Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: YL+j9kOM5NaalXaSZqBRB61fBja+1AJh6x6+1JF+sEA=
Subject key identifier: 8E:23:B2:7A:F6:DF:EC:41:8C:AE:7B:3A:EA:AC:AB:2E:7B:E4:B1:5A
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019D265F81374756A4D924735D2AE64BBD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 02C4
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: 370MTHq1tWYBhYbbYYBGx9P31Qb7kmCZs6VNaWnQv1Q=)
2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:81:37:47:56:a4:d9:24:73:5d:2a:e6:4b:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=8e23b27af6dfec418cae7b3aeaacab2e7be4b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:30:02:f5:d7:3d:81:48:9a:13:8a:d7:15:
d6:2d:99:ed:36:d2:f4:2c:4d:d5:3a:a4:ed:26:98:
24:47:68:c2:a7:92:29:43:e6:c8:fd:2e:f4:f7:23:
bd:1a:18:62:20:d4:09:64:36:5b:e8:a8:15:a6:6b:
a2:f2:6b:d3:d1:ed:52:e7:0c:3b:64:1c:b1:93:54:
e8:d7:3a:bb:dd:0d:3e:2f:f3:78:29:de:be:fd:af:
55:c6:06:d0:a1:14:a0:63:46:06:46:29:78:73:13:
f6:86:e2:21:49:d1:bf:39:09:e8:55:2c:fc:22:5a:
3e:42:99:dd:4a:9a:f9:09:85:ee:ee:08:cf:42:10:
73:41:c6:45:3d:07:9d:83:56:3c:57:37:1f:e0:aa:
16:96:38:3c:ab:14:ea:8b:dd:d3:5a:34:bb:ce:3a:
a6:9f:5c:bc:fa:30:af:9d:44:8a:87:81:99:29:b1:
73:83:57:b7:2f:89:e5:c2:0a:ed:32:0d:27:3f:50:
5c:94:3b:2b:e3:99:b7:0f:c5:96:49:f4:31:39:0d:
db:f2:59:0d:e0:cd:41:d3:89:e3:32:0e:bc:08:3d:
5d:9a:80:a2:04:e8:65:d1:c7:30:ad:7f:03:b4:94:
58:f3:89:e9:26:87:6d:22:1e:a6:99:40:62:db:29:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:B2:7A:F6:DF:EC:41:8C:AE:7B:3A:EA:AC:AB:2E:7B:E4:B1:5A
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:30:43:e9:7e:da:5a:9a:62:bc:84:4c:d5:b7:92:66:85:
8d:29:92:3e:c5:aa:d3:e7:92:84:09:e2:28:e7:d1:dc:dd:9f:
78:11:ff:db:d1:36:ae:5a:95:f8:5a:ea:e6:70:c2:40:37:8b:
2b:96:10:19:52:73:3a:36:a8:75:af:32:98:4c:f8:41:6e:d5:
1d:2d:ed:a5:5f:d0:08:80:d5:72:fb:14:44:47:81:b8:9c:8c:
de:09:3b:ab:b3:ea:2f:3b:26:6c:48:ee:82:1e:d6:bf:38:29:
0f:8a:4a:03:c8:b3:42:b8:93:fc:94:e7:8e:13:5d:be:ce:c5:
f2:8e:1d:a9:89:0d:a5:2f:b3:69:3e:39:28:78:78:9b:8c:d2:
9e:e9:40:94:54:0d:7d:c4:ad:82:85:3a:ba:1d:38:6a:80:64:
cc:32:5d:11:20:98:7a:a9:dd:42:59:ff:b4:4a:fb:fd:6a:7f:
a6:41:15:eb:76:93:ee:38:47:a5:a2:ba:7d:e0:1d:69:87:d7:
cb:58:c0:ce:a0:d5:db:69:5e:7f:4d:8d:ef:7b:7a:41:b7:66:
9a:5e:78:7e:83:88:52:59:8c:fe:f0:d2:19:e2:f8:9d:fe:1a:
60:e3:c6:55:61:eb:f9:39:2d:f3:18:17:ae:1d:ff:c5:94:e5:
a1:68:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:03 2026 by rpki-client