Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: 54eqJEBpZKoJTFeJUUp3HL/CQZc9DRF3ZHoDcUG6/G8=
Subject key identifier: FA:17:74:D2:B1:F7:B4:CD:B3:A0:23:23:91:7A:40:B7:D8:91:1B:6E
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 019D26CCED7381400DDDD22A118D2304936C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: S1duhzLYVWCPzWLAVIN0U9O31sE.roa (hash: iGd5/M7wFo+vh2tNkFU7YoI/hPvzSVi7SBf4jj6Qs9I=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: BVZN+hpo/Q5EAWrTauvJW6Y4vbZUlKgAnk62O4Ua718=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ed:73:81:40:0d:dd:d2:2a:11:8d:23:04:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=fa1774d2b1f7b4cdb3a02323917a40b7d8911b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:5a:be:09:f9:1f:53:a4:4f:88:ee:b7:88:
98:45:d1:8e:02:80:30:7c:25:d1:52:f0:f1:9d:59:
4a:43:f6:ee:b0:96:d0:8b:c4:8d:2c:2e:98:92:2e:
62:1c:00:a5:22:1b:4b:32:e5:2f:63:fd:47:11:77:
cc:19:e6:be:81:7d:e7:7f:04:2b:05:8a:e7:0e:20:
b8:4b:53:08:22:5b:32:44:4f:56:2f:fd:6c:3c:7a:
7b:37:11:a6:c0:65:0b:78:a5:8a:21:b1:75:a0:ca:
01:0c:0a:6a:91:53:4b:16:c8:84:51:99:c4:a5:06:
3a:ed:de:23:cb:fe:5f:c7:de:75:23:2e:23:be:ba:
7c:3a:1f:de:e7:d1:1e:a1:5f:8b:a0:db:1f:45:ad:
1c:94:82:8b:ef:a6:46:7f:d9:47:f9:d3:1e:ba:db:
0b:2e:0d:9b:3a:52:6f:2a:48:72:c6:3e:ae:e0:13:
8a:6c:6e:40:7f:91:80:75:a4:f6:42:eb:2b:7a:d0:
a5:b2:5f:6a:df:02:06:76:32:b1:84:64:25:4a:7a:
1b:87:18:73:7b:d7:df:0b:8d:41:e5:13:90:21:d8:
24:82:ea:6b:3b:32:11:ba:46:8b:87:27:2b:8d:4a:
78:08:45:4f:85:a6:16:cd:e7:b8:e2:89:57:c4:af:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:74:D2:B1:F7:B4:CD:B3:A0:23:23:91:7A:40:B7:D8:91:1B:6E
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:5c:50:99:1e:c8:67:33:71:7e:03:b8:15:5c:78:4e:1e:
32:7c:b0:bd:de:21:96:23:7a:37:12:8e:e4:79:d0:26:e7:9a:
c3:83:fe:15:46:ec:73:ab:22:9a:03:bf:a9:4e:44:bf:68:7e:
0f:9c:33:07:fa:84:e1:24:d1:f6:f6:9c:50:89:5e:f1:8b:70:
09:1b:24:04:ff:c0:d1:a6:15:92:69:fa:60:1a:f0:e8:de:d0:
00:5d:47:ad:3d:f4:7e:4d:8d:96:c3:35:9a:fd:12:a1:60:b6:
5a:48:af:3f:ff:a8:30:4e:e3:6e:d8:0c:8e:bf:7f:7e:3d:81:
4d:44:61:00:82:fb:1e:a6:a1:14:2c:dd:d1:f2:b1:ec:b3:d0:
7f:ae:99:7d:aa:b0:d9:f4:93:c0:5c:40:37:94:fe:d6:0b:6c:
ff:3e:c6:95:1c:d4:c8:c0:13:0f:95:32:c3:02:54:f4:60:9b:
75:80:b2:e2:42:c9:81:08:89:6e:23:77:cd:8a:e5:22:c7:b4:
99:d7:4f:5a:5a:78:0e:e1:35:41:db:16:e4:1e:25:33:0c:97:
86:24:f8:a8:ef:6c:37:e0:18:7a:6f:02:c7:14:0c:45:8e:eb:
f1:bc:69:2f:4c:79:5d:94:5f:bc:f7:38:7f:39:f9:06:8b:f5:
ab:b7:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:19 2026 by rpki-client