Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: /g6huKNm2zPMEs80OaU5pJqS5LbmrX74iTE/P79wnoI=
Subject key identifier: 97:74:9C:62:5A:ED:05:5C:82:30:77:34:FF:16:1E:CD:14:32:21:00
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019D270479DACDDFD12B9DCAE78FB6F4E7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 04FA
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: /C3/I9lNYlnszDbwfj/NpRIatFiaakuoATKnaOeagr0=)
2: zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa (hash: kIqOQiOgFlHvbyCS3PuGJtN+6np/Op863FpjkLwsVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:79:da:cd:df:d1:2b:9d:ca:e7:8f:b6:f4:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=97749c625aed055c82307734ff161ecd14322100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:16:e1:c5:a9:a6:2c:48:98:26:aa:6c:27:
17:f9:04:9a:23:83:0e:1a:52:57:59:5d:bd:e3:ee:
6d:26:71:98:0b:03:26:77:74:d8:eb:01:47:63:ab:
d6:eb:b5:dc:ba:48:6e:c8:52:df:4b:21:b9:b9:d9:
77:b6:51:2e:88:0f:93:13:3c:1a:63:19:d0:8d:89:
bc:b7:c4:3b:9f:7a:76:07:77:a1:5b:d1:22:ef:e2:
2c:66:1e:2d:02:e9:36:1b:c6:aa:60:a6:3c:d6:95:
44:a3:3f:64:75:51:5b:7a:81:9e:68:69:e6:29:f6:
2e:f2:e0:8f:f4:fe:c6:dc:63:51:bd:b9:90:5c:e6:
09:4e:19:14:9a:17:2f:00:6b:1b:ec:b1:2e:05:97:
4d:fc:1b:f2:85:0b:83:c2:45:73:64:ba:ac:97:73:
53:34:61:3d:d9:b8:e6:27:0f:d6:81:fb:be:7a:65:
96:da:94:8a:a0:4b:67:6d:8d:d5:f7:e3:b2:31:05:
fc:6e:f7:8e:cf:70:55:3c:fe:3e:db:15:75:af:b0:
74:ac:1e:8e:70:71:17:56:de:c4:62:40:f0:a1:f8:
ab:04:42:0c:e5:3d:f5:7b:b5:a8:7e:80:cf:8f:60:
78:ab:32:c7:b2:f1:a9:e0:bc:b8:1b:8f:a4:67:49:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:9C:62:5A:ED:05:5C:82:30:77:34:FF:16:1E:CD:14:32:21:00
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0e:b9:07:6c:88:6a:aa:b6:1e:80:bf:cc:66:08:b0:da:81:
1a:bc:ce:53:c0:9e:41:b5:65:46:9c:bc:b3:33:bb:9c:2f:f2:
fa:2d:9f:e2:5b:36:48:74:8c:ce:d0:d6:31:4c:42:74:36:ff:
c7:8c:f0:ee:54:9f:7d:6d:da:86:0a:1d:45:1c:dc:27:7d:a1:
18:df:2b:40:1f:af:d3:08:f2:ae:8e:f8:30:02:3b:8f:7c:d5:
02:94:b9:27:71:8f:0e:c5:d0:31:1f:05:a6:ba:7e:b9:19:bc:
bf:9b:a0:cb:45:01:d8:9d:c2:f3:33:0f:89:f8:23:54:36:96:
1a:52:6a:33:4a:af:9f:b2:aa:78:06:ae:c2:43:89:b6:ab:3a:
d6:d5:7d:a7:44:91:45:04:92:99:87:a4:6c:3d:fd:d2:a1:68:
9e:52:c4:ce:91:9e:0b:c5:5c:d0:86:e5:fe:87:20:c0:f6:73:
7f:c1:41:72:ca:2f:b4:89:f4:04:d8:4f:51:83:9a:f9:23:94:
66:91:0d:4f:c5:7c:f4:1e:5d:50:37:ec:43:cd:a9:17:c5:fa:
ba:37:94:6e:02:ca:20:6e:a5:c2:ba:2c:02:69:73:79:c1:73:
ca:4c:a7:93:8e:60:29:27:dd:f7:76:34:43:69:25:e7:9f:9b:
cf:ac:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:02 2026 by rpki-client