Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: 3KZXrNVtQZ7VEtf7rbxclBsJ1NjDI3hoiaey/mDFrkQ=
Subject key identifier: 2A:C1:78:E1:F7:CF:FA:FC:E1:0A:A2:50:AF:9C:A1:0E:3C:69:C2:B7
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 019D27A89C59619B2F5675E26AA6B0C4C745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=)
2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: YR40AXhMmBcG1zSpwh7EUQt9iEAjEwxZ5N3LcmJt1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9c:59:61:9b:2f:56:75:e2:6a:a6:b0:c4:c7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=2ac178e1f7cffafce10aa250af9ca10e3c69c2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:b7:f0:96:00:14:58:29:7c:e4:e0:63:e8:
af:ed:06:39:6f:2f:c6:ce:62:a6:56:8e:d2:3a:94:
0f:57:88:0c:cb:bf:79:4d:b3:0e:5b:88:b1:a1:e1:
68:df:5a:7b:5e:32:f4:4f:80:7d:11:50:a1:e4:9c:
11:12:cf:54:02:8a:b6:20:18:69:63:5c:78:cc:0d:
80:04:a7:21:f9:45:c1:fd:14:a9:a3:07:1b:9c:1d:
27:d9:41:bb:06:e2:21:05:8a:d8:b7:3e:14:19:42:
9e:69:15:fd:08:05:0e:81:e9:2d:8e:10:1d:96:27:
7a:fd:ff:43:40:00:6d:41:ed:93:d7:9c:56:43:af:
55:f9:cd:15:20:64:20:1d:84:df:c4:c8:35:b0:f7:
bd:75:93:36:18:3c:b2:42:a3:5b:3f:d3:2d:95:2a:
e7:f1:82:e4:39:ac:60:b0:4e:d7:20:c5:2a:8e:4c:
8f:ae:74:a1:88:04:7e:61:c6:f4:a6:7e:66:60:2d:
4a:4a:2a:59:19:c0:38:50:06:0d:91:92:87:a6:43:
c7:0b:28:5b:37:36:18:b8:fe:b0:13:c2:af:28:51:
5e:a0:2e:8a:76:2b:82:cf:9b:f9:37:81:df:f4:e4:
ef:b2:00:9e:14:ac:14:d7:8c:11:4c:dc:c3:77:a2:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:78:E1:F7:CF:FA:FC:E1:0A:A2:50:AF:9C:A1:0E:3C:69:C2:B7
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:9f:1b:97:d7:c1:2d:e9:e1:4f:13:ba:d6:bf:67:f3:53:
29:68:0a:af:59:94:1f:5f:b2:75:46:0d:26:00:f7:13:a6:59:
1b:96:a4:2b:ff:98:58:03:4b:42:3e:8b:ab:14:a7:bd:f7:31:
69:31:69:b1:dc:cc:fa:2b:1e:56:76:58:aa:6e:fc:42:1f:53:
fd:6c:e6:1a:08:db:76:37:73:c6:5b:5a:f6:e6:93:61:7a:28:
6b:41:ab:4d:c9:75:a1:d5:22:eb:a1:76:a8:03:20:62:8c:da:
6e:69:7e:7a:5c:1d:b4:10:84:7c:15:81:ec:fb:8b:b3:5b:e4:
d8:e8:3a:a4:96:68:76:ca:39:8e:2e:19:5d:fc:26:b4:5b:44:
65:ae:f4:14:80:07:63:08:a5:9a:b0:ee:f4:6d:74:39:3b:94:
5d:a5:06:eb:f5:40:54:5c:47:4c:08:1b:b3:fb:96:f5:eb:49:
69:bb:9a:d1:39:37:20:ba:8b:55:e8:2e:7c:fa:6a:07:f1:4a:
65:41:f9:84:b6:4d:86:26:78:ff:3f:fa:c7:f8:4b:58:ed:c1:
a9:be:c4:d3:d3:aa:d5:50:b5:2f:02:b4:73:76:b7:af:dd:fa:
1d:5f:96:dc:d8:6d:48:88:8e:1f:8b:93:2d:0c:7d:17:23:46:
7e:2e:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:32 2026 by rpki-client