Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: TwHEi9RRbRq1iqciKHcehov6iD4keesaEfMQhuwHlqI=
Subject key identifier: 81:CA:DF:A0:BA:A1:6C:F8:D0:27:65:95:B4:5B:03:FC:5F:88:3F:45
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019D28843CD01D12F31ED1B7D2F01D347F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 09F9
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: NotRdq7KIPO+j3Iktd9krY8s6Q34nT/HftlPC7Zlk5A=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3c:d0:1d:12:f3:1e:d1:b7:d2:f0:1d:34:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=81cadfa0baa16cf8d0276595b45b03fc5f883f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:5b:17:11:2e:af:e7:af:25:c6:6e:f3:0d:
fc:cf:dd:3b:c8:07:4f:67:89:c9:92:1e:e3:ed:d6:
cf:a2:ae:72:11:e0:f9:0e:51:94:a6:64:1d:2d:2e:
49:63:96:6c:37:3d:d1:9c:f9:55:70:40:c8:3d:09:
87:02:f1:de:28:43:ce:4f:b3:17:51:5f:7e:1a:14:
73:df:c1:d9:bc:19:f2:2f:23:5a:94:17:d3:92:cf:
e6:a0:a1:01:af:48:73:fd:98:3a:58:d5:12:9a:90:
19:9f:d2:ba:d8:84:4d:99:d2:76:9d:fb:0a:1e:8b:
f6:e0:30:05:31:37:75:16:8a:c9:11:88:88:a0:07:
b4:03:a7:d2:7b:28:49:c0:1b:0d:f7:75:1e:db:b9:
bf:cc:f3:b3:52:85:f4:25:42:78:ff:d0:21:5a:e4:
ff:a7:37:e5:e3:8a:69:1d:cd:95:f1:67:10:04:7c:
27:e4:35:9c:95:67:31:97:47:a2:a5:1e:78:3c:8a:
7a:fc:3a:f1:b9:3a:1f:d8:33:88:63:20:35:f1:3c:
12:5f:1d:4b:c6:0a:fb:b7:8e:18:d2:7f:36:1c:b7:
2c:ff:69:21:e1:49:87:80:71:7c:1b:64:1e:82:ab:
fd:7e:83:81:97:71:8f:7a:ef:80:72:bf:46:35:e3:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:DF:A0:BA:A1:6C:F8:D0:27:65:95:B4:5B:03:FC:5F:88:3F:45
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:4a:40:49:f3:cd:9c:00:9a:4d:b6:e5:93:4c:83:ef:72:
ca:3c:b0:49:e3:99:eb:ab:c3:06:0b:e0:83:39:c5:4f:e7:21:
aa:3f:94:65:e6:32:07:c1:11:8c:de:c1:14:70:a3:c2:8c:75:
c5:1b:ae:6c:0a:02:2a:e4:ec:4f:a5:9a:57:8c:0f:a3:da:a5:
07:17:c2:53:4f:58:bd:9b:73:75:e8:1a:20:49:ca:c9:e6:00:
bf:fc:65:d7:ba:c3:9b:55:25:33:30:32:c7:97:72:ce:76:30:
f9:41:e3:0e:fa:0a:74:38:8c:63:cd:61:9b:4d:5a:c0:22:cf:
d5:1e:0f:9c:a0:59:ba:ed:20:74:2d:60:51:aa:dd:05:a9:66:
80:05:df:84:f4:6d:30:03:45:cc:5c:e3:17:e3:18:25:dd:4e:
3c:02:2c:91:8f:9b:26:36:a0:0d:ad:a3:3d:5c:c3:e0:e3:2e:
00:c3:75:10:f0:1d:37:a9:7a:38:31:fe:5d:75:00:02:ef:12:
16:1a:03:ac:be:f0:b1:58:ac:ae:c9:7e:e1:6f:3b:38:38:0a:
c6:bb:10:59:11:79:31:9f:69:56:84:56:d5:b0:81:73:bc:1e:
1c:4e:8f:f4:4b:97:2e:c9:c8:34:8c:06:10:c9:d6:1c:d3:d2:
bc:28:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:38 2026 by rpki-client