Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: YOz2DJvVB09V3fBoK/BRtFoW4BzvQglG28Nts6myuCo=
Subject key identifier: 4D:9C:DA:C4:FC:5A:02:F9:A8:E1:FC:68:18:07:63:7D:C8:30:2A:61
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019D265FC34A1C9A47D742A536610066051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0F68
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: TmqUcPPAxfovlMKhWLIcMhKWViUeKttBrlEnt3AArSI=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:4a:1c:9a:47:d7:42:a5:36:61:00:66:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=4d9cdac4fc5a02f9a8e1fc681807637dc8302a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:a5:0a:20:45:46:e8:75:c9:8f:58:93:f1:
da:fe:1f:0e:96:2d:92:ce:f1:dc:a7:dc:36:ae:11:
74:0a:92:64:04:b7:25:89:e8:cf:3c:e9:99:53:05:
5d:2d:ce:93:0c:15:d7:cd:66:be:de:13:3b:c1:11:
70:ad:46:23:a7:4f:46:42:06:a9:ef:79:ba:17:57:
09:8b:7a:5e:e0:f4:00:d2:c9:0f:c0:34:ce:3e:58:
19:74:d0:13:88:bd:db:05:47:6b:dd:8a:31:91:9c:
ee:3b:3f:0f:f5:b1:16:a7:bd:08:89:9d:17:1f:b6:
ba:af:1d:45:dc:50:36:a2:0b:05:64:84:09:d7:fa:
00:33:5a:8a:89:e7:52:31:f4:cb:d8:a9:96:10:47:
33:01:55:73:c5:67:f2:1e:c5:64:5f:00:ec:9f:90:
c4:d9:bb:3f:7e:ee:d6:a1:67:db:e8:2c:2d:1d:1a:
3d:4d:9f:2f:50:05:10:b4:43:d6:6f:2d:d7:3b:db:
d6:51:44:82:8c:10:ea:41:c5:fb:d1:1e:9e:58:90:
70:f5:e5:ed:54:ab:9a:48:50:34:30:37:4c:af:83:
55:f9:26:fe:d1:eb:49:41:5b:9d:6e:9d:91:ba:6e:
be:1e:f3:6e:ae:78:ff:56:a7:63:93:91:af:e0:09:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9C:DA:C4:FC:5A:02:F9:A8:E1:FC:68:18:07:63:7D:C8:30:2A:61
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:5b:c2:1a:58:08:8f:75:42:dc:f8:15:9d:04:57:b1:4f:
83:73:ff:c2:4a:f4:42:67:a9:64:19:19:ce:5c:24:75:d6:5a:
51:69:d5:eb:7e:99:f8:b4:af:9f:b1:7c:b2:ea:8f:59:f5:b0:
03:e7:37:ae:8f:a8:da:ab:2d:30:98:dc:09:df:a3:92:b2:63:
f0:a8:e0:e1:4d:27:97:a6:3d:0d:cd:15:07:40:ae:fb:43:22:
42:98:cb:74:fd:2e:21:73:42:8f:af:c9:1c:a7:86:07:73:4d:
7d:bd:45:cf:ab:28:b7:e8:ce:11:85:21:42:74:77:69:27:4a:
26:8b:aa:28:0b:19:fa:59:67:2f:28:42:06:1e:3c:0b:28:02:
82:56:ad:01:b4:3a:35:dd:c4:20:f8:af:c1:56:11:e3:6e:3a:
65:07:1e:e5:eb:52:be:9c:71:92:d9:6e:41:1a:31:bb:4b:23:
31:55:dc:30:cb:c7:10:b4:9c:b5:da:a9:97:91:29:4e:15:43:
b8:76:61:8f:af:ca:ff:03:bd:7b:98:ef:d3:38:da:3a:0f:3e:
57:70:ad:69:25:5a:13:80:31:c5:e6:1a:7b:49:41:4c:d7:46:
b0:3b:13:01:2f:5d:6f:64:51:4a:30:48:7a:fb:72:93:db:f8:
dd:f0:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client