Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: RSvZDH41lV++ChffXheh+BOoRZdstpjzzCrelDdE8cU=
Subject key identifier: 99:A3:E3:F0:CD:FF:A3:04:69:A2:04:C9:0D:94:31:F2:22:14:DC:EC
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019D26965729693184AE1B14285725D847DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 04B4
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: aDQe8y/h3KNCeILygXalIVCaN6C8lv5RIUIqZVYNluw=)
2: tA7ayHD2OC_mDpYSeAYmRt9vl60.roa (hash: nXzUQidKZKiPu+wTyev4ClnGSOGOvsTtGMsfWsjmfCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:57:29:69:31:84:ae:1b:14:28:57:25:d8:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=99a3e3f0cdffa30469a204c90d9431f22214dcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:dd:e8:43:8c:88:27:07:98:a9:20:66:05:
1b:79:98:5d:f7:39:50:b7:be:de:ae:69:c5:a8:02:
12:a2:43:e4:86:2c:bc:34:96:81:7e:21:7f:16:f8:
ec:58:df:17:5c:0b:c4:bc:94:41:e9:ee:c7:bc:ab:
bf:41:a7:ba:d4:5a:72:11:a8:35:26:f2:95:39:95:
83:a8:63:7f:95:f5:7d:b5:2d:88:6f:4f:e3:6c:c5:
62:57:ed:43:56:d2:f5:10:46:2c:2f:8a:3a:4b:5a:
ea:fb:3b:02:fe:09:58:4e:b2:40:da:70:9b:f0:69:
10:42:3f:94:2d:c5:87:bc:50:8a:ac:83:82:cb:0f:
15:69:ac:8d:b3:98:13:8e:21:55:08:4a:7f:12:01:
de:48:f8:f2:65:62:7d:60:23:25:7a:9c:2b:54:ef:
12:f6:28:e0:4a:c3:05:dd:2d:bd:6e:06:23:03:9a:
36:1e:b3:cd:e5:bf:4e:db:f3:7e:22:cd:0c:66:39:
59:d2:9e:fc:7f:17:08:02:cf:8d:02:36:a2:fa:41:
29:ef:44:e1:a7:0b:0d:f5:3c:9c:89:d3:33:4a:4d:
e6:00:28:25:77:2a:35:65:57:8e:ec:50:a1:38:1b:
96:66:27:b3:95:22:ec:68:92:a0:05:ae:ad:9d:5b:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:E3:F0:CD:FF:A3:04:69:A2:04:C9:0D:94:31:F2:22:14:DC:EC
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:52:a5:e1:1f:a5:67:aa:31:d7:c9:c1:72:e7:1f:ee:35:
69:a5:af:5d:4f:5e:6d:de:58:72:b7:f7:1e:cc:ca:6c:fb:b3:
c5:fc:4b:47:4d:9a:34:f6:d3:9b:b4:bf:27:3c:c5:2b:67:af:
72:f6:d6:65:f6:61:e8:12:a7:bb:fd:22:fa:d9:41:12:90:5f:
90:07:9d:ad:36:e5:7c:6c:a3:c2:53:98:68:a7:3e:35:03:84:
20:e6:77:55:6c:4e:0c:2b:23:df:b6:ee:43:11:8b:6d:b0:a1:
da:29:f7:b1:24:49:63:97:80:6e:78:56:d0:52:32:27:b3:02:
32:1e:40:19:79:9f:05:30:4a:52:9b:d5:9a:7a:39:3a:30:49:
99:25:16:b0:47:b8:ad:a5:49:eb:ee:6b:b9:79:e7:01:0f:fa:
f4:d2:75:9b:a9:8a:f6:c6:9d:60:3e:6c:f0:42:c8:48:93:fd:
20:e6:41:ed:60:1f:1f:4b:c2:83:89:c1:d5:4d:56:5e:cc:bd:
fd:91:4c:f8:27:40:4e:16:15:e6:47:6e:69:f0:ef:ef:f3:c3:
aa:f8:2b:15:69:49:d3:b9:4e:65:55:78:e8:36:21:ee:aa:ab:
80:77:21:a6:26:a5:09:49:61:3f:82:63:a3:e2:49:de:aa:d5:
24:5e:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:13 2026 by rpki-client