Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: HdXYTs/vYiS5Tn+1zXejN2haDywBzVFFh2bbRQUEpSg=
Subject key identifier: A8:D9:6C:F5:D0:0B:76:AF:60:33:1C:66:6F:B6:D6:F9:48:66:9D:7A
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019D2771CA3C8AC80363EDF11880F03EC1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: bx41ZocqTSImKW7jm0scsTyTKD+WziHhJ++ggtK7A2s=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ca:3c:8a:c8:03:63:ed:f1:18:80:f0:3e:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=a8d96cf5d00b76af60331c666fb6d6f948669d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:b8:f2:57:fe:56:c5:36:6e:15:84:4a:28:
90:db:13:7b:9e:39:d8:f2:19:67:37:4f:8d:bb:64:
02:91:26:27:bd:15:c4:82:12:6a:75:46:fb:68:36:
de:9a:26:c4:7f:85:ae:7f:62:61:73:4d:43:01:50:
3e:ce:f9:3a:cc:46:8c:9f:40:41:7c:06:b5:bf:9d:
ac:fc:cf:5a:72:b9:c8:17:f5:f2:1e:ff:30:5d:f5:
dd:50:6d:f2:3f:7a:90:d3:53:19:fb:f2:29:10:c3:
20:d4:91:76:5e:d3:54:8f:d3:68:c9:aa:53:0d:05:
87:90:b8:d0:90:a1:b3:f0:e8:87:b1:7c:ef:ca:0d:
2a:a8:43:22:dc:a1:59:46:fe:ad:9c:86:d3:5d:cd:
97:7d:bc:00:5a:9c:fa:fe:a6:bd:80:c0:a3:06:04:
19:60:19:6b:86:72:d3:35:24:4d:6b:7c:ba:2c:32:
f3:b1:d9:c2:65:85:79:d7:01:a0:76:ee:90:7d:01:
e4:0f:9c:79:22:14:ee:b2:e0:03:9f:47:26:0d:ed:
b4:86:cc:3f:09:72:64:65:3c:cc:3d:3e:70:5a:32:
8f:05:e1:f3:01:c3:aa:1e:80:7c:7c:e8:9b:39:cf:
66:c2:f1:5b:37:b7:ae:75:3b:e9:e8:e1:ac:31:8e:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:6C:F5:D0:0B:76:AF:60:33:1C:66:6F:B6:D6:F9:48:66:9D:7A
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:85:2f:80:06:07:7d:a7:4a:9f:f9:6a:ba:4f:b1:95:17:
13:77:89:81:ab:d0:f5:64:dd:d0:f6:c7:25:0d:aa:5e:d7:2f:
27:9d:c2:e1:15:30:00:3f:ce:5d:98:07:00:7a:c2:50:80:58:
b2:bc:61:95:1c:1b:84:48:46:91:70:1d:48:2b:41:b6:64:66:
14:48:1f:41:11:7d:0e:fc:18:f3:47:05:65:eb:a3:df:72:e6:
f3:15:28:91:fb:1e:9b:86:a8:b9:6d:43:66:bb:d3:d5:56:77:
f1:78:56:d8:63:97:97:d9:6b:72:7b:a9:b9:9a:61:42:de:d5:
20:16:03:9e:4e:2c:e5:5a:75:72:bd:52:01:4d:21:0b:a4:e0:
5c:fe:d8:52:1c:14:31:66:83:23:fa:8d:33:19:76:35:61:ef:
49:a0:f0:fa:b9:ff:34:a9:5a:19:1b:36:c6:f5:7b:66:2f:fe:
e4:fc:b9:0b:ab:fc:4d:c3:60:cf:db:fb:bd:90:bd:cc:f8:42:
d8:82:96:c6:23:47:3d:fa:ce:0f:d4:40:94:43:de:81:22:10:
a6:54:dc:80:d4:29:a0:a2:d6:20:56:ee:f5:93:2a:22:d4:45:
6b:85:e2:34:78:d2:3a:43:6b:09:25:99:c6:83:67:fc:9e:1f:
3e:63:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:30 2026 by rpki-client