Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: sSkPf+8IOMgUyGy9D860y77wR+cM89eBfW2I/JSF+yo=
Subject key identifier: 03:A4:BF:A1:1D:52:FF:2A:7D:E2:AC:2F:5B:90:BF:B7:CA:56:97:17
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019D262847DF83E3E174FD354EF11F514DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 08AD
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: e7W2Fdq/UKmP4dw+ghiWiQJWBWSj2Y+ntvhpraX2ADw=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:47:df:83:e3:e1:74:fd:35:4e:f1:1f:51:4d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=03a4bfa11d52ff2a7de2ac2f5b90bfb7ca569717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:e5:95:1f:13:e2:1d:19:ce:97:2d:c8:9b:
3a:8f:79:1d:ac:cc:ea:e5:7f:fb:b0:34:99:b1:37:
ab:da:dd:30:b3:e9:a2:d8:e8:7d:26:e1:e2:e0:02:
f5:09:eb:99:4a:5d:e1:b7:1a:58:5a:92:68:17:15:
7d:ae:99:3f:37:b1:34:e6:3c:6c:eb:3b:93:99:5b:
0b:fc:ef:fc:b9:7c:ad:11:2f:f0:63:91:30:02:bc:
4c:05:bf:56:05:94:d7:d1:cc:7f:5d:55:3c:48:83:
5f:04:73:7d:d2:76:ac:7a:54:e6:1d:e1:ac:3f:e8:
4a:62:bb:5f:f4:31:83:a0:69:31:18:9f:8f:db:6d:
86:33:69:11:ce:57:e5:28:1a:9e:76:a4:1f:d7:0f:
37:ff:dd:4b:49:6a:28:5e:69:34:3c:c7:12:62:08:
24:25:86:2a:60:2d:19:3b:f4:fb:80:e9:2b:7a:ac:
da:00:0a:c7:8d:a1:e7:5c:8e:7f:35:fd:bc:00:ee:
0b:b3:ce:d9:70:04:92:b1:29:ff:45:72:3f:8f:a1:
a0:58:37:e7:2e:c2:75:17:43:a4:19:c3:87:58:9e:
72:c9:d6:ef:db:df:bf:8c:6f:91:5f:38:4c:31:6d:
29:c3:57:2b:9e:54:76:47:16:b9:db:73:6a:c7:7b:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:BF:A1:1D:52:FF:2A:7D:E2:AC:2F:5B:90:BF:B7:CA:56:97:17
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bf:ed:22:ce:f5:c9:e0:9a:0f:ca:5d:72:2b:31:5e:db:41:
e2:18:29:19:ef:f5:69:13:87:11:6a:44:b3:05:49:73:7b:02:
7a:d3:94:ce:8e:35:51:76:98:6f:21:5b:3d:12:f1:12:21:88:
32:b3:33:18:3a:c8:7b:ee:95:ef:e5:f2:13:f1:8a:64:02:48:
e5:9d:81:c5:84:a9:f5:a6:e1:e1:b8:d4:e9:d2:3f:b1:5e:2a:
f6:6b:28:06:19:65:43:aa:16:20:71:fd:29:19:eb:ef:e3:7f:
67:61:26:cb:99:ed:5a:2e:a0:4e:a3:dc:b4:ff:ab:8a:60:07:
af:13:12:15:f4:3d:60:1e:5a:bd:6d:6b:d1:e9:b2:cd:41:c5:
45:2f:d9:4d:3c:f0:e2:de:8a:3a:04:0a:98:6f:3a:a0:ad:4a:
2b:19:cb:49:2a:fb:6d:dd:33:1b:91:bc:02:29:a8:67:dc:5f:
03:ba:ee:58:f4:31:15:c0:d5:c1:15:b3:16:83:d6:f3:0c:1c:
80:61:00:30:b6:b6:53:1a:6c:40:fd:f7:c4:68:67:18:78:b2:
06:8e:32:08:bb:61:cf:6d:e8:c5:8e:fa:2f:d6:cd:20:86:bb:
09:c1:a4:e2:62:3b:d1:eb:e0:f4:ab:22:f1:e3:65:d6:a7:07:
0d:fb:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:47 2026 by rpki-client