Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: LaiVVQckbxZ0Oh1lpOFF81g6wP7KkL/mBZSgWGWs1ts=
Subject key identifier: F0:AE:2F:1E:79:BD:5C:21:64:19:B0:C3:33:BA:C1:58:B3:10:31:E6
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019D281682CAC541A25058CD58AFAC63C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 7sfVEaU8A8ihfr64sAxn8eAGmNo.roa (hash: ACNKKz0yFm+J3hHzQjyY3vUiOtbR7xfJ0cZ7zXLDPak=)
3: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: R6zMdiodMUqt+gl0FPmCatDrOD36GhtLyF0PtGTyaoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:82:ca:c5:41:a2:50:58:cd:58:af:ac:63:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=f0ae2f1e79bd5c216419b0c333bac158b31031e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:ee:1f:05:78:37:d4:77:88:d0:54:80:28:
c8:f1:f7:10:bd:d1:75:1d:3c:5f:65:e7:20:ce:57:
3a:e9:80:5b:2c:f3:be:d6:81:12:b3:1a:13:65:58:
b5:0a:8b:c4:70:7a:c5:66:d7:1e:7a:29:98:db:15:
d4:00:e9:23:6c:f3:4f:1c:0c:cb:98:63:07:7a:39:
6a:07:24:60:3f:4a:e4:c7:3a:ed:53:3b:8d:5c:97:
7a:b2:26:72:bf:81:4e:b1:54:67:23:f9:60:50:3b:
23:af:04:b0:d8:3e:f5:bc:be:53:56:37:48:bf:68:
02:e6:a3:26:2a:bf:cc:25:1f:00:d8:3c:a3:cc:6e:
cf:a8:8c:04:04:62:0c:54:76:04:bc:b7:ba:29:ea:
5e:ce:53:92:7c:07:45:b8:7e:11:f6:c2:27:7c:ac:
63:c1:9f:cf:c0:3e:47:a1:cd:13:b6:6d:a5:88:ff:
c7:c7:86:cd:93:e5:b7:41:3d:5c:e6:83:02:35:41:
6f:13:94:1e:a7:34:77:64:6f:0a:9a:51:08:8b:1a:
ff:4b:db:73:c2:bb:10:3d:b7:49:62:24:63:72:00:
d4:3c:51:e4:43:93:33:86:f1:a6:e6:6d:1c:cf:55:
7b:d4:c8:1f:a3:9a:86:26:31:d5:48:29:b3:23:e3:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:2F:1E:79:BD:5C:21:64:19:B0:C3:33:BA:C1:58:B3:10:31:E6
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cb:8a:59:15:93:67:07:0b:60:b7:dd:1c:8b:83:60:fe:af:
0c:87:bf:e5:09:f7:c0:2f:ea:a8:ec:70:35:3a:30:93:37:14:
d3:46:c6:f8:31:b8:f1:d5:c3:a2:6f:42:61:bb:42:3a:63:a8:
91:ed:af:f3:54:7f:54:2b:49:1c:af:84:c6:6f:e5:26:ea:30:
d7:a7:69:3d:58:24:34:2a:ed:7a:61:48:b6:5e:d4:64:47:b0:
ea:07:69:c6:d7:db:fe:48:8e:9a:5f:b5:4c:6e:50:57:ae:c0:
d6:be:b7:57:0c:53:8e:72:e3:17:ff:eb:b4:3a:4b:d1:14:59:
b6:e8:b8:86:ce:eb:b7:bb:14:f4:c1:55:c3:51:9e:06:38:4f:
b2:d8:e0:ae:07:7b:e3:13:86:2f:34:1b:12:c1:72:90:e9:b8:
1c:11:03:35:72:08:0a:6c:e7:6d:a0:36:d4:55:c5:0f:12:fc:
84:06:28:d3:04:7b:73:5c:27:81:4d:7f:8b:6e:b6:43:a7:8d:
b3:69:78:6d:83:49:98:7c:67:a3:41:65:ec:28:31:4f:58:ba:
8e:34:5e:bb:67:0f:30:f9:a0:24:ba:47:9c:37:c8:52:52:d1:
93:c1:d2:6a:0d:96:ac:31:74:a1:11:ab:19:37:51:77:63:02:
aa:4f:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:39 2026 by rpki-client