Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: /Zw9mpTLfMTmv7cfwOUWYuiicnhdQuLqfAKdjRi9Ih0=
Subject key identifier: 6F:A6:F1:3F:79:AA:19:A5:8D:15:BA:AA:CB:53:BF:20:DC:36:D2:58
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019D2996E602737639A01DEF58614AA59248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0B57
Signing time: Thu 26 Mar 2026 10:00:48 +0000
Manifest this update: Thu 26 Mar 2026 10:00:48 +0000
Manifest next update: Fri 27 Mar 2026 10:00:48 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: A9wRTYHzDqHJfq8MahQNM59R33Dj2QABLUbnlGs8xr0=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e6:02:73:76:39:a0:1d:ef:58:61:4a:a5:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Mar 26 10:00:48 2026 GMT
Not After : Mar 27 10:00:48 2026 GMT
Subject: CN=6fa6f13f79aa19a58d15baaacb53bf20dc36d258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:ed:12:66:5d:b3:5f:f3:44:d1:09:5c:ad:
cd:ae:19:eb:4e:f9:6b:df:21:49:bd:a7:60:a4:0b:
8c:7c:af:94:42:e0:cd:ec:08:19:07:d4:7c:e1:f2:
7a:f0:fe:1e:02:85:e4:da:4c:5e:fa:b0:d3:4f:d0:
11:63:9f:7a:69:2c:82:0b:0b:e9:fa:8d:30:7c:f7:
82:ca:63:1d:a4:6e:39:68:a3:41:36:c3:ad:74:4e:
50:ea:25:29:a1:1a:9b:b4:63:bb:72:56:70:87:d9:
46:8d:81:32:6a:37:61:60:dd:21:c4:44:92:a6:72:
2f:a1:36:e4:85:d0:e2:b6:0a:24:85:ee:f5:da:7b:
45:6c:24:0c:8d:ce:cd:04:b9:71:d0:5c:91:6d:6b:
8a:95:86:92:b5:5b:ff:da:35:0c:66:76:a7:ec:da:
9d:51:55:26:9a:2f:7f:73:97:4c:1b:81:3d:c8:e0:
bf:82:43:41:d5:5d:2c:ef:94:4f:ae:71:17:5e:43:
d2:99:45:d5:8d:f6:68:c3:75:e4:e1:2b:59:eb:83:
d2:37:70:d7:dc:12:e5:ca:f8:cd:54:af:c7:37:ae:
b3:cb:77:51:14:18:ac:91:4a:1d:4f:48:c4:a9:82:
5d:0d:c8:05:c1:a3:fd:e1:74:cf:54:30:e4:79:23:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:F1:3F:79:AA:19:A5:8D:15:BA:AA:CB:53:BF:20:DC:36:D2:58
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:2a:e0:02:67:de:e7:b8:6c:6f:38:4b:0d:d7:6b:e2:66:
27:ad:61:98:cd:4e:7d:7e:f4:f0:0c:8e:d0:53:1a:bc:ee:ff:
0b:c9:bf:0e:95:77:2a:b7:7c:2b:79:de:38:c6:af:d0:11:0d:
8c:23:79:f8:c9:25:94:71:a0:f7:fa:2c:dc:9b:df:9c:66:96:
b4:b7:d5:0a:6e:21:4f:fb:61:a4:17:e1:fa:1b:73:f2:9b:1c:
67:b0:2d:b2:70:7a:96:37:c9:f4:28:dd:63:21:05:0a:29:37:
53:2f:1a:ca:cb:8c:61:ac:67:ab:68:9e:b1:75:18:38:22:0f:
61:5f:23:4b:95:92:0e:63:16:1b:00:79:32:f8:35:dc:a2:95:
4c:50:a9:42:df:96:cf:ad:3a:95:00:f5:31:5c:96:1f:92:b8:
e6:30:a1:0f:99:f2:10:90:a9:c0:d5:26:06:ad:a3:eb:81:08:
c9:6a:3c:3d:e0:33:34:70:c9:7c:8a:ca:17:ee:7c:96:3c:94:
ff:31:8c:4c:c2:7a:a8:52:63:a4:52:25:f6:1b:5c:75:88:86:
a2:31:9c:b0:1d:45:18:89:64:de:e3:f6:cd:b5:bc:c8:25:cc:
ed:b3:53:d3:34:df:c0:fd:11:30:e3:32:50:ce:8f:80:e7:8d:
72:65:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:21 2026 by rpki-client