Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: LQg8iGDbEHEFWl1c6Edf8lwLXx70J8F060C+bMiwP/g=
Subject key identifier: CE:44:FE:2E:C5:A5:7E:76:A8:46:38:D9:15:D9:71:33:37:43:36:84
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 019D2929A4EE1C774794C13A658CAD261241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: HJnj8_fGCoJyE1urHv4cHdz9YF0.roa (hash: vG8U6KbBLWi3A5le7qHak88pNNLwlA0sSunnRfJLuks=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: jTmDUszHdoFuY/mh+c24R1AoDquEysF2HplfocFzIkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a4:ee:1c:77:47:94:c1:3a:65:8c:ad:26:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=ce44fe2ec5a57e76a84638d915d9713337433684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:ac:03:63:46:d6:ce:36:c2:79:c9:03:00:
26:20:16:43:6b:a9:41:62:70:7f:8e:61:b7:5a:27:
e8:50:f3:c5:f6:e1:fc:65:0d:9c:d7:43:2b:ef:50:
25:0f:db:4f:63:11:99:a1:69:9d:4e:6b:d0:4f:c1:
9f:fc:57:4a:22:74:2b:01:3c:99:7c:90:81:07:8c:
76:d4:54:aa:7e:3d:2e:f4:ce:c7:a5:74:26:4a:ce:
c7:e2:70:01:bc:56:5d:ad:10:c2:75:56:b8:63:ce:
53:12:d4:29:ee:a8:d4:81:43:5c:7e:d9:ea:65:1b:
70:48:51:56:6b:ec:f8:07:e5:3f:78:79:29:d8:ef:
5a:ec:ed:f7:50:5b:fb:12:99:39:65:71:16:9e:84:
31:ee:c8:78:cf:64:ea:53:7b:b3:65:7d:74:74:41:
e1:96:f2:bc:53:55:c4:f7:5c:15:32:81:6a:f8:7a:
3d:06:26:36:10:7a:5a:2e:cd:63:3e:8a:d2:44:2b:
81:2c:59:e9:ab:bf:98:27:ec:9a:38:c8:22:71:af:
6b:fa:c9:6b:c8:cd:91:92:07:7e:48:2a:d5:88:62:
b9:fe:fe:7c:7c:c3:f2:23:93:37:90:4b:e5:a7:24:
8c:95:59:91:47:a9:e1:d7:36:80:00:80:e9:17:44:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:FE:2E:C5:A5:7E:76:A8:46:38:D9:15:D9:71:33:37:43:36:84
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ee:c3:f9:90:89:16:ad:d7:a9:b4:7f:6e:17:21:be:69:52:
1b:31:e5:25:ea:31:7a:60:ad:e8:d5:51:1f:dc:18:b5:6a:45:
61:11:05:46:72:6f:e4:66:9d:02:db:08:46:a0:03:25:3d:9a:
6f:99:fe:ac:52:55:57:53:d7:f1:0a:26:f6:7e:7b:28:78:a9:
c7:db:bc:77:4b:17:32:2e:06:ba:25:92:69:e9:67:30:57:a7:
c2:c4:39:39:de:68:35:2b:bc:11:36:a1:96:53:c5:f4:80:e0:
b6:ca:0b:ca:28:8e:89:15:47:55:97:7a:dd:83:ac:53:af:66:
12:c6:8f:4b:a1:01:d2:13:22:c3:10:d7:a2:78:ae:21:91:f5:
34:53:cf:ad:e6:d6:93:57:a6:85:2d:f4:4b:b2:f9:88:cf:c0:
99:73:c7:04:9e:b7:f3:27:58:62:37:0e:d1:ca:4d:09:5d:b1:
3f:8a:ef:45:9b:ea:1d:2c:f1:10:f2:30:75:80:89:40:05:04:
fc:b0:dc:cd:21:62:c1:9a:51:e2:8f:be:8c:e4:1b:0b:81:ce:
ef:45:da:42:f4:3c:2d:af:85:f2:b6:26:ce:67:f4:40:a9:a0:
55:26:2c:26:7d:bc:6c:e1:a7:60:dd:a8:83:8f:89:77:36:f1:
ef:ba:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:43 2026 by rpki-client