Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: MYhu3iB30RZLil55wkig1eTFEddeyqnNjKymb4Wqbbc=
Subject key identifier: 64:90:34:3A:FD:6D:F8:26:D4:C4:21:BC:33:A0:89:F8:DA:07:43:01
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019D27DF9CE7372B7ABA0216F09D6D33A67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0822
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: CDvNWVd7feRxINF1iGF2TotcBghZokXsAsN7WyAQNK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9c:e7:37:2b:7a:ba:02:16:f0:9d:6d:33:a6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=6490343afd6df826d4c421bc33a089f8da074301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:7b:9b:16:1d:01:2d:2f:6b:d0:6f:1d:ce:
a2:2b:96:0a:a3:af:82:d6:d5:de:9a:54:a3:f9:70:
75:aa:ec:29:35:25:9b:bf:04:53:1a:3d:ff:d9:2a:
32:40:01:6f:89:e0:1b:a9:5f:97:80:27:5e:18:d8:
b3:a5:de:bf:47:3a:c9:d0:34:d2:08:27:08:a1:1e:
17:7b:c7:41:ed:81:8f:59:8b:77:3b:4c:bf:6e:77:
70:b8:ef:d9:e2:e3:6b:cf:c7:9c:4c:d0:db:94:25:
ce:f7:74:b8:c4:6c:0a:28:95:65:ee:d9:be:91:60:
49:e9:b4:49:a6:84:e1:34:fc:b9:0e:60:68:49:a4:
4d:95:54:9b:de:f9:b8:30:ae:1d:32:bb:99:b3:5f:
59:ae:1a:13:23:1b:fe:1e:76:26:e4:c2:39:69:d1:
77:4d:d6:c3:bb:41:30:08:ab:2e:48:be:9e:c8:a7:
5f:7b:99:aa:ca:8e:54:a7:64:57:94:13:1d:9f:93:
80:cc:d7:68:53:b0:79:58:ba:f3:8c:9e:38:bd:21:
cc:90:61:b1:8c:7b:49:fa:53:42:69:42:b7:6c:0c:
87:e9:26:1b:78:e6:d3:c6:8e:a3:4f:1a:c8:f9:a8:
95:87:d7:3b:67:c9:2a:6b:94:9c:c8:06:2f:2e:66:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:34:3A:FD:6D:F8:26:D4:C4:21:BC:33:A0:89:F8:DA:07:43:01
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:b9:57:e7:0f:e8:70:23:1a:2e:80:7b:de:cd:c6:d1:ef:
f4:cd:0e:e7:86:50:b3:ae:66:78:a0:9f:4c:50:f3:5e:aa:f7:
cf:ec:a1:bc:e5:f0:c5:9a:8a:c5:e9:2f:16:9a:ed:8f:ac:f8:
2e:92:4c:bd:e4:d3:7d:0d:64:78:6b:54:14:c0:d5:21:a8:20:
ad:dc:b5:31:90:bc:b6:99:e3:40:cd:71:32:0d:38:51:5f:6b:
39:33:86:cc:ae:0c:15:41:09:69:ca:17:cd:3d:6a:4f:91:5c:
90:e6:3b:75:4c:77:e1:34:c9:92:23:20:44:c7:ba:1f:61:fe:
21:3b:82:40:fd:48:57:b5:2f:fd:c6:51:f8:33:e5:e4:d4:ac:
62:38:96:ba:f0:ee:f1:7d:72:96:a7:47:a3:97:69:6c:01:07:
92:c3:76:8e:21:ca:5d:28:e2:eb:51:46:6a:91:0b:3e:7c:f8:
67:28:45:49:19:97:df:7a:4c:12:84:59:10:f7:c7:5e:08:59:
06:8d:df:9f:f3:98:53:25:60:81:05:2b:f4:88:ad:d3:2d:50:
66:aa:02:3e:4e:6d:2c:a6:7c:7f:81:e4:3d:bc:1f:16:ce:21:
2c:f5:79:b9:7d:c3:c9:e6:7c:bb:c2:ac:09:c3:d0:93:83:39:
1b:8d:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:59 2026 by rpki-client