Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: P7ixT5RdAR++K86X5Hvsj0o+u5+n4UNOBI+9eXL64TE=
Subject key identifier: 8E:A6:69:E5:A5:49:2E:4F:9F:E9:2E:87:BC:84:27:2E:8A:7C:A0:57
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019D25F152DA9C236E61E6661FE68510F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0F7F
Signing time: Wed 25 Mar 2026 17:01:05 +0000
Manifest this update: Wed 25 Mar 2026 17:01:05 +0000
Manifest next update: Thu 26 Mar 2026 17:01:05 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: dCxB2XRNAEOvNoUCGMIAS/CuW/sORwHY3496/JLFDnw=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:52:da:9c:23:6e:61:e6:66:1f:e6:85:10:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Mar 25 17:01:05 2026 GMT
Not After : Mar 26 17:01:05 2026 GMT
Subject: CN=8ea669e5a5492e4f9fe92e87bc84272e8a7ca057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:79:4f:f1:5d:35:bc:05:79:43:74:ef:a6:
b0:21:f9:e9:69:50:ad:35:12:da:fc:7a:9b:7f:95:
0a:e3:60:9a:23:9c:6c:c0:e2:5b:2d:cf:22:08:20:
28:d6:35:92:3b:d6:08:a7:8a:01:98:49:0b:60:26:
07:e3:80:bf:e7:82:be:84:13:b6:6c:c7:ef:ca:3c:
a0:ce:5c:51:ee:51:27:8e:30:3e:6c:90:4c:82:1d:
f6:40:9f:fd:3e:fa:a9:a0:41:ac:b5:99:a1:5c:35:
99:e2:1e:87:91:87:4b:9b:89:d3:71:1a:e1:ad:5d:
fa:1e:8f:0a:41:51:3f:54:12:ef:bd:e6:9b:4d:12:
b6:ac:4c:bd:5f:eb:ba:66:1d:be:fd:52:27:67:fe:
30:11:ba:98:34:b9:d7:93:f1:a9:db:ac:0b:c8:dd:
d7:82:d8:f7:2e:32:0c:d0:3a:43:5b:01:2a:e7:d3:
96:7d:b2:40:9a:5c:a4:ec:9b:6f:06:a1:c3:47:2b:
73:2a:64:c2:85:ba:e3:b3:33:a9:d5:f3:43:d4:19:
4e:29:a5:6d:bd:59:c2:55:e3:ac:2b:eb:76:dc:42:
f6:74:00:88:64:cb:7e:fa:36:17:06:10:bc:a9:b7:
1a:b6:dd:1f:ea:cf:34:66:d8:c4:41:fc:b9:a5:80:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:69:E5:A5:49:2E:4F:9F:E9:2E:87:BC:84:27:2E:8A:7C:A0:57
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:e6:77:8d:68:76:58:ee:1b:d0:9d:85:8f:77:b1:3a:f0:
ea:eb:88:b9:19:32:df:f4:64:90:9c:bb:45:3b:19:66:3b:1f:
e3:2d:2d:2b:9f:a6:78:62:e6:f7:dc:10:6c:06:1b:39:34:56:
7e:a0:0e:0d:6e:b9:40:67:93:c6:1e:c1:99:eb:82:59:b0:87:
00:30:2d:44:7a:6c:df:4c:39:58:80:23:2c:0f:94:a4:e6:5a:
ad:19:2f:1b:05:d3:34:0b:a0:81:69:7a:da:82:b3:15:63:92:
8c:67:fe:eb:69:9c:a6:9e:bf:b5:69:1f:45:a1:19:3d:05:86:
54:b6:27:27:07:ef:36:35:5b:6b:bc:28:27:24:0e:14:fb:9e:
3f:44:ad:a9:6c:c9:78:0d:46:93:49:e1:a8:6d:15:9f:23:1e:
28:94:97:b3:30:5b:56:56:b4:ae:cf:70:eb:f0:a3:e1:02:42:
82:48:0b:12:f4:b4:10:55:d5:76:c7:07:84:6d:c3:62:19:ed:
29:e5:21:49:2b:e3:1b:d9:c4:df:bb:9c:ed:89:3e:9d:66:b5:
29:dd:f2:4f:9a:8b:fd:1b:dc:f8:45:9c:0b:98:e1:cf:38:8d:
88:d5:2c:16:c5:27:2b:a0:b1:2f:b1:af:18:3e:13:eb:e2:32:
5d:53:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:02 2026 by rpki-client