Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: fzN3xe58886K7cQ3/oL5OOoptk2aVaR8RGvqB/6epuM=
Subject key identifier: AF:C9:05:90:37:25:68:61:B4:71:47:EA:5B:E3:FC:D3:08:74:CD:9E
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 019D2A72D2FA74A234D13FBC93228842BCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:01:01 +0000
Manifest this update: Thu 26 Mar 2026 14:01:01 +0000
Manifest next update: Fri 27 Mar 2026 14:01:01 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: rX36/+nRROC1kccYBoFM0tJJJoUVjHeRe8utlMEa9/Q=)
2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d2:fa:74:a2:34:d1:3f:bc:93:22:88:42:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Mar 26 14:01:01 2026 GMT
Not After : Mar 27 14:01:01 2026 GMT
Subject: CN=afc9059037256861b47147ea5be3fcd30874cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:2e:9a:07:3d:58:4e:85:13:9b:25:58:34:
cd:35:51:9c:b0:91:89:4e:1b:c0:a0:a5:72:eb:0d:
fa:39:53:2e:d4:71:9a:99:bc:12:b5:1d:9c:3e:84:
7e:2a:9a:d3:9e:f4:6e:b1:89:b5:49:53:01:b1:a7:
ad:af:3b:40:e2:52:f0:ad:2a:ac:01:f5:89:b4:0a:
9a:b9:0e:b7:13:81:47:19:17:e4:09:72:e5:22:74:
cf:5b:33:f9:90:2f:c9:e1:d6:e2:47:e9:c3:2e:57:
ad:40:da:ea:b9:38:af:8b:fa:66:62:d2:a0:4b:70:
ed:2a:7c:73:6f:07:48:e1:af:af:27:9e:17:e3:ff:
a3:1e:d6:e5:40:0a:95:6a:57:ed:a5:a9:2a:de:66:
6b:49:ab:78:fa:20:9d:81:0f:fa:c5:1b:40:ae:05:
ea:45:12:21:9b:61:f0:e0:5b:aa:51:ab:43:da:de:
83:f4:47:b7:2a:4f:b7:6e:6a:a4:e0:a8:b5:a5:88:
ba:4a:55:12:1d:42:5a:0b:13:d1:0f:1e:9a:83:c0:
9b:01:19:aa:56:dc:79:ef:9a:ea:d5:af:52:32:15:
11:ee:a0:41:ca:10:b8:c9:f8:33:70:c4:1b:d6:c9:
09:4e:ce:91:ec:2f:75:99:f1:15:c0:a8:d8:48:39:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:05:90:37:25:68:61:B4:71:47:EA:5B:E3:FC:D3:08:74:CD:9E
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:fa:ba:0a:34:d9:f3:f6:a5:0a:c3:07:d5:1d:0b:30:de:
b6:11:99:ca:37:d9:95:7f:ec:94:8c:ef:5e:74:96:ea:55:b2:
83:3e:84:cf:99:6f:43:1d:4a:e7:75:16:bc:1d:86:0b:68:75:
99:23:bc:4b:7f:08:93:4b:23:1a:55:27:87:b1:5c:3d:ec:39:
03:81:68:ab:d5:f3:ae:81:16:b3:9f:1a:bd:67:5c:d5:8f:9f:
5e:b2:04:63:36:df:4c:d6:53:80:e0:98:99:d2:11:c0:90:a8:
98:87:b1:61:2b:d0:7c:ca:ca:a9:bb:43:fd:af:8e:20:d5:b5:
35:87:c6:81:26:6f:32:80:58:52:4a:54:29:87:76:8f:42:88:
97:4d:ed:36:13:e8:f4:a3:e5:d3:ae:63:0b:19:e9:ad:9c:f2:
a6:8c:43:6e:7b:8a:1f:29:08:77:ec:89:64:be:d0:8e:ea:ab:
ad:f3:f3:45:f9:bb:0e:3a:13:ab:26:f2:ed:6e:56:ec:c1:db:
e9:89:12:c4:8a:bd:55:77:cf:85:fe:f2:f9:1a:cf:31:8c:70:
71:22:13:d1:b6:0d:74:30:6a:d7:a4:88:75:ac:45:b4:6f:fe:
5e:19:d7:75:e9:05:a4:b6:97:ef:d6:cd:1e:5e:12:2a:df:94:
90:3b:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:31 2026 by rpki-client