Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: 1WTEOZpmlvOwPrGlDszWTQU4DJCaXHHsQ9OqfDqXfnw=
Subject key identifier: D6:D6:F5:B8:ED:21:07:98:48:03:51:E5:7D:B7:A6:81:8A:FF:88:E5
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019D292909CEE6B3EFC1FA778E2304207B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 12D6
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: kAjbAQ7J/G7A0vc1cbb+2kEtf6GYpBgdRUAjqfbfdy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:09:ce:e6:b3:ef:c1:fa:77:8e:23:04:20:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=d6d6f5b8ed210798480351e57db7a6818aff88e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:e4:85:98:79:a6:36:8a:28:c3:40:ee:90:
09:ca:ad:b7:9a:06:50:f1:a1:f8:4f:5c:71:3a:24:
43:c1:a1:dc:a3:ad:bf:0a:6b:cb:cd:45:55:dd:66:
b6:bf:d1:7d:07:ca:fd:37:a0:fc:c9:80:ee:01:ab:
1e:48:ef:95:fb:c1:60:26:4e:95:61:de:c7:9d:28:
6a:d6:87:7d:2e:f9:e7:77:00:00:62:4c:f4:2c:40:
75:10:ec:5d:35:58:66:1b:62:40:ba:7f:50:f7:c9:
17:7b:75:c1:d3:12:6a:5f:36:1d:7c:79:05:bd:4c:
38:e7:2b:8b:03:54:0e:0c:36:21:d4:88:e6:3c:07:
df:62:5b:66:f5:b0:ca:de:a8:b8:92:d3:57:7b:93:
9f:62:54:0f:bc:fb:ae:2e:bb:12:84:e7:4f:93:20:
1e:16:14:1a:62:17:0f:da:37:59:19:3c:49:34:6e:
85:5e:63:7f:f9:1b:a5:0e:48:c0:e9:c1:33:8e:7b:
43:c8:06:18:a1:48:e7:37:aa:ae:15:16:40:24:b1:
5b:b3:dd:4d:3c:92:52:9d:e7:50:2a:0f:eb:8b:80:
4a:87:bd:91:dc:b1:c2:4b:1a:be:54:a7:c2:1d:67:
35:c4:66:e3:fb:e8:ec:08:58:58:bb:b4:f7:8a:53:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:F5:B8:ED:21:07:98:48:03:51:E5:7D:B7:A6:81:8A:FF:88:E5
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:6a:d1:d3:67:61:7c:b9:69:da:5a:96:53:ce:b9:fd:71:
77:00:b4:8c:1d:bc:a0:3a:f8:5f:74:73:97:fa:71:00:c3:38:
43:cd:d5:f5:f3:f0:e4:3b:4c:8c:fd:f7:30:98:5d:d3:eb:94:
c4:b3:ce:62:0e:1c:bf:e6:1c:2d:99:41:b9:0f:c2:49:07:25:
06:29:bd:95:99:64:0f:43:e0:fe:6b:d7:5f:96:bd:03:c1:7c:
42:48:c8:ca:16:0d:38:59:de:ad:29:9b:50:97:db:f1:1d:2b:
12:4a:65:de:43:05:16:c3:fe:de:b7:cc:67:76:7c:65:e0:a1:
05:cb:0b:eb:a0:79:74:19:23:2f:a9:d8:ee:a0:70:47:a2:ab:
97:43:86:53:15:2a:62:ce:31:95:68:f4:2a:f2:06:08:ad:cc:
fe:8f:04:fe:71:b6:84:53:ef:e2:7a:bc:8f:f6:90:5d:85:7d:
99:36:66:10:61:1e:14:84:1b:66:a6:9d:2f:aa:ff:98:fd:d9:
ff:99:fd:f2:0c:b2:cd:a2:f3:2d:5c:cc:12:35:26:90:12:95:
81:22:a9:d3:4d:8d:d4:55:99:34:78:18:f6:3f:ba:99:05:ac:
eb:7d:5c:d8:da:ee:e6:72:bb:0e:66:c4:fb:54:36:1a:12:b6:
15:0f:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:47 2026 by rpki-client