Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: NMdbh8k96vUAbZocqb40NhkLFmJzhOqdYW1sPuO1XQM=
Subject key identifier: 34:E0:5F:85:84:D3:0F:6B:DE:0B:C0:83:16:45:D9:EF:2F:63:29:74
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 019CAEDA213C0E96D0C3E7CD2E044FC56C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 17DC
Signing time: Mon 02 Mar 2026 14:00:56 +0000
Manifest this update: Mon 02 Mar 2026 14:00:56 +0000
Manifest next update: Tue 03 Mar 2026 14:00:56 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: snIgD/ESDliKkHN4eUzdw9fU5hUBRPrgoHJDimdGcO0=)
2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:21:3c:0e:96:d0:c3:e7:cd:2e:04:4f:c5:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Mar 2 14:00:56 2026 GMT
Not After : Mar 3 14:00:56 2026 GMT
Subject: CN=34e05f8584d30f6bde0bc0831645d9ef2f632974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:de:8f:e0:97:79:b5:35:76:04:d0:a6:02:
b7:c8:43:11:5f:a0:ca:2c:f5:37:a6:06:27:c7:b9:
cc:27:e8:07:08:08:63:d9:d1:ac:93:03:6b:f0:f8:
c4:ad:e2:68:bb:2c:ce:be:c2:9f:3d:cf:9a:8f:b9:
4f:94:7d:1a:b5:37:40:ea:85:ca:9e:3a:2a:53:5f:
5c:d0:cd:cc:20:74:89:b7:1f:93:3c:af:03:34:f0:
d3:67:a5:05:2b:f6:3a:f4:ec:18:3c:7f:52:ce:39:
02:2a:55:e8:45:cf:20:f0:cb:7d:cd:92:ad:58:b1:
82:86:fd:a2:dc:77:f9:63:f4:98:9e:12:e1:49:7e:
7c:39:46:15:ed:13:79:61:22:76:db:58:50:ed:ee:
b1:54:7d:f9:8e:f6:73:89:34:bf:b3:69:cc:b6:17:
40:7d:da:08:a9:15:7b:e4:3d:87:b7:01:be:7e:e7:
58:44:93:ec:24:e4:af:c8:7a:40:b7:47:5e:83:bf:
3b:b7:c7:16:b3:3f:dc:b0:c8:eb:fa:8d:ee:df:7c:
55:e3:46:b7:2a:75:1d:52:ae:4f:43:51:ac:02:32:
8b:c8:8c:ed:f4:2a:43:1e:75:01:89:f7:ab:81:07:
82:77:9f:f3:10:6c:92:11:32:2d:d6:b3:79:d0:59:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:5F:85:84:D3:0F:6B:DE:0B:C0:83:16:45:D9:EF:2F:63:29:74
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:93:9d:24:42:88:22:82:61:55:23:fc:4b:51:9d:a4:65:
e9:88:b2:75:d6:bf:76:ab:ef:0c:94:4c:5e:94:63:06:f5:f5:
bc:38:11:41:b8:2d:f6:bb:59:dc:20:2b:15:e9:40:3e:2e:26:
61:93:22:ba:5d:0f:c1:a6:8f:21:21:0e:84:27:1f:95:60:8b:
62:00:27:2f:72:70:32:a4:3d:e1:ab:11:17:8e:f8:ac:f8:c7:
89:c6:4d:49:f3:cb:71:88:17:be:f2:56:c1:42:da:79:00:6b:
fa:f7:d9:90:23:cb:6c:a0:9f:40:3d:8e:d2:b4:91:21:3c:d6:
4d:75:6f:29:53:66:cd:67:27:f9:bf:4d:9a:0b:ce:73:a8:1f:
f3:fa:83:31:b0:ea:28:03:2a:80:20:64:e2:33:1c:0c:ee:ab:
f6:a7:8e:e6:92:96:05:1b:23:4d:e7:ff:44:96:b5:2f:d6:16:
a4:8b:56:83:c7:1c:ac:33:af:76:3e:07:57:b6:e8:a5:a3:f6:
82:ac:b9:7a:e7:e5:49:7a:3f:3c:03:26:1a:c9:0f:6f:f4:c5:
a4:e2:62:c2:b9:e3:87:4b:7a:48:e0:cc:b2:de:e4:26:a6:ee:
41:06:7c:dd:a6:87:30:9d:d3:ed:80:ea:67:03:10:e0:49:bd:
f5:e3:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:01 2026 by rpki-client