Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: q2bY/FSihaZzyUuhywY4Ug3cun9P4C6v9l7ZWoJZWUw=
Subject key identifier: 3D:1B:86:17:1F:B9:D6:24:C8:62:D1:5B:9B:40:70:04:8C:01:25:85
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019D2B85863E11BE80EB120D71531FDE0D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0F97
Signing time: Thu 26 Mar 2026 19:01:04 +0000
Manifest this update: Thu 26 Mar 2026 19:01:04 +0000
Manifest next update: Fri 27 Mar 2026 19:01:04 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: 6y1/kraFouRG0p+vtsWDt5IR3NfSfQsab2du1MNQabg=)
2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:86:3e:11:be:80:eb:12:0d:71:53:1f:de:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Mar 26 19:01:04 2026 GMT
Not After : Mar 27 19:01:04 2026 GMT
Subject: CN=3d1b86171fb9d624c862d15b9b4070048c012585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:ae:14:4d:b5:e2:71:75:d0:f8:11:26:18:
76:6a:0a:ab:89:3c:a2:c0:0e:da:ae:e5:c3:6d:21:
26:c4:76:5c:6a:22:38:f7:5b:65:59:d0:a8:01:1c:
d1:7e:63:16:53:6f:c5:17:df:96:8c:c9:fa:ea:15:
fe:ed:bb:fb:3d:34:82:f6:27:c8:58:54:dd:1b:eb:
08:26:69:59:4b:d2:92:44:cf:a8:60:82:3a:a1:39:
a8:42:e0:fc:c9:d0:16:cf:2a:32:cf:92:04:0f:2a:
3d:87:6a:fc:e2:56:02:bd:f3:42:a6:ff:2f:fe:8b:
fc:cb:e4:7c:d2:2d:24:93:b2:77:d6:ad:92:d4:e3:
cd:bb:c9:8c:cc:d5:00:97:ff:b9:82:f0:3d:5f:49:
99:9d:02:e8:03:4b:eb:66:d2:73:94:2f:fb:a6:fb:
c4:a7:44:05:18:1e:31:97:ec:a9:c3:d3:17:1a:fd:
7f:e9:9f:a2:ad:d2:93:09:5e:cd:bb:be:c8:a6:f7:
53:1b:2d:c5:d9:3e:6b:53:f1:b7:2b:c1:2c:07:4f:
37:e2:73:67:41:7b:14:cb:ae:10:d9:92:0d:3d:c2:
c1:46:6a:e8:c9:71:58:96:db:63:eb:a5:7b:b0:59:
e0:ca:76:68:98:f0:98:55:fd:67:48:11:cc:64:d4:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:86:17:1F:B9:D6:24:C8:62:D1:5B:9B:40:70:04:8C:01:25:85
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fe:3d:a0:55:eb:5e:e6:bd:8d:91:8a:85:7d:a7:e9:d2:60:
b7:b0:d3:46:1c:46:9d:69:2b:6d:6f:0c:1e:b0:77:9e:1d:be:
e7:9a:d1:c5:ca:0a:88:aa:97:26:bb:57:8a:14:76:75:ba:a8:
13:c6:69:9f:fc:4f:59:5c:80:dd:1c:aa:d5:2e:d7:f8:6c:47:
af:6d:15:a2:c5:9e:6a:ec:d6:5c:c3:ef:46:e8:b8:00:bc:ab:
37:e2:f0:32:49:33:2c:80:70:9b:18:65:6e:ff:05:ce:33:4d:
31:00:0a:80:c2:5a:a8:bd:a8:f7:b2:d7:73:d3:04:56:44:cd:
18:71:26:2e:68:70:7e:bb:47:bd:70:fa:6e:da:8d:c3:7d:31:
5d:6a:25:26:f4:26:f7:e2:0d:76:15:45:5d:96:e2:47:e1:9d:
28:07:6f:dd:8b:b7:14:0f:a0:eb:e9:b1:07:7f:be:2c:41:4a:
6f:cc:b3:19:49:bf:84:2f:20:cf:e0:7f:4d:de:b6:0f:1f:7c:
f7:dc:d4:50:69:7f:3f:3e:c8:41:34:50:7d:f1:41:6e:a4:9d:
5a:6a:33:b6:46:94:49:46:c1:65:e7:73:d6:a7:36:f4:93:2e:
da:0b:86:e8:1f:65:31:4e:00:b8:c5:41:1c:ee:c2:a8:b4:df:
22:68:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:45 2026 by rpki-client