Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: EcBPlBf4YnMJvwdbw8Ob/op2N0MzLrU/Cc7DW/civis=
Subject key identifier: 84:7F:AD:46:E2:05:AA:83:3D:6B:DF:AC:42:39:A4:66:4A:3E:92:43
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019D27E06D35DE6439F0BBF333FAAE81B8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: oSbS1r08zJvM5V+XRXCDQ5j5189qUvNRnuDxmciUfWc=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6d:35:de:64:39:f0:bb:f3:33:fa:ae:81:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=847fad46e205aa833d6bdfac4239a4664a3e9243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:c8:0e:80:cb:62:d0:5f:dd:64:0f:ea:86:
c3:5e:cc:50:74:4f:b7:28:d7:08:dc:89:a6:a4:9b:
a3:d6:3a:01:ae:6e:57:13:0c:c5:f6:46:e7:06:fd:
bf:f6:13:a2:0a:0e:45:1e:74:7b:35:eb:a5:0b:46:
a9:c7:61:65:62:33:54:28:31:39:51:e8:82:2d:4c:
50:3d:5d:dc:76:a5:39:e4:87:42:e8:8f:91:a6:dc:
a4:4f:10:f7:19:29:98:5a:c4:eb:ba:f2:b1:ea:e8:
76:07:90:ca:ac:b9:ca:7e:24:74:5a:02:92:7f:5c:
a5:04:c3:2a:ea:89:06:5b:70:29:ee:77:d2:9e:da:
b8:0d:eb:de:69:8b:8c:0a:52:2f:7b:18:14:61:31:
06:57:aa:63:f9:c0:9c:7a:9a:bf:5e:9e:4f:fc:7e:
2e:14:94:71:4d:5a:7a:d2:aa:c6:75:50:86:b4:f3:
cb:8d:a9:ab:d5:c4:c4:e4:60:6d:87:5b:62:a0:cd:
f8:e1:c8:1d:68:7f:35:22:99:4c:b1:a6:6f:bd:47:
37:f2:20:63:bd:70:32:c9:6b:f6:fb:91:26:13:99:
9a:d5:19:ab:c2:91:a6:43:0f:ba:f7:ab:9a:06:da:
27:d0:cf:4a:78:34:b8:9f:6a:b9:37:bd:e9:44:b5:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:AD:46:E2:05:AA:83:3D:6B:DF:AC:42:39:A4:66:4A:3E:92:43
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5d:0a:f1:b5:d1:eb:b1:6a:c8:43:05:21:a7:da:15:88:da:
21:6f:9f:25:ef:e2:a1:f8:cc:44:d6:a6:c2:2b:78:8a:a9:f6:
60:35:a2:90:cd:11:75:0c:c0:9e:e5:8b:31:c5:28:73:53:18:
99:1c:20:cf:31:9f:f3:43:2a:f5:b4:a7:fd:3f:77:a8:a3:0e:
24:a2:ad:d6:9a:2b:13:ca:d5:e7:d0:59:9b:d4:e4:3e:5f:75:
fc:fa:43:1c:1a:35:3e:9e:1e:ec:51:cc:6e:8b:a4:bd:4c:24:
1a:d6:e0:8a:e9:f4:33:f5:76:75:07:99:4b:7d:2b:45:a1:9c:
48:84:de:da:10:fd:91:74:f4:b5:12:35:86:e1:d0:95:11:bb:
fd:ab:59:fd:95:05:67:80:86:6e:fa:53:ad:e5:3a:57:b4:e9:
40:df:72:61:d2:2f:c8:2d:68:83:3f:17:6f:82:4c:6c:a9:7b:
eb:0a:5c:47:b9:e5:0d:bf:51:69:40:24:c4:a9:1b:c2:56:a3:
28:b7:97:66:d8:2e:07:c1:04:04:05:61:6b:e8:a2:e2:2c:e5:
80:53:b7:99:a7:13:d6:37:8d:00:a8:ac:10:c6:84:d0:c8:1c:
dd:e4:86:87:91:7a:ab:3a:3e:0d:fa:2b:c7:ec:7c:9e:8a:ab:
96:a6:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:37 2026 by rpki-client