b:a1:ec:52:
45:72:f6:ae:4f:fb:1d:db:ae:51:09:c0:53:be:5e:
b3:b1:5b:20:a1:76:3c:d6:ac:df:2f:2f:86:a5:75:
e8:af:42:4d:9a:42:73:8a:3b:f4:45:83:b3:04:8a:
70:a1:29:89:67:7d:17:33:c5:7e:0c:4a:0b:b6:50:
26:94:12:6b:3f:03:08:b1:25:73:88:af:b0:14:5b:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:A2:E8:F3:D7:2F:A9:04:DB:AC:17:06:D5:B7:AA:C9:70:D6:1F
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:17:3f:57:f8:73:af:97:b0:9a:e7:79:70:68:53:35:a4:
ae:48:c9:30:68:60:34:05:9a:a3:b9:b8:27:62:97:e3:c5:5c:
bb:f7:29:e9:bf:70:e7:c7:79:66:d8:0e:85:53:dc:7b:c3:29:
ee:35:a4:4e:90:30:39:04:2e:52:13:79:ef:3d:7c:89:94:31:
bc:8a:89:0c:c4:91:66:88:86:64:c8:57:12:dd:98:ab:19:16:
ec:95:60:25:c5:5a:e2:de:b6:98:79:79:c3:3a:8b:3b:1f:4f:
a0:0e:7c:09:c5:bf:63:2b:e8:a0:4c:62:40:14:b7:e2:70:22:
8e:aa:2b:6d:3e:46:04:03:68:83:5d:c1:02:45:7a:ed:23:23:
08:da:56:8b:21:08:2a:f7:a1:bb:29:d1:73:ab:98:43:10:bd:
c2:ed:bd:f3:39:0e:be:f6:a6:82:83:01:80:66:9c:59:f8:df:
55:6a:98:e0:8d:90:ed:d7:d5:fb:ce:0b:72:8d:6f:5d:5a:84:
a5:01:27:f8:a2:1a:85:79:58:76:f6:40:4b:e5:d7:be:08:7d:
cb:eb:d8:79:f8:ba:fc:9a:9d:5d:ee:91:e9:39:cc:70:40:cb:
1d:44:06:c0:d5:2e:1e:9e:ef:07:82:52:ba:09:c7:27:af:3d:
7f:3c:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:21 2026 by rpki-client