Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: OAzKZZLsz2ZZbKsqEIW+KD/O0myrGd2GuoOVnpGjwwQ=
Subject key identifier: E0:D3:98:E6:BA:F0:82:E6:8F:85:EA:EE:6D:1B:98:13:63:46:0B:72
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019D2C98194AFA4E2A224C3A3AAD5B939E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 111B
Signing time: Fri 27 Mar 2026 00:00:58 +0000
Manifest this update: Fri 27 Mar 2026 00:00:58 +0000
Manifest next update: Sat 28 Mar 2026 00:00:58 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: Tri1JwK6KkiHY1B6fQNiyDWL2xJJzoGwciLGeYMruX4=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:19:4a:fa:4e:2a:22:4c:3a:3a:ad:5b:93:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Mar 27 00:00:58 2026 GMT
Not After : Mar 28 00:00:58 2026 GMT
Subject: CN=e0d398e6baf082e68f85eaee6d1b981363460b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:d8:23:42:68:7f:e0:20:3b:33:a4:0e:83:
00:4a:00:67:da:6b:84:15:97:93:f1:ed:f6:b6:59:
56:88:b1:4d:cc:80:59:38:2b:f9:68:c2:98:bc:77:
0e:c8:65:6c:d1:78:90:3f:ac:85:6e:40:b0:51:6f:
1a:b4:95:46:f2:f7:b9:9a:c1:48:21:5f:26:19:de:
58:24:56:1c:2c:27:07:d7:dd:90:80:c0:95:86:d5:
e2:6c:ac:ba:06:64:a3:4a:09:6d:68:4f:27:15:fa:
d3:e5:f8:08:a2:31:c2:4d:f9:dd:75:39:dd:cd:05:
8d:d9:02:26:c3:59:55:d0:7e:84:86:31:15:0f:36:
99:af:ec:f6:3e:ea:91:ca:08:16:70:7f:91:34:3a:
7f:97:4d:7d:2c:eb:6d:c9:cc:c3:c4:5f:21:9c:a4:
68:e1:a8:10:1c:de:5f:86:a8:d4:13:73:47:27:59:
80:bd:b8:10:f9:99:4f:c7:36:a0:08:22:76:1b:8f:
b3:16:d2:b5:03:41:54:1f:d6:22:ec:99:87:6d:29:
7a:7e:be:8c:a3:94:0a:19:1c:c9:af:4e:93:1a:81:
17:da:35:c1:2e:89:87:fe:75:3a:72:38:b7:fd:46:
75:f8:91:94:a8:23:1e:2b:16:a6:e3:9b:8b:dd:95:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:98:E6:BA:F0:82:E6:8F:85:EA:EE:6D:1B:98:13:63:46:0B:72
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:59:5e:bc:51:b9:f5:7d:12:e7:3e:d6:fe:5a:81:ba:7d:
42:6f:31:c4:20:3a:31:85:20:24:cb:57:73:ca:7d:81:40:6d:
93:4f:ec:c0:52:2f:13:af:49:f0:f4:78:82:5f:b7:cb:2e:ea:
3c:f6:4d:7d:3e:f6:cc:b8:41:6b:73:a4:49:3f:48:67:0a:e2:
c2:de:58:ba:e4:44:3d:df:6e:3f:45:fd:dd:56:1c:89:e9:97:
26:20:8c:24:56:21:6c:84:5a:73:18:9b:78:7f:06:0f:06:24:
36:61:0c:e6:ba:4b:6c:a2:6f:6d:fe:ec:fb:61:26:af:90:bd:
b2:2e:20:e4:f5:89:e2:8b:46:64:2e:45:de:a0:e9:df:0c:d6:
75:7d:04:63:8d:9f:e1:76:95:9b:7a:87:be:22:3c:29:d1:c1:
24:79:f2:67:41:51:7c:3d:a6:56:5e:26:bd:ec:e2:ab:45:fa:
48:69:16:7a:74:63:bf:be:f4:b5:70:42:fc:8e:88:60:1e:76:
b6:75:4e:b8:06:00:81:86:9c:f4:03:e1:08:76:73:77:08:ab:
12:c2:8e:61:fc:b9:82:b9:9f:e2:9c:f0:ec:0d:97:2c:c9:30:
42:71:6f:0b:1d:c1:f2:db:46:1c:29:4e:fa:80:45:e2:33:ba:
cc:54:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:43 2026 by rpki-client