Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: erCNAdWmSfFleVzqtewqfbM9/EodJEuY9CpyAk+z3Js=
Subject key identifier: 0F:86:A7:7B:90:E3:EC:15:9A:EC:F8:22:83:EF:D1:C3:8A:76:93:55
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019CA8D836AA8C0F148BD0EB9ED37D856E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 07C5
Signing time: Sun 01 Mar 2026 10:01:07 +0000
Manifest this update: Sun 01 Mar 2026 10:01:07 +0000
Manifest next update: Mon 02 Mar 2026 10:01:07 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: cYVxwpFTSfPL+zNBBD1tbHQPDROrtKnWzh8o7NEidM8=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:36:aa:8c:0f:14:8b:d0:eb:9e:d3:7d:85:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Mar 1 10:01:07 2026 GMT
Not After : Mar 2 10:01:07 2026 GMT
Subject: CN=0f86a77b90e3ec159aecf82283efd1c38a769355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:8c:33:6d:f1:31:fc:53:a2:86:1a:fa:7a:
c6:c3:68:00:ef:71:f7:3f:b0:3b:c6:cd:ab:48:08:
b0:30:df:d7:c7:58:b1:62:09:62:ed:ba:8b:f3:cb:
21:24:34:eb:dd:92:71:02:da:58:23:ce:11:81:55:
b5:ba:f4:05:aa:43:6b:0e:8a:f2:e7:c1:b6:f5:b6:
12:a3:4c:72:0a:c2:af:8e:63:5a:cd:3e:f7:1e:19:
71:f0:a4:28:b9:56:05:02:02:16:50:79:f9:36:58:
16:96:a4:1e:06:df:20:e3:e5:fb:d9:b3:f8:f9:2d:
f4:47:4c:d9:aa:bb:cf:4b:78:f1:3a:fe:fe:0c:f0:
cc:6c:15:fa:19:81:6d:1e:77:6e:10:6d:02:ab:57:
9a:41:f7:8b:bd:b4:e2:3e:84:17:13:65:26:f9:d1:
f7:89:e1:c5:5a:7f:10:57:4f:81:10:0f:e8:e2:50:
89:8c:02:c4:35:42:f9:59:fd:cc:f4:e0:57:6e:16:
34:9c:25:67:66:e3:c2:ee:02:2b:17:63:71:b4:ef:
da:1a:ad:17:2f:15:bf:f5:89:d5:50:21:42:b7:36:
e6:23:7e:4d:73:78:1c:45:06:96:c0:e8:72:39:dd:
73:b5:12:a2:9a:bf:58:a7:a1:8c:cf:e3:54:47:2c:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:86:A7:7B:90:E3:EC:15:9A:EC:F8:22:83:EF:D1:C3:8A:76:93:55
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:e1:20:a1:38:99:7b:e1:59:cb:ad:f3:37:50:20:6e:02:
2b:ff:40:03:15:1e:e5:e8:07:b7:9d:4f:9a:e8:b0:28:c1:57:
10:ef:9d:c0:79:14:8c:8d:f0:2e:30:b2:e6:f2:64:ac:3a:d3:
ff:1e:01:a1:40:f7:af:fa:c7:0e:30:c5:3f:4f:ec:09:bc:f3:
9d:46:a9:e5:0d:05:e9:56:21:46:1d:e3:b1:c3:60:32:f3:37:
c7:fd:44:0f:04:82:49:35:69:e3:4e:77:f8:a7:8b:66:71:ef:
c0:ad:58:51:7e:f3:ef:bb:87:c4:f4:f6:c9:98:a7:0e:6a:84:
a3:37:ad:f0:ce:3d:e4:be:2d:f2:d9:d6:79:b2:e3:6d:42:4b:
36:2b:1b:e2:57:68:92:8e:1f:f8:9e:80:5b:e3:98:05:50:7f:
6c:ef:1d:1f:3d:a0:18:9a:f2:61:a7:07:dc:dc:42:5a:9f:84:
06:5d:bf:6c:14:5b:7c:1c:82:a5:c8:0e:12:bd:c9:42:40:0e:
98:85:47:b2:7f:ca:19:5d:ee:17:65:0b:85:1d:25:a5:0e:0e:
de:87:16:2a:cd:c9:84:e6:54:bb:2d:06:74:61:c5:55:53:a2:
1c:70:51:78:b0:cc:b3:32:1c:05:ab:c0:8a:68:ae:f8:c8:3c:
d2:c8:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:38 2026 by rpki-client