Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: 7f4rz/LkbqRIwNkMAjuTmR9w3a3YwpSsvydm4CccrWU=
Subject key identifier: 4E:34:6C:54:14:BD:1C:DA:61:88:C6:CE:3D:61:3F:17:28:DB:46:E5
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 019D28170BA00433F48566331451A34765B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 0254
Signing time: Thu 26 Mar 2026 03:01:31 +0000
Manifest this update: Thu 26 Mar 2026 03:01:31 +0000
Manifest next update: Fri 27 Mar 2026 03:01:31 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: zv0Ts8MI2LonK8b7MBfChkK8PkE6+xD7b+M62HdsLZA=)
2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0b:a0:04:33:f4:85:66:33:14:51:a3:47:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Mar 26 03:01:31 2026 GMT
Not After : Mar 27 03:01:31 2026 GMT
Subject: CN=4e346c5414bd1cda6188c6ce3d613f1728db46e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:3d:b5:25:e8:e8:4a:53:df:fb:72:42:15:
b1:07:ae:ee:70:62:b7:65:de:42:b0:05:81:d6:a8:
ad:e7:cd:7b:aa:b9:a5:9d:95:38:10:15:2f:55:5f:
43:1b:e9:07:54:b2:40:2d:52:f2:9a:19:9c:72:48:
bd:00:99:46:e7:b4:6c:b8:39:7f:00:c7:1a:6f:4f:
d8:45:f8:a5:7e:be:93:1a:c5:46:d9:67:a2:96:af:
30:bd:7f:77:c0:b4:e9:17:75:f9:a3:4e:2b:1e:63:
51:7c:08:54:4d:be:28:6e:62:e1:b4:cc:5a:1a:6b:
e6:01:e4:9b:5c:51:21:52:8f:0b:64:c7:9c:bd:79:
8a:08:7f:2a:f2:8c:fa:79:65:48:82:ba:fe:86:7e:
a1:1e:6f:b3:89:d1:92:84:f7:f1:32:24:18:b2:aa:
45:9b:ea:0a:79:d5:b6:ab:a0:2d:b9:29:fe:ee:2f:
af:d7:ff:54:e6:ef:03:d3:7b:ce:d1:a7:73:ab:35:
6c:1f:9e:59:55:61:1d:b9:14:2c:91:dc:9c:e5:5b:
a2:8a:69:a3:48:7f:79:77:95:81:02:79:14:52:83:
7c:8c:cf:1c:28:0c:2f:2b:d2:0e:da:41:eb:3c:07:
d4:a5:49:74:f6:56:64:58:95:c4:5f:c9:16:0e:86:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:6C:54:14:BD:1C:DA:61:88:C6:CE:3D:61:3F:17:28:DB:46:E5
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:03:18:59:f2:a6:8c:c0:45:fc:ed:c9:c3:c6:f5:c1:c2:
91:11:58:b2:8a:19:b9:4b:a5:01:41:7f:82:b2:19:98:0c:aa:
d3:a9:db:e0:77:36:cf:c0:86:d2:02:e8:28:04:49:99:43:61:
9a:a9:08:da:69:e0:75:73:ba:ba:08:d5:65:dd:16:96:a1:c0:
ef:fe:85:b8:34:76:5c:ee:03:e1:ed:62:86:c6:b7:50:4e:63:
63:06:85:2c:89:9b:44:88:01:90:31:da:0f:89:4f:b1:94:16:
5e:e8:27:a2:86:e7:b8:26:fd:65:0b:49:81:2c:07:3c:13:f9:
db:98:2b:63:cb:49:f9:c7:0a:1b:91:ef:03:cb:2f:8d:00:91:
de:c0:8f:3e:2d:a9:85:5a:7a:99:5e:95:98:f6:7e:16:b9:c2:
e1:f4:5f:eb:e9:55:36:01:5b:e7:ee:bb:a2:34:78:3b:14:7b:
69:4e:8c:e4:ce:bd:d6:7f:44:3f:a6:14:a4:b8:37:d4:cb:48:
eb:d8:28:66:0d:91:5b:76:e2:62:8d:93:53:45:03:5f:63:00:
a3:f4:5b:ce:35:b2:6f:14:30:ef:c0:b5:5a:9f:a4:11:71:96:
c5:53:85:1b:54:42:5d:b8:27:e6:45:6a:08:9e:43:dd:18:cd:
66:04:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:44 2026 by rpki-client