Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: fHgZ35NooJGysaXzGciCkK3iNYncu3+a4hnGUuuz3NQ=
Subject key identifier: 3E:CE:D8:36:3F:72:B5:9C:77:7B:EC:8E:DF:5C:43:45:A2:D9:63:8F
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019D265ECCAC8C00F5EC5C3C782F31A28EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: vs4p4iSLRwy6HqU+gdRKdVN9VCK2e2a3O1D7m+emgyw=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cc:ac:8c:00:f5:ec:5c:3c:78:2f:31:a2:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=3eced8363f72b59c777bec8edf5c4345a2d9638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:07:19:ea:7c:53:52:ca:47:76:37:7a:5b:
f9:df:7f:14:40:40:e4:30:d5:4e:f7:f0:fd:96:ad:
fa:5a:17:33:59:12:c5:c7:dd:2f:2c:f5:93:ae:ac:
60:51:a7:4c:d9:60:20:45:77:27:f4:d8:75:21:f3:
f7:da:5f:8b:eb:a2:65:97:a7:0f:13:b7:b8:dd:98:
d9:5d:37:a2:26:f0:67:15:aa:40:a1:f7:88:e0:aa:
b2:03:12:69:c0:74:ba:b2:a7:6d:58:ec:8d:3a:c5:
4e:30:76:f2:fd:67:f6:b5:4e:8b:c3:a6:57:98:61:
4f:3e:c3:61:c0:a4:a7:98:96:d4:17:db:f0:b3:62:
76:22:9a:ca:60:51:ac:af:8e:64:91:ad:f2:89:f6:
81:d0:a4:87:5a:85:cf:3b:73:71:f8:0c:a4:b9:69:
80:bc:e0:88:ae:9b:b3:16:01:5a:d8:b6:62:d2:54:
d7:73:f5:c7:4c:7e:bb:6a:45:b6:07:9a:af:ae:a9:
bc:6f:24:5f:ae:08:77:ad:e3:f2:9f:93:c8:57:fc:
37:24:f3:54:77:07:ba:9a:22:77:53:5d:08:46:6a:
5a:a3:20:b4:71:73:6b:79:4c:9e:07:18:aa:56:24:
fc:58:43:be:fc:73:48:46:40:bd:17:f8:50:00:77:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:D8:36:3F:72:B5:9C:77:7B:EC:8E:DF:5C:43:45:A2:D9:63:8F
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3e:f1:d0:66:8f:c5:4d:47:f4:2a:9e:2d:c9:0b:0e:3a:6c:
83:b2:aa:ba:e2:26:9b:02:25:58:e5:37:de:f4:68:31:65:93:
75:ee:fd:5a:58:27:92:7e:99:24:8f:48:6b:a0:3e:1c:dd:bc:
62:7c:20:b1:4b:71:0a:f6:c5:5a:4d:e5:15:d2:9e:3b:08:64:
0b:04:3a:b9:eb:31:b6:79:de:41:d7:49:f9:b4:f3:fa:5a:52:
e0:ea:39:00:96:1a:92:b2:a6:d3:3c:5a:b9:7e:6d:63:b8:35:
1f:22:f1:41:66:73:cd:94:01:95:8a:0e:c2:bc:cd:03:30:77:
79:4f:03:22:2f:32:ba:91:55:31:85:c1:b5:f4:64:3c:2f:67:
4a:3c:36:8a:7f:dd:31:14:c9:1e:64:c2:a3:d9:6f:8a:1f:e6:
0a:f7:6a:06:ba:62:e8:ec:b5:a0:74:a4:26:29:e8:37:d8:4e:
b4:78:2d:94:74:3e:41:61:d9:0b:65:76:0c:3c:d2:4c:91:21:
e7:f3:3c:7b:68:88:f5:a6:a8:79:de:aa:fc:40:22:22:97:47:
60:86:ad:57:ea:58:e0:72:0e:99:a9:ed:de:a7:a2:d8:00:80:
6b:40:68:50:b1:f2:c3:34:6c:34:af:0f:55:d3:6b:ba:91:7b:
f7:48:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:14 2026 by rpki-client