Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: KbNUcyozML42AtQ+v5POIp3H0K1BdEPJHR+mDZgzefM=
Subject key identifier: 0B:46:AC:0A:71:0A:72:DB:51:F4:EC:41:64:8F:0F:62:DE:15:3A:C4
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 019D277240BD7866F2A25E32A550F032F0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 06E2
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: 5PIugig2+bFDsejQKY4o8oiWAfNY686x9QygwM/4xQg=)
2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:40:bd:78:66:f2:a2:5e:32:a5:50:f0:32:f0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=0b46ac0a710a72db51f4ec41648f0f62de153ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:86:70:45:c8:cc:af:b8:55:4a:0d:a3:9c:
1f:5c:0a:a8:ab:b2:cb:6d:b3:05:81:d1:00:07:ee:
1b:47:75:67:fe:17:b9:db:db:2d:20:ae:23:18:6d:
ad:1f:35:de:b5:b5:01:b9:c5:c0:3b:b7:4d:68:64:
84:d1:ba:e7:61:de:49:00:a7:9b:9e:70:bb:66:44:
46:20:4f:18:cc:ff:1c:b7:d9:43:9a:23:cd:50:81:
ed:04:61:f1:80:1c:62:66:82:c1:c0:35:94:ee:98:
68:eb:05:26:81:e0:92:86:6a:fa:0e:be:34:49:29:
42:19:fa:68:dd:dc:23:7e:61:3f:4b:26:56:5d:1f:
bb:99:16:63:a6:7e:62:be:4e:a0:16:56:7b:4e:99:
44:93:69:fc:c1:bd:34:6e:d7:7b:fc:3f:46:0d:aa:
f0:c4:d4:96:fa:42:9b:c5:31:ec:2f:ea:11:c8:7a:
53:6a:13:42:eb:81:50:34:8e:78:c9:2e:c8:7e:57:
00:e0:6f:31:fa:f2:56:f8:50:bc:a6:d3:ae:40:71:
73:3a:c7:4e:31:da:a3:74:87:12:ef:f1:b1:12:c7:
d4:5d:01:ca:ab:e8:b9:7f:fa:13:5b:05:3e:f9:8a:
26:4b:b3:36:0c:96:3e:cb:4e:c1:48:77:3b:53:09:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:AC:0A:71:0A:72:DB:51:F4:EC:41:64:8F:0F:62:DE:15:3A:C4
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:36:24:8e:3f:fb:3e:e2:17:9f:79:b9:95:7f:f1:02:0e:
ff:93:92:10:26:76:79:8a:ec:ca:78:7f:de:0a:a6:55:38:e1:
a2:80:f1:a6:07:91:de:fa:1b:16:bb:90:de:5c:93:a6:59:b0:
d4:43:16:4f:5d:68:89:2d:96:ce:fc:3c:bc:72:52:0c:ac:48:
c2:ec:c6:7f:2e:af:e1:09:89:cd:ff:4e:bf:0e:07:f0:65:b1:
6a:57:a8:c6:65:4d:e8:78:f6:94:52:bf:c9:71:de:ac:51:39:
c0:70:6f:6a:e8:69:09:73:b9:27:4b:3a:26:7a:2c:d2:98:33:
e4:fe:4c:a8:f4:de:24:ff:38:51:4f:d9:ba:ca:cd:e2:d6:cc:
32:88:b1:a0:5c:a9:6d:44:41:95:0f:89:89:29:9f:0c:ca:e2:
c4:3f:57:05:54:4d:1c:d2:9f:56:f1:c1:a4:da:44:fa:c3:0b:
f3:c8:fb:ef:90:c3:21:8e:a0:82:b3:ce:7b:cd:e3:f9:60:10:
33:b8:07:ca:f9:4d:60:2c:bd:26:a2:f9:2d:59:09:3d:d0:b4:
62:90:74:dc:85:7f:53:30:ef:a8:33:82:92:8b:6c:38:b7:04:
f2:34:4a:60:08:c8:db:5c:60:6d:3c:54:3e:e7:10:4d:65:0c:
ff:d8:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:12 2026 by rpki-client