Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: N1l66xhSJfG+zSVOHDBVnzde+jdq8qFE+bhBL6ea5vY=
Subject key identifier: C4:1F:4B:78:76:38:F5:CD:64:C4:9A:C6:19:51:96:32:18:1C:8F:1F
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019D2928EC490CC2A90D3FF80999C334BE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0C54
Signing time: Thu 26 Mar 2026 08:00:40 +0000
Manifest this update: Thu 26 Mar 2026 08:00:40 +0000
Manifest next update: Fri 27 Mar 2026 08:00:40 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: lzZsrP01HdBIE8g7il7NePIj+RkxIFBBQ7rMzY7UCs4=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ec:49:0c:c2:a9:0d:3f:f8:09:99:c3:34:be:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Mar 26 08:00:40 2026 GMT
Not After : Mar 27 08:00:40 2026 GMT
Subject: CN=c41f4b787638f5cd64c49ac619519632181c8f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:ec:29:6f:aa:f0:bf:13:8a:31:09:ce:a9:
bb:fc:bf:16:30:8a:fb:0a:a7:43:2e:f5:57:36:c2:
68:2d:a0:bc:80:4d:79:17:70:07:2b:1d:12:5b:9a:
da:f7:85:fc:8a:e8:e3:c1:a8:fc:c1:b7:06:92:dc:
bd:52:36:ad:aa:2f:8a:fc:7e:40:03:60:2e:5d:52:
62:ae:25:00:55:8d:07:a8:3c:ad:12:07:f9:02:9f:
c1:3b:6a:f3:46:23:90:91:b5:01:0b:47:6f:b3:d7:
69:e9:4c:dc:71:8c:58:e6:40:1c:a6:b2:b9:03:61:
c7:93:58:98:0a:a9:7a:98:09:01:78:8b:b2:82:ae:
f2:a9:ea:9b:98:23:86:a6:0d:4d:d5:64:6b:2a:18:
f2:67:2c:95:23:48:0d:68:56:06:aa:e1:13:ad:9d:
ce:67:1c:88:89:8d:a7:3c:98:d6:48:88:2c:15:6f:
03:75:5b:dd:70:c1:f3:95:00:f2:3d:1c:ab:a2:71:
49:36:e5:6f:5d:b4:65:d0:4d:30:90:05:33:a1:b7:
f2:bf:26:bc:48:bc:74:91:27:e1:5c:5c:14:8f:7b:
53:53:9a:d6:83:36:0d:3c:d3:fd:0d:41:8c:7b:af:
89:1c:a9:70:e2:b0:85:37:45:b9:94:5b:45:a8:cc:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:4B:78:76:38:F5:CD:64:C4:9A:C6:19:51:96:32:18:1C:8F:1F
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:e1:33:b0:7f:7d:09:f4:dd:3c:31:2e:06:bc:41:52:8c:
b2:e0:49:76:70:62:17:f9:56:b6:5f:8e:e3:61:52:b8:7c:c6:
99:8e:fe:db:1b:c1:e3:d2:c8:2a:99:b2:b0:f7:ab:6b:35:8e:
f1:f2:98:f6:9d:89:6a:f5:50:4b:e9:63:2d:78:f2:6f:86:f7:
bd:99:94:d0:d7:b5:0f:68:e5:58:25:90:c2:02:6d:48:26:50:
27:df:af:db:f5:bc:82:17:7c:71:f0:4c:53:d3:98:98:b0:1d:
a7:76:40:8e:3e:8e:95:fd:c3:79:88:a6:4f:bc:2c:5c:7c:84:
5d:06:db:97:83:c2:c6:bd:f9:e0:44:8b:29:c7:45:79:5c:06:
aa:11:92:c8:ee:74:95:a7:e2:b1:f0:0f:d7:54:65:9a:14:9c:
65:0f:9e:a8:c5:2a:07:53:73:6f:23:ae:1b:b0:20:bc:32:98:
f9:11:23:e6:08:f1:7c:4c:63:a8:ff:2a:d9:5d:cd:78:7a:ac:
bf:b6:82:43:8d:66:82:71:bf:62:45:16:03:be:4c:61:29:66:
2b:2b:2c:45:95:23:fd:32:8d:81:1b:3f:fd:04:91:e9:9c:17:
04:77:da:2a:49:e4:21:09:ff:4e:a5:04:b7:73:a9:73:e1:09:
3a:d5:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:09 2026 by rpki-client