Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: j1KzrIOvwlBbH2wsOfB47lMHg4NQDfVyxYFcBgBpCrA=
Subject key identifier: 84:11:74:FF:9E:45:44:EC:49:96:C8:37:D1:57:61:0B:81:81:D0:F7
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 019D27721E6E631C11684C13915262F86533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: PQZ0nxdVn1ZkU2iWov4mZvc2Qh7qXCGIoZSATYcirRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1e:6e:63:1c:11:68:4c:13:91:52:62:f8:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=841174ff9e4544ec4996c837d157610b8181d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:ee:d7:10:bc:ca:5e:30:b6:81:2e:19:4d:
fa:33:a5:b0:b4:64:c4:ab:bf:07:a7:ff:bd:cf:35:
37:64:5c:ab:a8:ad:0c:56:13:3c:73:64:37:68:46:
3a:b1:21:67:6a:0f:24:a7:00:a2:79:28:61:63:4c:
21:a5:81:47:ef:8e:3c:ae:23:0f:34:33:d5:6a:a0:
96:c7:5e:f9:80:8b:aa:e7:b6:2e:3b:3b:e1:da:e9:
c2:1a:eb:3d:b3:96:21:8d:7b:bc:39:22:a5:4a:37:
d3:05:d2:47:2a:56:b9:75:b4:5d:55:f1:20:ea:76:
f9:35:92:99:f5:b5:f4:c0:4a:bf:ec:37:05:12:2a:
8a:be:a8:1f:97:4c:9e:fd:0f:75:5f:05:cf:b2:b0:
ea:9d:ee:67:a8:56:9d:86:8e:be:c4:0e:87:2d:15:
61:12:7d:87:20:aa:2c:60:d8:f0:de:48:79:ed:b2:
29:11:8a:10:a9:98:ae:02:30:19:ff:cb:de:80:9c:
5b:f0:01:1a:f7:09:a9:93:c3:e6:12:b8:5e:1a:56:
29:b4:d6:7b:52:89:69:8d:a1:d5:1b:87:31:f5:cd:
bc:23:bb:25:93:93:7b:99:b5:32:0a:c7:33:22:df:
da:37:30:10:03:29:0b:72:35:de:fe:8e:f6:91:d7:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:74:FF:9E:45:44:EC:49:96:C8:37:D1:57:61:0B:81:81:D0:F7
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:fb:94:4b:05:d6:66:83:e5:a0:36:37:e3:cc:c3:18:bf:
6c:28:12:e9:5b:c5:26:d6:09:58:06:2a:82:3d:cc:e8:69:cd:
1d:95:ee:af:e3:f6:b6:23:d3:e1:d6:4a:ac:89:3c:83:4e:ab:
85:67:32:ad:99:86:3c:52:a3:5b:fb:15:4a:b4:02:10:bf:84:
14:f8:57:e2:66:89:50:5b:51:4b:53:12:43:c1:b2:76:f2:c0:
58:ee:68:70:c8:3e:4e:26:02:98:df:5a:7a:08:07:71:f1:a0:
0b:ff:33:f6:76:d7:e1:90:c4:d7:c9:2c:d5:a5:7e:69:8b:41:
81:26:41:83:c4:75:96:21:e6:de:8d:b5:ad:e7:5f:6e:d7:ec:
ad:97:6d:8a:07:e7:e4:98:28:04:d3:8f:b2:98:fb:e6:40:f7:
e6:25:b7:db:5f:a6:d3:23:ce:51:63:58:29:02:47:ed:df:dd:
b1:53:ff:0b:ba:7a:c9:0e:6c:22:0a:0c:68:43:1b:a4:d2:89:
31:bb:7a:82:15:2e:d6:ca:ed:3b:cb:b4:56:e1:6e:41:39:6d:
d2:c5:59:11:a1:2d:85:a5:a6:23:80:d6:ce:59:e4:69:0b:01:
b9:af:b8:b5:24:2e:11:9b:12:84:07:1f:c6:82:09:3a:c3:7f:
28:59:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:11 2026 by rpki-client