Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: nmkj2Xda+d5N8aBoqnjhAaplRijMCtORYqZejB+RVtI=
Subject key identifier: 16:E1:1D:97:C5:FA:1B:A9:15:90:AC:1D:69:91:2E:03:06:DB:DB:EE
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019CAAC69A33339F15E9FE3043B9F5249049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 07C6
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: ryYKBsepyAlY99RVs9bJCiEpGGv5EbMv8U796hC2kjY=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9a:33:33:9f:15:e9:fe:30:43:b9:f5:24:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=16e11d97c5fa1ba91590ac1d69912e0306dbdbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:62:80:f9:92:6f:70:7f:6d:24:13:de:33:
59:fd:af:18:0c:00:be:ab:8a:10:57:2a:b5:7d:44:
b3:5a:34:7b:af:be:a0:2b:43:45:13:8f:07:da:a1:
b0:ac:75:6b:fe:e6:86:52:5c:8b:ea:2b:fc:53:cc:
36:c5:90:37:9c:93:1e:33:a1:f5:6c:8d:8d:1b:f2:
b0:86:77:d3:e1:c3:c2:cb:bd:cb:85:5f:4d:41:7c:
1e:7d:8f:cf:db:20:27:30:e5:dd:4a:c1:eb:2e:12:
d7:16:4b:71:bc:e2:f8:1d:57:42:9a:c8:db:0a:02:
85:5d:06:58:98:69:8b:64:e1:6b:ec:4c:4d:a5:6b:
9a:84:e6:c1:51:9b:c5:6a:34:e2:3b:03:3b:d7:ef:
9c:57:3d:86:b3:56:88:96:8a:73:42:05:cd:10:e9:
b1:1d:f9:bb:08:ef:1c:a9:88:07:e7:cb:0d:86:a2:
95:94:55:d4:f5:2e:41:fa:7a:f6:9f:a4:e3:34:59:
fa:0c:c5:04:4e:21:32:a1:cf:ce:7e:88:06:df:60:
75:59:d7:b4:4c:cc:ab:12:59:a3:39:cc:79:0b:18:
47:88:40:53:15:d0:1d:bb:e6:43:46:c2:f5:1e:79:
88:73:dd:7e:e2:b0:b5:57:26:7c:e8:32:f5:56:60:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:1D:97:C5:FA:1B:A9:15:90:AC:1D:69:91:2E:03:06:DB:DB:EE
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d3:d7:bd:4d:6e:4e:3b:e9:44:5e:f7:ad:72:3a:51:12:40:
e7:da:75:c5:c4:3c:62:84:17:f2:f4:87:72:9a:e2:dc:06:90:
4f:64:c5:de:c1:83:ed:53:fd:70:1b:10:34:da:9c:ad:1c:08:
8f:2b:cd:f0:bd:c2:bf:be:32:23:57:b1:43:a1:19:f7:e7:f4:
03:85:43:b2:3e:67:04:86:ab:d9:af:29:15:ef:99:5e:94:ea:
4c:50:d9:2d:07:eb:ee:29:cb:ed:4b:85:a1:d1:0b:7a:2b:c5:
4a:35:23:fc:0e:5c:bc:a6:d3:c8:10:ad:ea:32:d6:9a:ce:c0:
7a:f7:fd:8c:82:c4:86:0d:a5:3f:f2:10:ce:e4:d8:bd:51:5a:
06:a2:b0:63:28:74:9a:f1:fa:66:c0:85:89:d4:4f:f4:91:8d:
c9:4c:9b:87:ed:03:47:dd:e5:dd:66:6c:93:a9:39:75:d9:55:
c7:34:31:45:9c:1b:f9:6b:db:c2:99:fd:a6:85:34:28:a5:cd:
25:15:b4:0c:54:96:5b:6c:19:2e:be:11:1d:67:68:e5:53:80:
b5:bf:c4:2b:6e:89:79:0d:e5:3b:5e:af:64:cd:c0:83:b4:28:
be:51:d7:e0:83:c1:5b:78:cd:b0:fe:05:41:0c:f0:33:52:42:
17:1b:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:40 2026 by rpki-client