Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: Rggxr/azERqKeDGLNEQDrz8AXNiitJSEhDTJ+tKYNrc=
Subject key identifier: B3:FD:36:08:E3:30:38:3A:B2:28:E5:98:31:E9:31:C0:BB:C6:F8:5C
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019D29CDF11A28252D45D052A6B095922771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:00:55 +0000
Manifest this update: Thu 26 Mar 2026 11:00:55 +0000
Manifest next update: Fri 27 Mar 2026 11:00:55 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: vjqhYSNvQk1Wmk77KgfKNFSHXCTMup067ICG3aKneTc=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f1:1a:28:25:2d:45:d0:52:a6:b0:95:92:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Mar 26 11:00:55 2026 GMT
Not After : Mar 27 11:00:55 2026 GMT
Subject: CN=b3fd3608e330383ab228e59831e931c0bbc6f85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:13:3c:98:7c:61:96:c7:1c:3b:3d:9b:f2:
41:de:5f:83:e0:13:50:91:18:36:6d:24:a1:be:51:
02:f3:29:72:27:9a:1f:40:7a:33:b5:b0:ac:e4:26:
9b:7a:9b:9a:ac:a3:8a:6b:25:21:1f:8c:66:c3:e2:
69:b4:ec:31:0f:0f:de:d2:ae:81:96:16:2a:36:b0:
a8:68:1b:96:c2:f8:eb:fc:a3:f5:f9:39:a6:d4:3f:
e1:ed:09:b9:b6:a9:93:c5:3a:cd:08:5b:b0:48:d6:
29:5a:cf:f3:00:41:88:60:df:a2:c1:01:6d:5b:b4:
f8:05:83:d1:77:d3:aa:d5:14:18:9b:21:31:1e:6e:
02:36:1b:67:fa:ec:2a:d4:e6:16:89:58:42:a2:59:
ee:58:b8:48:3c:e0:3b:f2:c9:03:bd:84:fb:a6:48:
b7:72:59:ee:14:0f:c9:1f:70:b5:fd:41:71:cc:a7:
bc:7b:c0:85:34:79:3f:9c:d1:89:68:74:72:89:fe:
86:ea:ef:c5:0c:e2:b7:56:d9:a4:2f:53:a9:a4:bc:
c7:30:3c:c9:dc:ae:ec:e5:53:a2:de:81:b5:31:7e:
81:9f:2e:8a:3b:fa:c5:9c:23:e3:5c:cc:e5:72:12:
67:46:fb:ea:6a:4c:0b:9f:09:d0:8f:86:bc:09:65:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:36:08:E3:30:38:3A:B2:28:E5:98:31:E9:31:C0:BB:C6:F8:5C
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:9b:fc:36:42:e8:35:cb:15:fd:50:1b:b2:af:5a:57:fa:
f9:e4:2e:54:94:8d:60:8f:3b:af:ab:e1:8f:82:8a:2d:e0:70:
d0:d4:ae:02:1b:45:fe:6b:cb:3d:03:a2:70:75:90:94:0e:4f:
c3:7e:f2:94:d5:6c:8c:22:7c:31:5a:bd:47:6f:18:bc:f1:8f:
7f:f0:7c:7b:d9:d6:20:78:72:90:2f:b5:94:ba:e8:73:b1:39:
37:d3:11:eb:dc:0c:47:31:39:55:ef:f0:0c:af:72:89:74:39:
c6:7d:bf:71:39:fa:af:8d:49:b4:ef:1e:8a:ab:36:b1:7c:7e:
18:05:fd:9a:7d:17:ce:47:94:ab:7c:40:e0:3c:da:99:47:ab:
91:ae:0f:5a:40:ab:c1:18:ee:db:1e:6a:80:84:97:7d:8b:88:
f8:19:bf:24:56:36:44:f4:24:64:62:9e:be:23:fb:fa:f5:4c:
ef:42:79:76:94:84:7d:d2:49:6c:65:93:62:de:94:76:1d:75:
63:b6:ff:b7:19:e1:6e:3e:07:f3:77:31:d5:57:26:79:54:f6:
6b:53:1d:c6:38:f2:21:54:e3:64:ef:67:c2:df:84:64:d5:15:
bc:17:8a:7b:7d:24:aa:54:94:dc:46:d8:b7:4b:45:d5:21:ba:
99:f3:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:36 2026 by rpki-client