Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: oN8ReL9IBziYrT+3BE8D4cvYxB20dWcmsh0U6J54LPM=
Subject key identifier: 11:DB:82:E1:00:BE:02:6F:E2:FF:21:4C:CB:B9:B8:65:C3:59:E6:39
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019D273AE248DDCB5B0E2917283BF18299FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 088C
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: RUvKPn0NP8WzmiCOl73EtfFbHjvsUTo7l/AGV20diiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e2:48:dd:cb:5b:0e:29:17:28:3b:f1:82:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=11db82e100be026fe2ff214ccbb9b865c359e639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:b6:da:16:a4:28:ee:d3:b0:ab:e0:36:e1:
13:47:c3:15:8b:33:e1:6c:8b:ee:a4:ba:99:0d:03:
cd:bc:1a:5b:1e:bc:5f:98:2f:e6:88:90:ad:a6:cd:
f0:d2:54:af:ed:50:d8:d8:3c:56:bf:fa:46:20:e5:
94:83:ab:47:dd:22:38:c7:14:39:92:66:b0:96:fd:
57:c4:d9:85:84:d0:24:08:c3:66:91:26:a6:d3:fe:
fd:bf:45:be:93:5a:1b:ff:b4:26:da:0e:a3:5e:ee:
c9:bf:4d:7f:56:d7:bb:84:ae:e7:39:c0:0d:78:9d:
01:52:07:8a:eb:21:e6:ba:6d:5f:61:64:cd:d4:38:
04:81:6b:5e:32:05:72:fe:8b:01:68:69:fc:69:44:
71:f1:9d:63:1b:63:2b:ce:f2:b6:c0:73:65:8d:f3:
3d:0b:ed:ec:1e:d6:a8:c0:64:7c:7e:ad:ca:09:6b:
7f:93:49:d9:cf:b5:5f:66:c9:61:62:2d:98:98:a3:
0c:4f:53:24:fe:5f:b6:0d:79:c8:ed:ca:59:97:e2:
bb:6f:c5:8e:1c:22:bf:e0:fb:64:67:d9:27:ff:3c:
82:b1:3a:92:f8:9e:33:c6:bc:6a:a7:e9:e2:15:cc:
c7:08:48:ac:5e:3f:db:44:2a:76:0b:48:23:3e:4b:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DB:82:E1:00:BE:02:6F:E2:FF:21:4C:CB:B9:B8:65:C3:59:E6:39
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:78:5a:33:d9:8d:4d:9d:05:8e:c6:d4:e3:7f:e6:af:69:
ad:82:64:ee:c4:13:7a:63:58:a3:e0:ec:3c:3e:87:29:85:7d:
7f:ea:58:ed:d9:95:58:f8:80:ec:38:19:c5:ee:c5:cb:98:43:
72:e6:b9:2e:55:a0:6b:ee:95:9e:49:29:c2:0c:d9:58:59:83:
f8:a8:a4:d1:d6:7e:56:2e:0d:b9:84:c4:8f:01:a4:19:73:55:
8c:49:3d:22:9d:cb:45:07:2d:1e:09:6a:57:0d:06:0d:97:0b:
fa:29:43:c7:3b:7d:5b:96:41:24:2e:05:25:85:95:82:af:8d:
53:10:5e:73:b7:ba:24:b8:47:af:1d:00:a7:1b:bd:fe:72:58:
91:60:b1:26:0f:6e:05:e1:be:7b:ab:aa:65:29:91:27:43:f5:
3a:0a:3c:00:e7:b8:5b:8f:7a:98:6f:01:04:b5:77:b3:ec:cc:
4d:15:64:c3:85:00:c7:33:70:cc:ff:be:39:0e:59:05:09:a2:
ab:fe:9c:d5:04:52:78:97:10:9f:28:97:dd:ff:dc:22:a1:a1:
92:51:1a:f1:94:b3:9d:97:63:7c:5c:b5:de:68:1c:15:76:7f:
89:1f:08:34:5d:fe:35:a7:6f:5d:db:9c:15:71:04:ec:6a:6d:
6d:98:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:09 2026 by rpki-client