Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
File: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft (raw, json)
Hash identifier: we50y4NuyONjtOyveoFArqZAlSXu/IddH9LhXx779dk=
Subject key identifier: 5D:92:38:99:16:96:B6:57:B1:26:FA:46:BC:4E:5D:F5:BA:94:6C:64
Authority key identifier: F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
Certificate issuer: /CN=f23e21affc33677485a15a5e13121143b577ba9d
Certificate serial: 019D3307A797A9D34D0F33D972574E88422B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
Manifest number: 51
Signing time: Sat 28 Mar 2026 06:00:32 +0000
Manifest this update: Sat 28 Mar 2026 06:00:32 +0000
Manifest next update: Sun 29 Mar 2026 06:00:32 +0000
Files and hashes: 1: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl (hash: VJkewX8y9n/zp0nu8lAvlmpT0yXBjAKZQmpQSXIt6y8=)
2: wWZeumQT3MBgVyI61YutHcN7xBc.roa (hash: ZGw/nN7EzuhLxCNfPxU2KnJ6Yzzw3B7hzu5qe4dcGKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:a7:97:a9:d3:4d:0f:33:d9:72:57:4e:88:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23e21affc33677485a15a5e13121143b577ba9d
Validity
Not Before: Mar 28 06:00:32 2026 GMT
Not After : Mar 29 06:00:32 2026 GMT
Subject: CN=5d9238991696b657b126fa46bc4e5df5ba946c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:c6:94:b9:90:b1:93:4c:6b:b3:eb:6a:2d:
9d:5a:d7:a0:11:ce:72:ba:26:9a:5d:2d:e9:f3:ac:
3d:d0:b3:5a:d1:55:68:31:5e:23:99:e2:50:a0:3a:
17:00:e0:3c:00:f7:99:08:e8:b5:c4:26:04:a3:ac:
54:cf:3e:4c:06:1c:86:02:bc:14:9a:cb:49:68:98:
8d:86:f6:8d:01:bc:16:82:d5:87:88:18:fc:37:20:
e3:5c:ea:1a:ea:43:24:a6:79:8a:1c:2e:1e:b7:8a:
8f:9d:f5:c0:c7:ab:d7:c1:fd:eb:49:f0:db:6c:54:
ff:d9:73:f4:73:9b:47:e9:37:db:fd:15:a5:62:41:
84:ed:0b:bf:71:29:87:e9:67:fc:52:fb:33:93:17:
9a:81:0a:11:9b:1e:3c:37:7d:52:82:04:4d:0b:2f:
e8:5f:3b:6b:f5:b1:d0:ab:0e:6b:bc:aa:ca:91:64:
0e:e8:b5:e2:39:c2:be:c2:58:74:eb:01:0e:28:44:
e7:62:f4:10:d5:19:6e:90:4f:b8:82:74:bd:a9:e4:
e7:91:1f:fd:4b:ae:d3:0b:a3:85:59:01:a7:5a:e9:
59:b3:91:dd:b2:4a:74:c0:50:1c:95:d2:b6:9e:7f:
30:4c:c5:06:77:38:c1:3e:86:09:0c:c1:0f:25:fa:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:38:99:16:96:B6:57:B1:26:FA:46:BC:4E:5D:F5:BA:94:6C:64
X509v3 Authority Key Identifier:
keyid:F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:63:ad:79:82:ed:c0:12:ba:45:0e:de:34:3f:b0:22:b2:1d:
ff:86:8d:9b:dd:06:13:bf:d2:f9:ef:ea:ea:be:98:ed:b4:17:
25:26:08:4c:45:fe:00:43:ef:1e:24:a6:c4:bd:fe:56:c7:1c:
ef:19:92:29:21:50:f5:6a:69:98:1c:02:2a:33:6f:7e:2c:fd:
e0:f0:86:3f:8a:44:2e:06:b5:b5:eb:80:62:9c:d5:bd:6a:25:
da:4a:e0:cb:fd:17:7e:65:ca:ed:1e:e7:b9:04:0b:8f:53:73:
48:37:0a:71:d2:8a:32:1b:b3:8a:3e:94:e0:83:f7:97:47:83:
ac:28:81:21:b5:81:45:15:09:a7:41:b9:40:c9:ef:78:96:2a:
bb:8e:49:0f:c9:e9:16:59:33:00:07:7f:77:e2:90:7b:7c:57:
17:2c:9e:c4:6b:fd:00:89:cb:91:51:fa:ed:a8:9f:3b:1f:fd:
d0:6c:8e:ad:89:e4:62:d1:6f:07:75:26:1b:88:66:83:67:22:
fe:d4:9c:3c:df:13:c1:18:04:4d:56:2b:5a:5f:4a:2b:94:42:
62:77:77:67:ab:be:73:76:b4:b5:5c:c8:ec:65:1b:ef:9f:2f:
14:b4:80:03:2d:62:29:09:d2:71:e7:fb:da:d4:62:49:14:92:
a3:c8:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:10 2026 by rpki-client