Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
File: u8v1S15m1hoXV2yMc2vyZy47mho.mft (raw, json)
Hash identifier: o3PKDspf/nQBXIi4TKylYuC3bPetxm6EdjyFyHv32EA=
Subject key identifier: 34:F3:AB:44:3F:3E:69:DE:80:1A:8A:E4:7D:50:B1:8E:CB:BE:F2:7C
Authority key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
Certificate issuer: /CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Certificate serial: 019D29CEBF9F7A0AB9BB48AC46164CCD7660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
Manifest number: 09E9
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: u8v1S15m1hoXV2yMc2vyZy47mho.crl (hash: dtbhIBTv22Wnrhq+M8iSldglPoFVu57tMAoaLA/8sxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bf:9f:7a:0a:b9:bb:48:ac:46:16:4c:cd:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=34f3ab443f3e69de801a8ae47d50b18ecbbef27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:e0:86:7f:b8:f4:61:b3:03:1a:7b:62:2b:
36:d0:1e:3d:f6:a7:5a:b8:9f:8a:86:62:d7:55:f4:
0c:d9:fd:6b:f5:2f:65:54:fa:87:88:fe:7a:6e:18:
a5:fc:fc:5a:a4:c9:24:33:0b:a7:ee:8e:43:16:b3:
5a:2b:9b:e5:2d:cd:73:e1:05:ec:1e:c4:f9:19:50:
1e:41:bf:9a:44:be:be:23:a2:42:83:96:b7:e0:64:
d6:51:4a:1b:f3:87:b8:0b:e0:80:ce:09:5b:54:5b:
72:a7:fc:a4:47:ea:d0:9b:3e:a7:c8:bb:f9:04:11:
82:43:98:e4:f2:20:ae:b3:07:4c:85:4e:10:70:d7:
42:03:0e:9f:0a:6f:72:49:31:25:63:97:58:5d:c7:
11:f2:51:a3:18:ba:e0:f9:2a:5e:93:3a:57:0a:01:
6a:e2:49:17:a3:5c:b8:f9:07:2d:ab:3f:5f:4c:69:
1a:b2:39:7d:e2:0a:b2:2f:94:a7:a9:0e:2a:38:f0:
25:92:72:8d:00:73:af:e8:43:28:77:4e:fb:2b:81:
1b:7b:f8:2c:30:5d:5c:df:33:45:b7:1e:7b:e6:a9:
46:2c:27:cd:e7:16:eb:46:26:77:19:34:50:42:69:
23:89:a7:e2:58:42:f5:d3:74:44:cf:75:9e:6c:bc:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:AB:44:3F:3E:69:DE:80:1A:8A:E4:7D:50:B1:8E:CB:BE:F2:7C
X509v3 Authority Key Identifier:
keyid:BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:11:fe:58:c6:c3:ea:97:df:61:c3:8b:d0:4c:61:27:49:8c:
c3:bf:d1:a9:f3:eb:83:7b:d5:d7:3f:a6:53:93:c6:9e:87:f6:
09:5d:1f:5d:94:34:39:53:b5:d8:5b:d5:9a:ff:4f:9b:a3:8c:
f9:aa:7e:5f:21:20:95:29:f8:24:0c:a1:46:27:a9:6e:e8:20:
a3:16:4e:06:ae:b7:bc:3f:61:d8:53:d5:b4:f8:69:b9:de:9b:
ac:19:8f:52:b6:41:63:70:6c:7b:67:cd:ca:bf:9a:32:87:42:
70:55:66:63:39:d3:9b:c2:8a:1b:7b:39:f4:af:38:f1:b8:e4:
80:b4:ea:6d:b6:c6:37:29:90:41:c9:5d:ab:8b:b4:70:25:b2:
c0:a6:dd:5a:4b:1a:8d:e6:36:b4:7b:28:77:98:f7:dc:ee:93:
bb:24:09:11:c3:67:f4:ba:39:af:6a:b7:7e:99:88:4d:3b:99:
30:49:b6:cf:00:89:47:62:e2:9f:3c:52:70:92:ad:6f:99:ae:
41:b1:5d:8d:81:0b:a8:a4:a0:90:a7:00:e5:1c:7e:4d:3c:d9:
bc:33:13:59:4b:e8:12:1b:39:04:6f:3a:25:2c:74:5c:76:ba:
ed:35:1f:6d:75:6f:e2:f6:82:f4:ed:b9:b9:77:7e:a5:1f:9b:
36:8c:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:36 2026 by rpki-client