Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: fiksZsS0zhDQONCzVmalxQdYr2A0E46BSagxTd7TotA=
Subject key identifier: BF:95:57:B6:50:73:B8:03:F9:43:A1:EC:8E:49:9F:F9:78:EA:A0:53
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 019D28BB3E5DA26656D095ADC506D175F8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 0C0A
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: i9Dr/OntuWZtV4f3eWtj3JGXB4dKqwx3H977n6oTRSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3e:5d:a2:66:56:d0:95:ad:c5:06:d1:75:f8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=bf9557b65073b803f943a1ec8e499ff978eaa053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:c2:91:06:28:f7:ce:1a:bb:0e:f5:09:7c:
28:8f:75:f7:97:72:25:0a:26:2f:57:52:66:d7:8f:
a7:15:6d:a3:d5:c5:b1:9d:cd:72:99:2c:60:c6:09:
aa:73:f8:d8:e4:81:e5:83:d7:c6:78:de:76:90:a8:
4c:b6:94:77:35:f4:0c:70:fc:dc:86:96:ff:1d:b9:
5d:3d:bf:36:98:24:62:aa:55:98:84:35:02:30:9f:
18:35:44:2e:a8:93:e8:fc:2b:b7:e7:b1:64:9a:47:
2f:61:b0:9f:00:03:29:1a:a8:5b:f5:00:0e:77:db:
7b:eb:55:f6:2c:7c:7a:57:ad:24:92:04:9a:0a:47:
cf:15:1b:11:66:30:70:33:00:13:56:ee:f0:68:7e:
af:76:71:7f:5a:01:6e:da:7e:40:fd:27:9a:6a:1b:
ce:e2:8c:76:36:ab:0b:88:f1:42:39:a9:c5:ac:39:
28:96:6a:59:e2:20:e6:8b:72:69:97:fb:01:bc:e6:
89:de:d7:cd:b8:e9:f6:6c:7c:9e:0d:01:92:6d:61:
72:42:2e:2e:6f:b1:ef:82:76:82:2b:69:18:48:99:
13:6f:9a:42:9d:45:d2:c0:2d:0f:a2:8f:17:27:00:
77:cf:65:5d:68:35:3d:14:f5:ae:e2:39:0d:3d:f8:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:57:B6:50:73:B8:03:F9:43:A1:EC:8E:49:9F:F9:78:EA:A0:53
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:d9:ea:70:a7:68:28:e0:40:b9:71:d4:a4:6b:ae:11:17:
4a:a0:d2:7e:4d:2f:61:81:16:ea:b9:f6:ff:d7:d4:d6:b4:41:
f5:01:66:92:ea:d3:24:88:19:6f:3e:56:db:02:22:5d:ee:15:
27:f4:e1:b1:34:2b:a5:cb:2a:14:a3:0d:b6:d8:16:aa:fb:2e:
c3:f2:c4:76:73:88:bb:16:e1:4b:73:4e:33:69:65:9a:10:10:
36:c4:1c:2c:79:dc:6f:54:0c:a2:91:ca:71:65:86:9d:6d:fa:
03:ee:74:91:31:29:51:bc:e6:32:cd:e8:76:09:a8:01:51:3f:
56:69:25:5b:70:c7:4d:08:98:3c:a1:f9:6d:ed:cb:a0:0a:91:
e6:a4:ef:a1:c6:e0:68:d2:75:ac:5a:05:ac:ae:82:25:ef:c9:
b8:81:a1:77:91:83:65:97:54:b3:0a:5f:b3:57:b4:d5:6f:87:
f1:0e:df:73:68:30:93:a5:c2:ad:7c:9a:bb:2b:17:b6:7c:a9:
6b:1d:37:68:67:ea:51:35:2f:92:78:42:74:e3:6f:fe:7f:60:
2d:04:ac:86:b4:08:d1:08:f7:a8:e9:16:0f:5b:94:c8:e1:c5:
72:c9:56:c1:3f:ec:5a:66:27:64:81:65:c1:96:66:f0:45:b4:
2b:f7:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:21 2026 by rpki-client