Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: oiKeh3FO8bnUwD45Zt4c5alPTn/HAZRuMZXPAAfpzUU=
Subject key identifier: 7B:A7:F0:4F:06:EC:CF:37:44:3D:D6:89:2A:3D:DC:D5:A2:FE:8E:68
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019CAA21A439C009727AFC53836EDA816052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: CczNaGXoBHJe4tpX6FjjRPKCPXRdEUBxiHrOKBrWWRQ=)
2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a4:39:c0:09:72:7a:fc:53:83:6e:da:81:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=7ba7f04f06eccf37443dd6892a3ddcd5a2fe8e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:1e:5b:bb:80:0b:a0:5f:5f:f3:12:2c:15:
89:ed:c2:02:dd:35:ed:0d:ad:28:b3:20:08:af:ae:
25:b2:78:0a:d0:e5:bf:0a:c4:93:e1:c5:d1:61:e8:
61:50:25:78:fc:b9:79:e0:34:9b:b6:ea:f1:62:80:
5e:39:71:36:d3:62:4a:03:4f:c4:ed:78:7c:ae:f7:
7d:45:f7:05:62:d9:4f:df:15:8b:24:f7:31:0b:12:
44:56:3f:d6:83:f5:cb:0a:d7:de:87:0f:3e:89:12:
27:ee:7f:3f:f5:c5:75:f9:aa:7d:a7:9d:7d:a8:2d:
bf:44:c1:07:b5:be:6a:d0:36:21:6e:1c:04:b5:da:
9a:d4:b5:81:42:5d:de:ee:3b:82:88:2f:1c:cc:6d:
1a:46:50:c8:03:09:68:d5:75:8f:ad:7b:19:a5:c2:
02:e7:22:22:5f:24:b8:b2:49:48:04:c1:f5:2c:f6:
0b:34:d7:c4:df:af:31:22:c9:8d:85:ba:cc:fb:fc:
90:9a:4a:6a:2c:47:b7:1d:0b:cd:0a:8a:d5:1c:ba:
67:c3:13:f2:5f:b6:f5:51:29:a6:6d:96:a2:2f:d9:
6d:85:0a:51:28:49:2e:50:74:b7:89:25:17:b9:3a:
dd:91:d0:c0:7c:dd:d8:52:a1:97:3b:5f:af:83:b5:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:F0:4F:06:EC:CF:37:44:3D:D6:89:2A:3D:DC:D5:A2:FE:8E:68
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:6b:1c:cd:f9:af:ac:19:f4:5d:fa:68:97:3b:0e:be:0b:
29:50:80:4e:15:1d:04:a3:f2:e6:24:78:83:ad:a5:57:6c:4c:
7a:4c:06:b4:31:27:fa:fa:70:95:52:46:70:07:06:7c:bd:f9:
8a:3e:49:6e:c0:2c:f7:94:a9:05:34:04:03:a6:85:b7:14:8a:
cd:30:22:80:e2:de:39:88:15:b5:bd:39:04:dd:3a:49:5d:b1:
28:c6:04:fa:0b:59:c8:a5:44:b0:72:d4:51:06:a5:a0:3b:ce:
cd:a2:e1:cc:1c:2c:65:72:3d:bd:1e:8d:1b:90:f9:11:84:d7:
0c:20:7c:5e:84:78:f8:71:9c:27:b4:c4:72:8e:ad:2a:a3:9a:
fb:d7:dc:99:cb:ea:ef:b4:6b:74:ab:68:ac:16:f1:0c:4b:7b:
89:c8:b7:4d:dd:0c:88:6c:fd:d8:12:08:6e:99:9e:c9:9c:9f:
d4:e1:67:66:30:05:03:51:34:22:00:0c:dc:bc:ac:ec:5d:b7:
19:ff:93:3c:6f:05:ef:3f:cd:66:14:34:e6:f6:23:4e:af:37:
86:96:fd:63:d8:a4:a0:33:cd:53:14:ab:29:de:0a:b3:8b:e5:
41:ce:df:95:42:88:a6:a7:0d:57:d7:40:b2:e8:25:c3:c7:bc:
98:4c:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:38 2026 by rpki-client