Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: i8PWRg4p77e/hwR1Yw6xwnl38ScRP/4gq1vT8+WHOh0=
Subject key identifier: 22:C9:CF:D7:B2:CE:3C:1C:2A:F9:FD:45:CD:B4:2C:6B:54:9E:07:9D
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019D284E6BB3EEA4864C8A1E221521385A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:02:01 +0000
Manifest this update: Thu 26 Mar 2026 04:02:01 +0000
Manifest next update: Fri 27 Mar 2026 04:02:01 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: DV5v8iF0uxyaU/kNljJYvmtxS5beF/Yc4WnZlgNEBDg=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:6b:b3:ee:a4:86:4c:8a:1e:22:15:21:38:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Mar 26 04:02:01 2026 GMT
Not After : Mar 27 04:02:01 2026 GMT
Subject: CN=22c9cfd7b2ce3c1c2af9fd45cdb42c6b549e079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:aa:d3:2b:fb:0c:92:8f:db:75:89:43:6d:
e3:af:88:1c:43:ea:3f:20:73:2f:b9:ec:4f:10:b1:
8c:c7:cf:7c:dd:01:01:d2:b9:62:a4:e9:b2:e5:57:
9d:f0:da:cf:91:d5:c2:6c:53:77:70:f9:f2:4a:b2:
5e:80:8a:6b:ac:29:70:8b:9d:eb:c2:5b:60:15:60:
62:3f:5f:ea:29:95:44:b0:50:f2:69:e5:14:1e:66:
63:27:b4:51:d8:1c:d4:1c:06:b2:74:be:b5:76:e2:
25:80:8a:c1:39:8c:ec:2c:3b:1c:1a:00:e3:97:a0:
28:8b:b0:8d:11:1e:ad:91:06:5f:cb:e8:ed:8c:ec:
63:76:c4:1f:a3:31:d9:2f:fe:0e:02:bc:5f:68:ab:
e2:fb:45:56:10:b9:44:13:75:a3:04:81:c5:de:58:
7f:cc:b1:c5:ee:a0:93:2e:d8:3d:86:94:47:e3:3d:
d3:66:64:85:dd:7e:e2:22:d9:6c:aa:be:fc:f5:15:
a5:10:de:b2:2c:84:dd:9f:a4:64:c7:45:7b:8f:4a:
7a:79:06:08:eb:b4:4e:30:88:3a:2e:40:a1:fc:28:
d1:7b:06:86:1c:6a:4f:d0:cb:7c:57:d0:d2:e0:a0:
c8:e1:b9:dd:f6:bd:25:67:e0:26:33:2a:ca:6a:7e:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:CF:D7:B2:CE:3C:1C:2A:F9:FD:45:CD:B4:2C:6B:54:9E:07:9D
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:0d:38:96:ea:05:91:e4:73:cb:10:10:87:6b:74:80:a0:
86:3c:42:6b:82:a4:c1:bb:37:9c:18:c2:4f:e0:eb:bf:88:74:
e6:34:c3:58:38:7b:92:95:91:c1:48:84:bd:26:be:0c:b7:33:
47:79:1d:e3:8a:57:2c:74:65:8e:d4:93:22:9d:77:79:cf:bf:
67:c8:02:5f:62:50:ab:2b:9c:01:25:0e:82:92:72:67:3a:75:
39:c3:59:d8:c7:1d:3f:68:7b:73:d6:0a:b6:7c:4c:23:3e:52:
02:1f:b9:26:bb:bc:56:80:3a:24:9c:1b:b2:a7:4b:8a:da:63:
c8:ec:01:ca:3a:ae:f0:29:10:21:b6:9d:d2:f7:f3:42:f8:53:
01:0a:a7:ac:d3:ab:77:75:70:fb:66:e0:79:81:04:bf:27:4c:
3c:56:2b:5d:7d:90:ca:73:43:50:9f:57:d3:8f:bc:34:49:4e:
a2:08:4c:ed:bc:d5:87:e9:e5:08:f1:95:2a:63:5d:a0:d6:1b:
97:e1:83:f0:81:03:b5:26:c8:9e:b1:75:25:d5:a6:4d:f3:12:
aa:73:71:bf:28:51:a4:07:5e:6b:f5:ec:2c:60:e3:47:aa:92:
08:7e:08:d1:aa:46:aa:11:75:02:39:b8:20:c7:a7:a7:f1:fd:
25:cb:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:06 2026 by rpki-client