Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: R2WyU9emMJKKm0I3vHtnda5Jnw14b4cgqKPK4ffN/xA=
Subject key identifier: 2F:30:00:BB:27:8A:FA:20:27:C2:36:14:EA:C1:EC:D3:98:A6:F6:BE
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019D24A7FE0CB3F152C5CBC51E62FB67EA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 0344
Signing time: Wed 25 Mar 2026 11:01:22 +0000
Manifest this update: Wed 25 Mar 2026 11:01:22 +0000
Manifest next update: Thu 26 Mar 2026 11:01:22 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: mYLCGTS68kkw/WEn9S/UBViDRyhSXRzCSllNAAMVeIw=)
2: PbtQDuKZp0O2kz7TTK14r259s3k.asa (hash: QfB1dzSrPtkL8Nvbpv6So5aDe6/g0K32d303HcFgmB4=)
3: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:fe:0c:b3:f1:52:c5:cb:c5:1e:62:fb:67:ea:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Mar 25 11:01:22 2026 GMT
Not After : Mar 26 11:01:22 2026 GMT
Subject: CN=2f3000bb278afa2027c23614eac1ecd398a6f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:34:ca:7c:19:67:f8:6b:a4:06:9c:a4:e3:
88:67:b5:9a:6a:77:2f:ca:06:9d:c3:83:7f:49:e9:
dd:48:03:40:21:86:db:a3:0c:30:85:e3:cb:94:76:
3f:ea:d0:1b:fb:a7:16:b7:da:a0:16:ca:da:f4:c3:
65:60:06:4d:d5:3a:43:2f:9f:0d:93:11:5c:66:ec:
5a:63:0c:c4:5c:a1:73:9e:a4:55:2f:9a:3d:cb:70:
d2:fa:3d:e9:13:a8:da:c2:38:2f:83:f6:34:75:3a:
cd:3b:56:9e:9e:65:17:d2:67:21:81:d7:0d:d5:97:
d4:d3:5d:11:91:8a:f7:a1:96:d3:8e:14:1c:2b:69:
25:8a:9e:a3:1f:64:ef:00:ae:d3:e9:4d:dc:9f:fd:
5e:f8:b2:d9:af:63:56:ea:a2:2e:ba:38:95:df:c8:
ba:21:b6:e0:bd:c0:b2:42:56:a3:07:64:d4:22:5d:
d8:8e:9f:fe:b2:de:e0:34:40:eb:fd:90:e0:8f:2f:
cd:b5:93:39:64:bb:1d:1a:9c:61:43:d0:61:eb:27:
30:5f:99:ab:39:7e:70:bb:1f:08:d8:6a:1c:4b:15:
58:6c:57:83:d4:9e:f9:a8:f1:ea:b3:ec:ff:3c:3e:
33:39:cc:99:4e:b2:09:9a:06:32:78:b8:c5:46:81:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:00:BB:27:8A:FA:20:27:C2:36:14:EA:C1:EC:D3:98:A6:F6:BE
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:d7:c8:d7:b5:10:20:68:99:61:25:56:01:b4:61:51:3d:
3c:79:a8:d6:0f:3c:15:b9:aa:7e:4b:f0:5c:38:00:fd:ed:b1:
68:27:17:ef:25:93:2a:6c:f0:b7:75:60:78:a4:64:2f:24:96:
c5:39:a5:11:8e:96:52:a9:7e:db:2d:8d:eb:bf:14:55:02:d4:
94:09:72:2e:6b:51:8e:fd:88:b7:aa:07:ba:52:64:eb:d4:f3:
cb:f1:72:4e:ff:41:0a:3c:1b:4c:a1:d5:bc:ec:d9:76:dd:7f:
2d:1f:a6:ba:8e:d1:26:67:59:0f:43:aa:e6:5b:31:0b:ca:89:
54:08:94:a5:d4:fe:49:ed:12:cb:83:aa:06:0a:5e:e4:73:da:
64:97:5a:4b:ee:c8:bd:99:69:b8:32:0d:71:f0:56:c7:a7:74:
2c:08:39:a1:26:ad:74:cd:0a:f7:84:4b:60:41:d5:a0:18:2f:
f6:c2:61:b9:83:ac:0e:58:08:e4:f3:96:dd:dd:1c:bd:82:cb:
ad:73:b6:83:a8:0a:2c:a6:04:a5:9b:cb:0c:89:9e:27:76:cf:
60:9f:61:92:51:c0:2b:aa:f3:e0:29:e2:f7:5a:62:bc:29:10:
ed:d9:41:94:0e:6b:6a:b8:cd:5b:80:49:38:94:e9:25:5d:e0:
79:d4:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:53 2026 by rpki-client