Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: EuGBEWatxZmiSUkjKpaWuTHJwy5HVlUyIwrWPvhq6tc=
Subject key identifier: 72:B1:83:4A:BE:6C:98:4E:0D:6B:B3:A5:82:61:F9:5C:AD:9C:03:89
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019D2772AE977A374A071CCDC4E9647640C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 0347
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: KN9zQJmwnI0dOpWCh1f/nX927ZyYTY4BNsXjbaPtU54=)
2: qVZeyuIJgAH_RvLNP7X_MFn3Jws.roa (hash: e8ltV6uZOZ7loOT5ePx9DkMlZ9YWrSrqO4NGgl5qtP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ae:97:7a:37:4a:07:1c:cd:c4:e9:64:76:40:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=72b1834abe6c984e0d6bb3a58261f95cad9c0389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:71:87:4d:f9:ad:7a:7d:8b:21:5b:21:48:9a:
db:ba:33:58:22:98:20:ff:90:0d:7e:e8:34:42:0f:
35:2b:47:3d:19:00:4c:54:80:b4:78:d4:55:a6:3a:
73:44:3e:e3:f6:ac:da:93:9d:a0:43:99:c8:e9:e3:
63:55:4f:ce:2f:cf:3e:d9:54:bf:7f:a6:f7:f0:65:
a1:4f:b8:4d:d6:65:22:76:49:c9:cf:15:a7:3d:d6:
9f:24:b7:4e:60:3a:67:5e:ea:6b:7f:87:71:48:fc:
82:b5:95:43:ed:cb:b8:37:62:a5:53:b4:16:6c:27:
76:95:b1:f1:de:a0:19:85:b8:6a:05:6a:47:18:f4:
94:3f:1c:74:bc:ec:fc:db:de:c5:87:5a:b9:5a:42:
34:2e:65:44:e6:6f:bd:e9:32:17:c1:8c:9c:0f:b5:
8a:03:77:a1:84:5e:06:58:78:62:55:35:f5:0f:2f:
25:fa:84:ba:d2:79:34:f8:52:85:68:ec:e7:ab:df:
54:da:98:ea:3b:18:24:92:f6:61:c7:dd:be:c9:09:
88:29:c2:4c:93:38:1c:5b:5b:23:2a:b6:fc:48:e1:
94:8a:3f:58:bf:22:63:f2:08:e4:5a:11:44:be:e4:
3e:8f:05:80:80:75:fc:08:96:22:f3:81:7a:83:f3:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:83:4A:BE:6C:98:4E:0D:6B:B3:A5:82:61:F9:5C:AD:9C:03:89
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:64:1d:c4:e9:f1:c6:97:e4:8e:a8:7b:5c:a6:b8:6c:87:4f:
de:78:9b:f0:d0:a2:10:24:16:00:fd:32:a0:96:77:31:e6:e1:
07:eb:cb:28:8f:78:a7:1c:52:f2:be:2d:be:4c:c7:0e:ef:d8:
31:f6:29:7f:6f:e0:a3:ef:19:34:ca:67:07:7e:64:0b:e3:1a:
2b:38:d0:b1:ab:2b:5b:19:ac:47:33:80:67:8f:72:06:ff:07:
f1:67:dc:4a:2f:fe:02:94:54:cd:d1:04:1b:82:53:4d:03:c2:
53:3d:0e:20:f3:cc:89:53:07:a3:80:95:a8:ac:49:b7:56:b6:
ab:f9:6b:e4:fd:e1:27:e8:7b:9f:03:8d:04:50:4c:75:25:ea:
d3:b0:8d:68:da:a6:13:15:c7:14:62:52:f4:0b:72:e7:80:1f:
ea:75:82:64:c3:21:be:d9:7c:72:88:23:50:b9:c4:e6:1e:a2:
d6:c7:da:11:c0:42:02:11:3e:43:a0:00:0d:58:fa:0e:63:d8:
05:69:6e:16:31:73:25:64:ad:63:4b:3c:84:3b:4e:15:57:2c:
5f:f3:fd:37:0e:b3:95:b6:41:95:8a:ae:ba:21:c8:fe:65:ce:
e7:89:df:cc:14:39:9f:97:f1:e8:0e:f5:f2:74:37:30:e3:c6:
a1:fa:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:02 2026 by rpki-client