Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 9RF3NpZsC1qSQ+rLfjU5HfRKJ+UiAIjPKyBo3cRSI8U=
Subject key identifier: 38:6B:4B:11:02:19:57:A6:67:F6:F5:BB:E2:F2:7F:F1:09:65:29:3D
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019D28167E08E7B48E6E57BFF67E18DAAEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 114B
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: qkD7RsL513vgG024tfXMavAVUtIFhO8knsDwxZEvWn4=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7e:08:e7:b4:8e:6e:57:bf:f6:7e:18:da:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=386b4b11021957a667f6f5bbe2f27ff10965293d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:45:a0:04:b5:7c:48:83:cc:06:6c:0a:9f:
53:49:07:36:57:ec:fb:3f:1c:00:08:3a:df:e6:dc:
11:d7:40:63:83:64:95:63:a4:d1:d0:a8:ab:b5:6c:
e3:69:9c:bb:c3:2e:39:84:be:71:64:27:58:73:91:
be:3d:5f:57:c3:6c:a5:c0:bc:96:ef:f9:d8:ea:db:
01:71:58:10:83:cb:0f:04:df:5e:60:e5:a6:09:6d:
31:83:94:f6:c6:8b:e9:4c:d7:d1:74:3d:a1:1b:3c:
56:c0:21:29:72:b6:4e:4d:a3:c2:d6:4f:cd:2d:43:
fd:0a:e0:fd:c7:cc:9c:0e:82:c2:5f:c5:2d:fc:86:
bf:ea:92:ee:36:3b:4c:1e:6c:c5:77:af:a2:eb:da:
15:d8:c0:84:bd:91:98:5d:89:33:4e:49:c8:27:da:
06:7c:66:5a:21:50:32:24:1f:62:8f:d0:bb:94:89:
c0:97:af:6d:b2:fb:92:e2:5d:29:6a:7b:b0:2d:8a:
83:83:9e:ce:4b:60:54:ac:2d:73:d3:e1:1e:70:f3:
46:8d:dd:d8:8a:d4:fd:f9:8d:9d:8a:1b:7e:10:02:
ed:0d:80:51:fc:af:da:cb:3a:29:27:d3:24:18:7c:
9b:32:4b:5a:4a:9c:f2:11:b7:83:f6:96:47:67:83:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:4B:11:02:19:57:A6:67:F6:F5:BB:E2:F2:7F:F1:09:65:29:3D
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:a9:7c:33:f0:8e:6c:72:ab:73:54:f3:f8:e3:61:ec:b1:
5c:1c:94:68:c0:0d:e5:f2:2d:8f:bd:ff:08:30:52:7c:3b:68:
47:e2:cc:64:ee:05:74:c5:50:92:6e:fd:65:5c:5b:61:88:62:
c0:ed:7e:c1:22:17:c8:c5:58:9b:34:df:93:a8:ab:3c:4d:45:
8e:f3:20:49:58:da:18:fe:02:7f:de:d5:d1:f3:10:3a:9a:ce:
34:42:4b:70:35:7e:10:d4:1f:ae:a2:01:ef:07:78:15:ef:79:
51:07:1e:30:e7:d8:09:67:88:9b:2a:ce:f2:69:0b:d0:97:a6:
9d:f2:37:22:58:5c:7e:f3:e6:41:ce:08:33:fb:22:b3:94:2c:
b8:43:33:50:92:06:07:6a:43:79:cf:ec:00:6f:e5:3a:d6:b0:
20:2e:52:12:c7:ce:32:4e:0c:a8:2d:b8:88:58:ff:ae:62:82:
d9:39:5a:eb:1f:1e:64:9d:5f:12:78:45:7e:f2:5f:45:65:ce:
44:2e:1d:9b:d1:02:a4:e5:43:37:77:a2:bb:82:57:03:15:aa:
17:fe:c0:fe:e7:4d:8d:ef:02:a8:d3:95:e2:de:18:47:72:c4:
74:bb:c2:cb:ff:87:8f:2d:53:9a:26:ae:02:ee:f7:b2:be:74:
0d:c3:9f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:26 2026 by rpki-client