Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
File: 8fdZtMU8ODyZC_Np45VImgPhK4M.mft (raw, json)
Hash identifier: IFR34ny+tlDGsedW/ZBl6/+CCKOZzdid2mqteGk/cdY=
Subject key identifier: 49:2D:D7:74:87:11:7A:AA:89:07:3E:21:8D:37:D8:B0:76:12:15:31
Authority key identifier: F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
Certificate issuer: /CN=f1f759b4c53c383c990bf369e395489a03e12b83
Certificate serial: 019D33ACE25933ED29D8EF1CE412CECB21BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
Manifest number: 22
Signing time: Sat 28 Mar 2026 09:01:01 +0000
Manifest this update: Sat 28 Mar 2026 09:01:01 +0000
Manifest next update: Sun 29 Mar 2026 09:01:01 +0000
Files and hashes: 1: 8fdZtMU8ODyZC_Np45VImgPhK4M.crl (hash: hHVLHCWMeVbehg0c9mkMyiOcidPGJ9raMsL4ORZAUGU=)
2: VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa (hash: umvesd0+PZ7bymZU641FAmXWDwmpl+q6A+dAgZEThlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:e2:59:33:ed:29:d8:ef:1c:e4:12:ce:cb:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f759b4c53c383c990bf369e395489a03e12b83
Validity
Not Before: Mar 28 09:01:01 2026 GMT
Not After : Mar 29 09:01:01 2026 GMT
Subject: CN=492dd77487117aaa89073e218d37d8b076121531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:9e:5e:26:7b:23:b5:9a:29:17:98:6f:4e:
78:1f:0e:9a:61:d7:ff:78:e0:ef:4b:f0:9e:61:aa:
78:78:e6:14:07:34:2d:cd:8d:f3:69:bb:98:b8:3d:
02:88:59:42:3a:85:2a:b2:fb:dc:fe:73:d4:b6:08:
dc:fc:eb:e3:0a:34:07:b8:1c:6f:d3:02:38:f7:9e:
de:61:88:a8:fe:c3:4d:0a:2c:42:84:24:12:fc:1f:
c3:6b:83:98:97:53:f2:59:42:b9:dd:d6:e8:c5:dc:
c6:91:63:6d:65:d3:dc:b8:2d:b2:24:f1:27:95:27:
e4:22:7d:9f:11:db:c0:f2:34:48:ca:38:09:f1:fa:
f7:6c:4c:78:27:f4:38:82:3e:fa:36:09:e0:2b:fe:
88:ec:95:4a:0e:08:f5:da:ec:4a:e4:d6:3b:bf:40:
8a:55:21:a7:af:f6:20:e5:9d:15:07:9b:cf:63:02:
4a:44:6c:70:59:bc:cd:de:d5:4d:94:1e:e1:07:09:
0f:a0:03:87:b1:7e:fd:81:2b:c0:89:75:c3:ed:13:
11:9a:f5:93:ec:11:2f:82:72:0c:48:d7:a9:d7:e2:
86:af:63:57:df:4f:42:48:95:4f:15:1c:59:5c:90:
6f:3f:11:21:3e:94:52:d8:12:a7:00:21:0a:00:61:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:D7:74:87:11:7A:AA:89:07:3E:21:8D:37:D8:B0:76:12:15:31
X509v3 Authority Key Identifier:
keyid:F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b6:3e:c5:fc:94:95:cf:71:f0:2a:e4:3c:19:30:30:d3:32:
02:15:5b:e7:51:d9:0a:1a:9a:c2:e3:8c:3d:cf:34:6a:7a:06:
b7:17:0c:48:cc:4f:92:0f:9c:af:0a:1b:e0:23:2a:bb:d9:be:
37:e3:ec:42:49:66:0b:1b:b6:f8:83:d6:5f:9d:6d:58:80:76:
95:47:10:57:19:5e:8b:a8:4c:6b:a2:99:d6:f3:9a:f6:52:1b:
89:71:99:33:0c:d0:e6:0d:e9:a1:52:bd:07:0a:a9:1e:7e:70:
5b:c5:a1:b1:db:d2:a2:e6:a4:a4:de:7f:55:36:72:6f:e1:4f:
81:d4:63:73:fc:8b:c6:f7:c5:65:e4:67:12:09:b9:d1:c0:3f:
e4:25:ba:6e:e4:16:8d:dc:23:28:99:77:f7:ad:b8:d1:1f:c3:
53:78:21:88:02:fe:3c:84:f4:bd:08:9b:48:2d:37:bb:e0:46:
0a:6d:04:99:12:66:de:4c:46:6c:3f:1a:f5:3e:d6:4d:83:4d:
fe:b2:95:62:40:0c:61:e8:fd:c4:55:d3:f9:1f:0e:8b:e5:f2:
11:04:61:ad:0e:a6:39:f6:d3:81:ad:82:25:23:9f:b7:be:2a:
c7:45:a6:f7:6e:34:42:d7:08:a3:b0:bd:22:1c:73:59:c3:96:
c1:07:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:22 2026 by rpki-client