Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: lPhARvvNF8nsPKq0CWAV1yp/WItQcTiZIfQClKwZo98=
Subject key identifier: 36:20:2E:73:5C:5A:A3:C5:2B:EE:3C:60:19:3E:A6:74:93:93:73:93
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019D28BBB1D9262BCEEE4915F8F1B62F9EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 059B
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: C4OBwD+IOsIR9bbOFIQY8/KlT7ixlNPg66M8esA7dqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b1:d9:26:2b:ce:ee:49:15:f8:f1:b6:2f:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=36202e735c5aa3c52bee3c60193ea67493937393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:e5:01:e4:85:40:2e:c8:5f:66:c9:51:a6:
e1:5c:a0:88:b8:9f:b8:c0:1f:e3:4b:ed:87:f2:22:
12:7d:59:25:a4:60:eb:3a:2b:8b:9d:61:dc:42:42:
9d:7d:ef:35:26:fc:5d:a4:6c:06:a5:e3:06:05:d7:
c4:d0:5e:87:05:c8:25:29:bc:c2:51:fd:11:5f:44:
6b:bb:3d:fd:51:cf:6c:d9:8a:c1:a2:9b:93:34:c5:
91:9e:2c:1e:6b:5c:08:8f:ce:55:63:db:a1:e9:29:
26:37:4e:97:2f:e6:b2:36:1d:87:7d:6f:a5:0c:e4:
c4:2a:2e:f9:7a:f0:27:49:3c:76:e0:09:03:9c:1e:
ea:2b:a7:7b:25:86:42:77:8e:d0:a9:1e:f9:de:2b:
1e:00:15:4e:f0:e8:de:ba:ed:a5:88:92:4d:90:e4:
e4:fc:06:bb:6d:1a:bf:bf:e2:40:81:a9:4d:68:9b:
77:b1:31:76:7c:ec:c4:e9:85:70:0b:89:4c:e1:6d:
6b:fc:91:bd:2d:e0:9f:d2:30:9e:d5:18:7e:dd:17:
df:4f:fc:79:1b:2a:ea:2f:56:84:d6:5e:7c:e4:b7:
9f:95:d3:de:d1:0a:82:3d:e0:2b:23:c6:a5:7d:94:
33:c4:cb:47:d0:38:a3:d7:da:d4:4b:d4:b2:d7:b2:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:2E:73:5C:5A:A3:C5:2B:EE:3C:60:19:3E:A6:74:93:93:73:93
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:ad:28:8e:64:f2:bc:e2:02:99:4e:c8:9c:2b:ad:fe:a8:
bc:dc:fb:d7:2b:2c:31:0f:69:d0:d9:77:a2:dd:49:98:49:6d:
0f:97:08:98:26:43:10:6c:4e:18:e1:b3:4c:b7:c2:d9:da:92:
b5:77:52:dc:d6:05:f9:a4:25:34:08:75:b0:ea:c8:1f:14:c8:
9a:53:ad:b0:74:be:29:ed:dd:d5:81:8e:4e:94:22:3a:75:62:
71:60:eb:a4:ae:a9:a7:f5:7b:eb:cb:c1:93:6b:dd:27:98:9d:
1b:fe:97:bf:39:bf:98:78:44:09:2f:d4:76:2d:03:cf:71:fb:
1d:af:a2:60:e1:8e:ca:a4:23:ba:c7:f1:fc:80:a3:cd:b3:98:
5a:0c:a7:6b:21:cf:15:86:89:0d:3a:57:b9:9c:48:b7:f2:e7:
8e:b9:20:83:4d:c0:d4:e3:06:b0:03:85:5e:6a:bf:c9:6b:31:
f1:5f:25:cd:db:9a:be:76:92:57:52:ff:43:68:94:cd:77:33:
f5:24:92:49:87:dd:f1:bd:97:66:11:39:42:2e:d6:37:8a:7b:
f5:69:74:77:81:b7:32:5e:8a:cc:ba:8d:84:9c:94:bf:3c:29:
11:a1:83:2c:1e:62:af:21:76:c6:8f:38:2c:a4:35:e6:98:f2:
a8:2c:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:54 2026 by rpki-client