Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: UamY99wAyR2b6hFxBkXmEkf4MvqFPNoiQyzXE9/Lm/4=
Subject key identifier: 11:CF:CD:A0:8D:A4:7B:04:ED:11:EA:09:EB:EF:E5:8F:4A:4F:30:9C
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019D27DFFC61612A4603BB494E58E7D87EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 02:01:23 +0000
Manifest this update: Thu 26 Mar 2026 02:01:23 +0000
Manifest next update: Fri 27 Mar 2026 02:01:23 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 98tEXeytY1RVSFcub3TH4kklCKXJfvvzTU7jay9VsJ0=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fc:61:61:2a:46:03:bb:49:4e:58:e7:d8:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Mar 26 02:01:23 2026 GMT
Not After : Mar 27 02:01:23 2026 GMT
Subject: CN=11cfcda08da47b04ed11ea09ebefe58f4a4f309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:32:d0:06:57:ef:74:8b:b5:5f:79:29:24:
e8:bc:72:9c:54:1c:9f:15:84:4c:22:f8:5b:a9:a8:
d2:f3:08:18:c9:19:bf:c1:f8:c5:78:bd:71:62:72:
5d:07:cd:e9:f2:6d:c9:d4:e5:bd:36:f5:9e:e1:8e:
09:f9:92:23:e3:2c:ab:12:2b:3f:31:f5:e0:63:9e:
eb:fc:68:d0:d1:69:c2:ec:f3:a1:28:94:6a:f0:b2:
a8:e9:5a:7e:3e:d3:56:90:56:ff:31:dd:6a:b5:7c:
6e:c6:ca:7c:e2:b1:7f:fd:b3:57:03:6d:0e:3e:62:
2b:02:46:b3:76:da:d5:d5:d1:fc:fc:66:50:25:92:
23:3a:69:2e:43:47:e0:47:3b:ee:3c:b4:6c:a5:f3:
16:23:94:b3:20:72:3c:ce:5e:d2:ac:48:24:81:cd:
bb:81:5c:6e:35:52:59:9f:4e:0a:6c:94:89:ff:cb:
bf:5e:55:3d:0a:3b:69:12:f2:8c:39:1f:4c:c2:9b:
aa:05:35:1b:8f:48:07:6d:3a:fe:c5:49:83:da:9f:
38:24:b4:7b:51:c9:52:df:b4:2d:a0:5c:b4:06:12:
f6:14:98:ec:62:03:c1:22:95:e0:df:e4:cb:ca:f6:
18:e4:4c:87:16:13:36:18:d1:15:28:c0:97:5a:b3:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:CD:A0:8D:A4:7B:04:ED:11:EA:09:EB:EF:E5:8F:4A:4F:30:9C
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:b1:2f:2d:8c:b2:fb:f9:fc:f9:ad:eb:e7:dd:d5:03:dd:
49:98:d1:26:4c:7d:a5:9c:5c:8f:d1:be:08:04:e3:73:64:f9:
88:d2:b0:d0:59:31:f4:8a:8b:8b:b1:d7:77:e1:c6:18:f5:ec:
39:31:25:b1:64:0f:cc:3f:f2:d9:86:29:76:82:8a:f5:f3:e6:
2c:67:3e:bd:d2:f3:46:e0:19:85:a5:c7:79:11:0c:12:1c:e7:
90:fd:eb:ea:28:0d:d3:a2:c3:91:ce:df:61:09:f7:a8:55:bc:
5a:80:72:1e:eb:ce:d2:30:30:43:a7:bc:03:cb:72:08:50:76:
3e:15:d8:5e:94:8a:68:ad:db:60:26:4e:d4:aa:9c:b7:31:ad:
5d:b1:ab:08:c5:c8:ea:00:5e:b2:42:42:86:17:30:fb:6d:37:
91:20:a7:c2:38:82:b2:89:cc:08:ba:f1:a0:57:5f:c8:b2:8e:
6c:8f:3d:f0:35:a4:e5:3e:fb:4e:f8:8c:9e:44:2c:01:64:ee:
d8:0e:40:05:17:09:84:39:14:1a:7a:51:4c:d3:9c:c1:f4:e5:
f3:26:4a:86:30:f4:02:6b:3c:e3:be:d1:95:97:2e:10:7f:6a:
a5:6a:3a:62:df:21:c6:73:c3:e0:fd:8d:24:38:0d:a8:f9:36:
01:8e:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:40 2026 by rpki-client