Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: 9ytLJ4IAH1xJ7obL/+5h26PVawN0cjKhUn8JWQ5eGZQ=
Subject key identifier: 3D:68:70:93:0C:50:77:74:13:27:A3:D4:6A:6D:8F:B3:B9:47:E7:56
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 019D25F13894FEBEB5481ADD1B2744206E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: 8A44F-HK4brDvcdx38UFaUUZrxg.roa (hash: J1l91xAYUMrUVrPKe9o7rX2U+//nR5fojqbrmgbxxMA=)
2: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: aRIvqXI+QxGvJJcKvqJ1i8bWTpmCUBu5O+ONn1dOKlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:38:94:fe:be:b5:48:1a:dd:1b:27:44:20:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=3d6870930c5077741327a3d46a6d8fb3b947e756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:04:c9:67:68:85:cc:41:79:32:b2:41:bb:
0c:1b:0a:72:1f:94:0e:2f:80:76:aa:bd:14:8f:4f:
2f:80:d2:75:95:83:00:00:02:1e:64:a0:35:46:f2:
48:61:a0:d8:79:0b:b0:7e:02:1f:9b:2a:ac:ae:1c:
c3:78:c7:17:03:04:ad:03:92:c9:ae:b8:73:9b:90:
b7:7b:06:be:f2:ef:c0:a5:68:e0:a5:94:68:f0:49:
ad:52:a7:b6:bd:a2:9f:de:3d:7b:be:51:bc:39:09:
72:b4:e3:18:ed:45:ed:82:95:a0:f7:51:47:f5:60:
98:37:e6:54:0e:d0:31:af:1a:20:9c:8f:6a:6d:1e:
8f:ce:0b:7a:86:44:8b:75:68:a0:ce:c3:4b:52:96:
7a:99:7c:9b:78:cb:6d:7d:c6:c1:ee:6a:7a:58:21:
6d:18:1b:d2:b7:bd:73:df:b4:75:6a:83:ef:90:00:
18:bf:29:dd:d8:37:6d:7c:17:b4:c5:26:35:7a:a1:
54:66:7c:e4:9e:03:99:a6:3d:d9:65:53:fc:d1:e1:
b7:c7:a0:bd:03:11:16:c7:58:f3:0b:ae:b1:93:95:
24:87:26:d4:48:83:e8:1b:26:12:c1:3e:37:0f:a5:
68:62:38:f5:98:83:aa:e1:55:26:db:0b:15:a1:cf:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:70:93:0C:50:77:74:13:27:A3:D4:6A:6D:8F:B3:B9:47:E7:56
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f0:a7:24:9b:d0:9d:7a:5c:da:f9:27:0c:11:69:df:98:df:
43:65:d0:5a:cf:69:26:6c:6d:7a:f0:36:b8:d3:04:0a:c3:50:
c8:dc:c8:1a:52:64:46:7f:07:4a:0c:f4:26:07:df:2d:86:3e:
a5:14:ef:3f:bd:77:ae:d4:dd:7b:dc:fa:6f:e8:24:05:63:ba:
24:1b:56:57:ab:de:48:17:81:28:88:25:65:14:88:2e:23:ee:
5c:f8:e4:94:f2:1e:0a:2a:74:81:23:6d:90:35:31:bc:9a:94:
15:3f:c9:fc:a7:59:e2:7c:2b:c9:f4:80:cb:f0:70:ad:e6:64:
66:58:d4:96:51:55:fb:7a:0f:36:bd:4a:d5:79:8c:3a:bc:c0:
69:90:3d:d8:1c:0b:d4:4b:b1:38:0e:61:bb:ea:aa:0d:03:fb:
6b:d6:3c:ed:24:41:0f:48:bf:9a:77:df:44:62:91:d2:16:be:
95:40:07:81:57:54:5b:f9:87:fe:09:ad:d0:ee:5c:0a:cc:b7:
ac:bf:03:14:a5:d4:87:5c:e2:4f:6e:7e:4f:99:b8:dd:d3:27:
1d:5e:0b:1e:b7:04:ea:07:16:5a:ff:5f:4b:69:12:29:49:af:
e3:8f:7f:81:12:ec:4e:f9:82:3a:63:9b:52:cd:7f:24:0a:95:
2d:87:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:20 2026 by rpki-client