Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: cVayIDaHyXiQ5iZb66jwaoBxFbxsiQMFkfVN72xDgy8=
Subject key identifier: A2:18:BE:BE:2C:65:6F:EE:AE:EE:EF:2D:8B:18:B2:FE:98:98:21:76
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019D26CD235C2BCCF64264CA74BFE3594E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: T60lGWAe60er+LJQM0MB/zzvicCj9JqR2CILWvzD+nQ=)
2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:23:5c:2b:cc:f6:42:64:ca:74:bf:e3:59:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=a218bebe2c656feeaeeeef2d8b18b2fe98982176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:bd:68:fb:e4:24:f1:13:dd:50:30:63:b8:
35:d5:d4:af:c1:28:5b:0c:4c:a1:22:18:1c:3a:af:
3b:53:e9:b5:b3:de:e1:a0:06:19:0e:08:d9:bc:73:
b4:c1:3e:50:75:a3:c7:8d:92:b3:93:64:08:35:af:
27:db:30:cb:53:b8:ab:f8:a0:5d:3e:6b:b9:56:7e:
63:e0:81:c7:7d:55:9f:49:89:9e:ee:77:f0:f8:45:
71:4b:02:d8:46:b9:1b:9d:d0:8f:fd:4c:fe:0c:aa:
9e:c1:2c:7a:e7:82:72:e1:52:ae:45:4a:a8:6f:d6:
bb:f5:04:e6:42:a8:35:b1:af:93:57:62:b0:d5:3a:
15:d1:98:91:f7:56:18:8b:36:3d:45:20:1a:f4:6e:
aa:c2:18:d8:5a:b9:2a:dd:b3:c9:14:00:e2:20:df:
4f:e5:cb:c9:97:2a:38:01:52:b8:c6:ca:ce:9e:f2:
ef:86:3f:cd:e7:c3:c2:85:fc:60:8f:c1:b1:d3:c8:
e9:36:af:3a:35:1e:95:a3:7e:0a:fa:17:62:e0:28:
30:2a:73:f9:d9:37:53:cc:85:e8:b8:03:39:0d:ce:
8c:f6:cf:35:9b:94:49:92:d9:10:24:7d:63:2e:44:
30:48:c6:b2:57:20:25:f0:82:df:1f:bc:4a:3e:1a:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:BE:BE:2C:65:6F:EE:AE:EE:EF:2D:8B:18:B2:FE:98:98:21:76
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:e3:3c:6d:d3:06:3c:37:db:8c:0f:67:20:f9:2d:de:ec:
a5:d0:ee:40:11:ef:2b:4f:34:91:19:db:c3:ec:bf:f7:97:e5:
00:50:93:ec:e9:55:ad:4c:66:a4:66:09:46:72:d7:55:0b:2a:
3a:94:95:30:bb:b4:39:cc:44:8c:31:5b:a8:5c:a2:f0:14:bf:
2f:d9:1e:2c:d0:75:a7:c9:3c:c9:20:93:d9:ca:bc:e0:54:3a:
e1:f1:cc:41:35:76:1a:0f:c5:5f:8d:53:f7:54:ef:d8:ab:a9:
94:3a:97:7a:75:64:32:f8:9a:e7:87:8e:7f:ad:29:3f:5d:fa:
bd:77:9e:c9:9b:81:cf:a8:ef:e1:90:2b:1c:1e:dd:1b:a8:eb:
0a:c9:6a:50:3e:28:e3:72:17:e1:c1:98:12:3d:87:87:96:12:
3b:69:17:c0:18:e8:49:1f:bf:c3:93:cc:55:87:7c:69:07:c2:
eb:01:56:26:4e:de:3a:40:96:56:2c:d3:1b:b4:08:ce:5f:7a:
f9:7f:d4:95:92:96:e7:56:e0:60:ba:4a:08:7e:a5:f6:df:67:
98:26:eb:38:93:7f:af:49:1a:c9:e6:cb:be:3a:fb:7c:83:2e:
5c:b6:cd:47:07:14:5f:db:f6:03:d7:6a:5b:ec:c3:07:92:b8:
af:0b:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:14 2026 by rpki-client