Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: 8MVTwgEopccw0WPOUyiWgBI99AgZ4lKXDqXLs2/6OZg=
Subject key identifier: CE:73:C1:57:A6:E4:D9:B5:EA:3B:1F:6C:6E:CE:E2:C6:78:DA:CC:56
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019D28BB112DD9FE8FF3A088409AEDF2ADF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1119
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 8ylHG7/c69a8TEM4FBM7/oCZ5MBQD14raB0d3x343wA=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:11:2d:d9:fe:8f:f3:a0:88:40:9a:ed:f2:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=ce73c157a6e4d9b5ea3b1f6c6ecee2c678dacc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:34:52:70:53:39:5c:38:74:f0:4b:1c:b9:
40:c7:c4:e5:e0:40:66:4e:26:c9:d6:0b:d6:5f:af:
5a:17:7d:bc:74:27:1f:15:bd:e8:fd:93:2e:8c:4c:
74:89:32:e4:e5:fc:19:65:64:62:49:db:35:2a:b9:
f1:08:ef:77:b6:ec:f6:de:e6:58:bd:3c:30:47:04:
57:67:3f:06:95:d0:24:53:bb:3a:94:f6:85:12:6a:
7c:4a:1b:16:da:f2:79:ce:30:fb:71:d6:0b:d3:b6:
91:fd:b8:d9:0a:f9:20:9e:ce:d3:a0:d4:02:2b:b6:
ee:61:87:41:bf:ff:c3:c7:7f:ea:b9:74:05:7d:74:
c1:a8:63:90:ba:e2:18:1d:3a:80:e0:08:3a:54:89:
3d:a0:c4:ff:91:38:ea:72:d3:15:4e:37:f9:f8:bd:
76:80:5f:e3:bc:97:57:6c:d5:15:4f:0d:8c:df:61:
bc:94:d8:e6:54:85:c1:f9:ab:c3:01:ed:80:18:ac:
cf:f5:d6:07:ba:30:1f:5f:66:3b:71:d9:9e:96:3f:
1d:6a:cf:70:06:97:d6:44:07:01:80:8d:a7:44:5b:
ff:97:20:8f:62:32:bf:cf:3b:4a:a4:22:e7:3c:09:
3f:4a:a0:85:9a:f7:8c:11:76:39:0d:1f:94:2d:ef:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:73:C1:57:A6:E4:D9:B5:EA:3B:1F:6C:6E:CE:E2:C6:78:DA:CC:56
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4e:83:c4:02:f7:93:a5:1a:4a:9a:2d:3d:94:99:4e:fa:ca:
16:7d:0b:35:9e:95:12:35:24:10:3b:32:35:b2:05:44:00:92:
1e:d0:9f:1a:32:42:18:5d:52:62:c2:a1:ef:e5:79:bb:c4:f1:
4f:29:d1:10:79:78:cd:ff:3f:8e:00:f0:33:52:bf:36:99:2e:
c5:67:d4:d2:ef:4b:d8:32:8b:50:73:61:15:6d:fd:ca:cf:a9:
ff:e1:ce:8a:a3:cb:87:26:34:b3:0a:b8:75:97:62:d0:f1:4a:
7c:63:b5:39:6c:2e:cf:41:05:26:69:19:6d:5e:93:9e:77:79:
c9:b5:1a:43:cc:5c:34:89:71:0e:c5:79:5c:58:72:90:fb:11:
0d:45:ef:e4:4c:c2:58:3a:a2:07:72:ec:b8:82:4f:1b:a0:a4:
36:a4:ab:0f:da:91:c1:28:93:aa:49:03:a6:7b:48:bd:e6:d5:
69:59:cd:9e:85:9c:44:36:c7:88:ad:ca:6c:98:e0:a8:f1:f8:
e7:d7:85:9f:4e:c6:00:81:be:00:5e:be:95:df:bf:12:11:3f:
a1:19:e8:57:fa:1c:9a:ef:d0:48:ba:4e:71:5f:b1:72:90:9f:
80:dd:0e:6b:93:f2:c8:2a:0f:b0:98:7d:8e:7d:72:ca:6b:7d:
3b:33:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:28 2026 by rpki-client