Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: o+SNJrCRm0hBtbdcvsOBUA5l2zzd1i3W8DTJmh0SqV0=
Subject key identifier: 04:21:8E:0E:17:8D:DC:18:48:8F:A9:15:F7:26:01:EB:8A:14:C4:61
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019D284DE852EF1C9D0D45344495F159DD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0663
Signing time: Thu 26 Mar 2026 04:01:27 +0000
Manifest this update: Thu 26 Mar 2026 04:01:27 +0000
Manifest next update: Fri 27 Mar 2026 04:01:27 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: N/kzhLxJaL1OoU0V9Co3Xwbd+VbDacj8EALzcOudGXs=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e8:52:ef:1c:9d:0d:45:34:44:95:f1:59:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Mar 26 04:01:27 2026 GMT
Not After : Mar 27 04:01:27 2026 GMT
Subject: CN=04218e0e178ddc18488fa915f72601eb8a14c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:6f:87:24:07:3b:ba:fb:88:2f:79:32:d2:
d8:19:5f:ae:c4:49:16:6b:ae:b4:d9:4d:5b:fc:93:
2d:3a:13:07:1b:87:bb:9c:e5:97:b4:bb:16:0c:e6:
ae:46:4d:70:66:49:c3:21:82:96:b6:fb:69:63:27:
46:5b:73:f2:b5:2d:ab:3f:93:4a:fd:d9:ca:6a:b4:
c8:5c:a4:5d:f4:72:62:37:36:ae:40:14:57:a5:87:
65:54:4f:b4:5d:a5:88:67:51:5d:0d:09:f3:70:21:
3b:7c:ec:4e:60:04:d3:57:4f:c5:98:68:15:dd:16:
f3:fe:70:fd:67:42:16:62:3e:0b:c8:3c:32:d3:29:
30:23:90:a1:fb:53:47:e7:8e:17:37:97:19:ea:34:
54:d7:3b:cd:c5:28:bf:68:1e:67:16:ec:04:82:60:
ea:e6:34:e4:51:5e:97:46:5c:95:77:d9:7e:d0:9f:
40:11:12:8e:f2:05:ba:d7:40:d7:3f:17:12:a8:50:
6a:09:c6:6f:c8:66:1d:f8:18:f9:98:d3:c9:2d:cc:
1f:90:0d:18:c3:bd:e4:9b:dd:a6:cf:99:fa:46:7f:
f7:0b:d7:de:91:4b:47:94:9d:c1:fe:ec:cd:97:c2:
3e:94:76:a1:8d:4e:4a:d6:a8:59:08:b6:51:ab:70:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:8E:0E:17:8D:DC:18:48:8F:A9:15:F7:26:01:EB:8A:14:C4:61
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:a8:97:6d:4f:63:4b:51:6f:24:f0:22:b6:b2:b1:c2:1f:
e2:38:d6:6f:d3:d4:d8:7a:b6:72:ed:50:ab:8e:e6:92:71:07:
9f:92:c0:e0:db:86:6a:df:44:4c:63:c9:32:c9:79:40:bd:d6:
2a:61:f8:a9:ec:26:71:ce:5b:93:7d:d9:ae:6c:d5:92:28:03:
87:97:88:ae:7c:a9:22:d3:e7:e9:65:65:83:44:9e:dc:c7:6a:
b1:02:1b:21:96:a7:63:ed:ec:f6:52:33:e3:ce:6a:6f:3b:42:
e4:8c:15:5e:ed:dd:64:1b:9f:f4:36:8e:99:21:9a:15:d0:df:
1f:e7:77:2d:8a:b4:9e:a3:d8:7d:62:41:df:bb:89:7c:69:14:
83:8d:58:71:ef:35:97:d2:ae:e9:87:14:e2:8b:1b:57:bf:69:
41:0a:09:51:95:42:52:9b:f0:55:6f:52:10:16:26:79:5f:83:
49:43:96:b5:2d:46:00:b9:b5:65:a4:00:3d:42:bd:f5:92:f8:
c8:0c:03:0c:01:85:98:7d:80:e5:5f:e6:1e:b6:20:6a:33:dd:
db:ff:34:dd:bd:61:19:6d:59:47:4f:95:4d:29:b2:45:03:ab:
de:a2:8b:2a:32:ba:9f:a2:d3:99:34:8e:93:2f:14:27:c4:8d:
c9:e2:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:48 2026 by rpki-client