Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: mLDZSBFA7A77GIHaX1nQtodSqEVDEmsBy+0myj8GbHk=
Subject key identifier: 56:9A:CE:22:E9:39:23:F5:D5:CF:68:D7:BA:02:68:B1:B5:FD:BC:82
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019D2583D374CC1A93BD48FC6D20B91B8049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:01:29 +0000
Manifest this update: Wed 25 Mar 2026 15:01:29 +0000
Manifest next update: Thu 26 Mar 2026 15:01:29 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: VL6JB3WZ+sGRr/qGOopEkGkerbRyyI/AGqLkqM1A7Lo=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d3:74:cc:1a:93:bd:48:fc:6d:20:b9:1b:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Mar 25 15:01:29 2026 GMT
Not After : Mar 26 15:01:29 2026 GMT
Subject: CN=569ace22e93923f5d5cf68d7ba0268b1b5fdbc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:0a:b7:8e:b5:6e:b3:08:d8:f5:61:0e:9b:
36:07:2c:64:29:c1:a1:e1:e2:b6:6b:3c:e3:c3:0d:
6e:3b:8b:48:49:2d:dd:62:8b:b3:61:0c:7f:07:4a:
74:a7:7b:e9:21:0b:3d:ca:0a:74:a0:70:a8:f4:8b:
a5:9e:f2:4d:70:cc:b3:11:e3:03:ce:3e:57:1a:5c:
6a:4d:f2:5b:6e:1c:d0:d8:9e:41:29:4f:b8:1e:27:
2b:16:3c:9e:92:c9:3a:6b:7c:f3:93:9e:25:ea:e6:
b2:95:be:99:ef:6d:d9:81:cf:2a:6d:52:0a:c4:b7:
b3:bf:fb:1c:c8:fb:31:72:8d:ac:96:72:a5:c9:e5:
48:ed:19:b1:99:21:3c:0a:72:08:9a:b8:77:d5:ec:
1c:0c:1c:f2:62:48:d2:d4:a9:01:9e:a4:01:72:5b:
aa:3b:87:f9:80:e3:a2:cf:82:18:fa:d3:9a:6c:9f:
e8:9f:37:e6:ca:7b:ad:05:81:25:83:63:17:07:de:
a6:a2:65:66:86:8f:8b:1b:e9:99:ee:e0:65:69:fb:
ae:d1:f6:52:24:e4:c2:67:1d:a3:b2:0c:d5:3c:78:
52:fe:5c:1d:11:08:42:5a:cd:0e:be:24:f3:f6:03:
f1:d9:5c:43:81:8e:38:c3:39:c4:cc:39:bf:8e:50:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:CE:22:E9:39:23:F5:D5:CF:68:D7:BA:02:68:B1:B5:FD:BC:82
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:7d:95:d1:e7:4b:38:d7:f8:39:cf:74:00:b4:07:2d:d2:
46:8e:38:d8:64:b5:e8:95:df:a3:0c:ae:30:a9:a2:13:d6:8b:
60:15:29:61:fc:70:ab:ad:61:75:d7:1a:8f:a3:f0:cb:98:33:
ce:e5:8c:11:dc:f8:a1:00:38:e0:91:d7:75:c4:10:13:1e:a4:
be:08:33:7c:e8:6b:04:56:6c:56:8c:8d:50:54:22:df:7c:62:
57:19:f5:8f:db:f4:1b:45:4f:45:ef:6a:25:ef:5a:cb:3b:24:
15:39:b8:4c:88:ec:9d:63:bf:9d:6f:92:7c:77:4b:a4:60:4b:
dd:2e:6b:bc:ea:0f:69:99:0b:46:b8:1f:75:d1:d7:bb:7d:c3:
2b:c4:dd:5f:b5:a4:48:88:da:11:60:5b:8b:cb:3d:4c:86:3c:
4d:67:4e:10:6e:ac:e7:f9:98:27:db:a6:83:f4:b1:35:2a:b7:
6e:c6:09:8b:e1:37:9f:47:97:d9:81:d7:1c:2a:19:49:c3:3a:
11:eb:fc:73:d0:a2:ae:b3:6c:df:2e:6a:dd:0c:e8:5e:33:41:
e5:cc:55:0d:a8:32:58:5c:41:b0:00:6f:18:46:5b:19:27:dd:
66:22:b8:c3:e7:15:21:7e:06:57:a6:b5:25:fe:97:d3:00:67:
7e:e1:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:00 2026 by rpki-client