Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: cBAxyeW3/yIlxkc7qCGt0yVj5CcfWFAoQmJn00LvwpY=
Subject key identifier: FD:A1:E6:C8:7C:39:21:7E:B7:61:EB:B6:96:D5:2B:7B:11:22:44:F1
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019D25F106BA47C4F57BA6A4D1ACC6F02D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 0568
Signing time: Wed 25 Mar 2026 17:00:46 +0000
Manifest this update: Wed 25 Mar 2026 17:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:00:46 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: 5/JlBrgOjbxMeZdveuZp+txnvsn3TxWyLxuGBrfYW9A=)
2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
5: odt_2E36HJJB984srGHjv6qER2U.asa (hash: R8X7F+f+3wADu+sKhSukvo7cCZr57RXUSRSmArsF1fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:06:ba:47:c4:f5:7b:a6:a4:d1:ac:c6:f0:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Mar 25 17:00:46 2026 GMT
Not After : Mar 26 17:00:46 2026 GMT
Subject: CN=fda1e6c87c39217eb761ebb696d52b7b112244f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:6b:d0:1e:c7:d4:0f:0e:a6:72:68:38:01:
86:44:38:f8:b9:a5:24:67:3a:07:0a:f9:26:33:80:
59:ae:ac:7f:e1:5e:3b:3e:b4:60:f1:e5:ca:b4:4a:
c9:b7:2a:be:39:fb:85:5e:f0:8d:94:00:a7:2a:a2:
2d:05:2a:7c:d3:30:84:ce:3a:71:a3:6d:9a:92:b2:
e4:62:af:dd:83:c7:3e:18:d8:3e:ef:05:84:61:95:
92:7c:1b:04:2f:1f:70:0d:d8:09:7f:8b:54:6a:47:
2e:05:7a:7a:1c:50:69:ce:61:b7:0b:2f:88:44:56:
c6:68:bf:d7:67:13:e8:b9:ad:2d:13:ae:23:06:a9:
15:0a:b8:36:b2:df:08:e3:27:20:fc:30:bf:b5:dd:
08:35:db:64:c7:60:5c:d3:2d:6e:10:42:97:eb:78:
0a:2f:bc:c7:15:6f:fe:2f:33:82:fc:e2:db:d7:84:
af:06:dc:46:8e:e9:6f:e7:0e:44:d4:6a:83:76:03:
65:b2:3e:51:40:33:1a:e2:93:e2:bb:b1:49:3d:95:
78:0b:6e:32:15:47:14:fc:05:62:ed:74:e7:a4:44:
22:9d:e2:c5:16:4f:88:4b:6d:5d:e7:de:fc:e2:8d:
1f:11:59:b0:6d:00:ca:06:f1:34:6d:62:1b:57:22:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:E6:C8:7C:39:21:7E:B7:61:EB:B6:96:D5:2B:7B:11:22:44:F1
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:f8:84:9b:0e:99:ac:8a:e5:cb:36:34:6e:4e:c5:a8:25:
75:1c:5b:a0:d1:01:67:3a:72:0e:ff:0f:0b:00:6d:90:4c:41:
ac:e1:7c:2e:4d:9d:15:ae:5b:d3:21:ba:ed:77:29:58:2c:17:
2b:30:08:12:9c:cf:78:cc:a9:6b:db:76:6a:45:dd:6f:00:14:
f6:88:73:9d:b8:b5:6a:3f:34:43:a0:4c:12:9a:8f:20:21:19:
45:8b:18:43:d8:b3:14:37:1c:c9:b2:a2:f6:7a:73:4d:95:a6:
c1:33:54:31:a5:97:72:3e:6d:13:20:9b:30:17:0e:8b:b2:25:
99:c3:34:bc:c1:37:b2:65:af:6d:09:e7:19:df:1f:a4:8c:aa:
65:17:ea:c1:b7:b2:88:c7:4b:86:c8:9c:15:7f:d2:44:09:3b:
65:12:0f:f8:c5:ed:45:1f:f9:f2:4c:1e:1e:cc:7c:ac:1b:a5:
05:c3:60:5d:6f:4e:af:78:60:e0:ec:aa:09:b0:64:8c:b7:45:
52:25:6a:c1:d6:2e:b3:db:41:d7:af:6b:11:3b:ab:2a:a6:9a:
3e:4d:dc:e1:5a:c0:70:4a:08:5d:a1:c2:62:9a:9b:cd:e6:f0:
74:29:89:e0:92:ef:7b:d0:5b:53:b4:b3:28:7a:7e:ab:a2:bd:
e5:b8:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:54 2026 by rpki-client