Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: RuscNTWmQD4d4H9CpwhPUdwgv3znpFib53Jm+m2TWwM=
Subject key identifier: 53:01:28:93:DD:05:32:3E:22:31:82:4F:19:14:2B:B9:72:1B:C2:A0
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019D265F2E4256AD570DED522DB4AFD899B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 139B
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: dF8OK8CTFLuMgZ7as/NwzC9aGNJarklv+Qd98SJys2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2e:42:56:ad:57:0d:ed:52:2d:b4:af:d8:99:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=53012893dd05323e2231824f19142bb9721bc2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:44:d4:46:b2:7f:ab:f8:80:d0:59:ea:53:
a6:59:c7:92:4b:4e:6e:78:81:55:3b:c4:73:b1:91:
21:27:43:cd:a7:22:06:d8:98:97:5d:10:20:f5:6e:
70:72:3d:57:7a:d4:e8:d3:da:ae:f2:48:d5:7b:25:
99:90:d9:c4:ab:56:95:27:90:88:cb:44:32:43:35:
e9:4d:52:64:fa:aa:43:7f:14:c3:eb:f0:e3:b2:ab:
8d:37:fd:7d:b3:7a:71:4c:ed:39:d5:c5:f2:99:4e:
70:84:16:f6:c2:ab:c5:02:c7:bd:46:76:f3:09:6b:
35:26:d5:0a:d1:ca:19:99:4d:27:3c:b9:e4:df:e8:
b2:7f:44:f9:fb:5c:17:a5:ee:43:c4:41:50:a0:df:
89:1b:c0:da:40:fc:3b:ca:cc:08:e7:cc:68:77:f8:
de:e0:3c:af:3d:3e:d8:80:2f:7b:ee:67:bc:6e:b3:
89:cd:1f:4e:91:63:10:84:3a:15:e9:99:53:e8:bf:
04:5d:d7:13:8d:db:0a:3c:5c:7f:94:05:92:09:54:
3a:09:98:ff:29:7a:59:20:98:c1:b5:04:57:bf:1d:
20:cd:4c:fb:45:52:ab:ae:a5:32:bf:42:3e:39:d3:
27:95:a3:9b:33:3f:b5:1a:79:ac:bc:85:ef:7a:f7:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:28:93:DD:05:32:3E:22:31:82:4F:19:14:2B:B9:72:1B:C2:A0
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:e1:ed:be:97:f4:9f:e6:f1:41:91:dc:0d:84:a9:b5:fa:
1a:c4:78:8e:74:b8:5c:69:b9:01:a6:a5:c6:bc:06:91:7d:d3:
93:28:15:de:7f:0a:c2:0f:a6:03:1f:42:cb:e5:27:c0:90:90:
8e:df:a9:08:57:ec:8e:31:0d:d5:5f:8e:55:dc:db:f2:d0:1b:
87:74:6e:09:37:4e:01:71:93:01:cd:46:da:0d:14:f0:8f:be:
94:01:7e:cc:cd:d5:5d:eb:5c:c4:aa:2b:08:fd:6e:51:a6:27:
9a:fc:ea:dc:ff:44:2f:cb:00:d8:09:91:25:fc:d3:b8:8d:43:
0c:ea:ea:17:22:2a:b2:d1:8d:d9:45:b1:c7:e1:04:d7:8f:02:
6b:fd:3a:f8:fd:a2:68:de:fa:1f:d5:d9:e1:b4:46:00:5b:67:
d9:37:c4:09:b9:9f:93:f4:73:2a:bb:71:6a:f3:b4:5b:67:5b:
d9:cb:3a:e6:de:20:b8:b4:08:6c:2e:f1:48:fa:27:80:bf:18:
2d:bb:29:ab:b4:99:2a:b6:1f:5a:36:ea:10:da:de:8a:e7:c8:
cd:09:27:4d:49:be:72:8e:d2:97:30:40:55:ec:0e:83:98:65:
71:ed:6a:b7:6b:78:f8:3d:3f:82:8f:a8:27:69:17:b7:ac:b7:
68:79:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:48 2026 by rpki-client