Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: Etnm3BYJsYmeIdsHmGtuVbXU+sWJ011huLIsqqbtNAM=
Subject key identifier: D1:B2:20:5F:33:9A:10:DE:0C:B5:DB:0D:12:32:5B:1D:C1:D3:41:33
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019D27A90AF2EA5FDEACC15052712ABD4189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 12D0
Signing time: Thu 26 Mar 2026 01:01:22 +0000
Manifest this update: Thu 26 Mar 2026 01:01:22 +0000
Manifest next update: Fri 27 Mar 2026 01:01:22 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: vdp48x4vWm40G6ABZ9JRH4BJLEBnwJb7cKuSd0Jjll8=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0a:f2:ea:5f:de:ac:c1:50:52:71:2a:bd:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Mar 26 01:01:22 2026 GMT
Not After : Mar 27 01:01:22 2026 GMT
Subject: CN=d1b2205f339a10de0cb5db0d12325b1dc1d34133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:1d:b0:b5:a4:dd:bc:53:fa:3b:ea:d1:56:
32:3f:a7:a7:e0:10:75:0a:7d:e0:4c:dc:74:e1:a1:
8d:21:15:67:f7:3b:dd:c4:75:15:5e:79:fa:2d:3d:
a1:67:8c:b4:2c:6b:b9:35:40:1f:6a:bf:e9:28:79:
ba:0c:d2:6c:7d:d5:ed:4b:bc:64:1d:d8:cb:ee:69:
d9:98:28:e7:ac:08:bb:ea:bc:8c:73:b9:07:02:4a:
7a:48:37:ea:d3:3a:e6:50:90:05:14:91:06:82:84:
84:d9:64:d3:3f:55:bf:05:31:79:32:99:fa:8b:2c:
51:22:38:29:63:a4:93:3f:e5:23:08:0a:69:df:92:
44:e4:d7:bb:30:6b:75:ac:6b:d9:4f:ec:61:9b:52:
0b:2b:1b:10:43:b0:a5:25:3f:21:a5:b5:ef:49:68:
ad:d3:39:05:e6:65:a7:d0:c6:d2:8d:77:13:e1:07:
7b:d9:86:16:32:bd:46:da:c6:7f:db:75:7f:b5:ce:
3f:66:9d:57:f9:d9:87:86:2c:99:42:fa:cb:79:a3:
97:54:d9:ec:34:fe:43:14:bb:ef:93:aa:f9:d0:bc:
9e:a9:14:a6:88:b6:f2:31:53:0c:1a:b2:70:03:97:
79:e1:95:1e:56:d1:77:f3:28:c0:f9:9f:0e:44:24:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:20:5F:33:9A:10:DE:0C:B5:DB:0D:12:32:5B:1D:C1:D3:41:33
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:02:3f:ad:8f:6d:20:47:f3:9f:33:51:9a:0d:c8:35:54:
35:a8:b2:8c:34:48:85:67:87:6a:96:9a:39:93:ff:41:5e:af:
4c:09:a9:03:97:92:94:1c:54:a2:d4:82:a4:f7:7a:ce:2a:6c:
7c:2c:79:3c:08:2f:c6:b2:6d:77:f2:da:3e:f5:95:66:4a:09:
72:72:4d:9c:bd:9f:ac:c2:74:63:4a:55:eb:b1:c9:fa:70:49:
4a:7a:37:6d:c5:09:75:57:53:1b:0c:81:7c:5a:5b:67:34:72:
ec:59:76:11:dc:c8:6f:b5:0a:ff:46:fe:95:44:dd:6a:51:d7:
7e:18:cf:f5:3e:5f:b4:98:30:c1:98:67:ab:ed:5d:a9:f1:df:
44:13:29:78:a7:97:ab:09:c6:ad:13:e2:52:51:8c:01:70:90:
f9:f7:c8:8e:51:d5:27:3c:99:5a:ac:78:1c:c7:60:0b:dc:51:
70:7d:8c:a4:d2:35:b7:72:c7:c5:58:b9:ea:64:03:01:5d:f5:
b6:8c:59:8e:4c:26:6a:0d:98:f7:35:2d:1f:b6:50:ac:0f:13:
d8:ea:9d:00:86:92:79:0c:03:aa:bd:40:ce:d9:21:bb:2a:33:
a4:52:ed:64:ea:14:02:27:64:3e:f4:ac:a1:41:10:a9:55:ed:
36:c9:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:46 2026 by rpki-client