Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: JWdFzBDzt4AEZKpTDqm8fTNrFh/IR1vGr6QMie61W0Y=
Subject key identifier: 05:C1:1D:1C:A8:4C:A7:F1:BB:A6:72:BF:B1:5C:50:FC:DD:B3:1F:51
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019CB0FFB5C4C729777687E65F1692B1A80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 03AC
Signing time: Tue 03 Mar 2026 00:01:14 +0000
Manifest this update: Tue 03 Mar 2026 00:01:14 +0000
Manifest next update: Wed 04 Mar 2026 00:01:14 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: vJT3Nuu7yFkCbJAtpH+0hx1eMoXqgEe1e6oqvaxpGXg=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:b5:c4:c7:29:77:76:87:e6:5f:16:92:b1:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Mar 3 00:01:14 2026 GMT
Not After : Mar 4 00:01:14 2026 GMT
Subject: CN=05c11d1ca84ca7f1bba672bfb15c50fcddb31f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:a0:8c:6e:85:35:6a:e6:a3:cf:7b:c1:31:
e9:55:62:58:70:ab:ab:99:79:33:38:3d:b9:39:c6:
15:59:7d:b7:23:10:f5:ba:0f:c8:a5:9e:4b:d5:7b:
2b:a4:de:cf:4b:24:f0:c1:6c:28:04:f8:e4:cf:06:
e6:7b:93:52:eb:eb:29:60:75:7a:4a:8e:af:cb:4c:
31:ea:ac:50:4d:3c:0c:6c:3b:6b:13:82:a1:16:30:
73:09:37:31:8c:51:31:04:85:71:31:1b:28:ae:2b:
80:a2:9c:25:4a:e7:76:c8:6e:32:ed:6c:29:f6:76:
79:07:3a:bc:aa:fc:bf:8d:a9:b6:11:3a:5c:94:64:
e0:a7:dc:65:b0:7e:47:7a:a4:9f:db:6d:05:98:b8:
c2:3c:93:3b:aa:cb:48:e8:79:79:41:56:c7:09:45:
71:30:97:f4:09:d9:e0:21:4b:4e:f0:23:2f:9a:2b:
34:67:9a:25:61:a2:23:ef:3f:47:10:1c:d8:b0:b7:
4a:02:fd:5a:54:2b:3e:b1:24:4c:76:24:5e:f3:01:
2b:f8:9a:9b:a0:8a:73:f1:28:33:40:d0:3f:64:8c:
06:3d:0d:9c:dc:15:f4:97:9a:5a:53:96:64:1c:d2:
5c:af:53:d5:ee:db:18:3d:6e:ac:16:18:1f:f3:a8:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:1D:1C:A8:4C:A7:F1:BB:A6:72:BF:B1:5C:50:FC:DD:B3:1F:51
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6a:ab:0f:fd:c2:86:d9:78:c5:96:17:2a:17:20:f7:43:0c:
d4:ca:49:9f:32:96:38:1b:55:07:94:bc:ed:2a:7f:66:89:4e:
4e:db:6c:02:6d:a9:07:23:ed:1e:3d:ec:ee:47:5a:f0:b5:1b:
b7:4e:45:7a:e9:7b:96:3f:91:0a:2e:46:a0:7b:50:da:d7:77:
53:b9:f5:fa:ae:f3:7b:a2:8c:e1:ff:11:fe:3d:1c:50:90:86:
08:34:36:df:df:af:e0:27:aa:8d:0f:9f:34:33:d3:8e:e4:94:
1c:b3:84:18:e0:3a:d6:c1:88:66:40:99:71:03:0d:26:91:e0:
11:05:e4:31:4c:c2:db:7b:4e:5e:b0:7e:31:44:3e:e4:4b:dd:
73:f1:d3:b0:91:94:88:e2:0e:77:cc:99:2c:00:c8:a4:18:83:
37:fa:e5:d1:cb:77:e8:38:1a:55:f5:fa:13:7a:12:7c:86:e0:
bb:27:b9:5d:f4:6f:cf:85:93:1b:ad:2a:7c:91:7d:23:3b:ca:
91:2b:99:19:1f:51:1a:d4:2e:78:f4:51:da:52:1d:d0:a0:66:
82:83:44:1c:b6:83:da:a5:67:cf:0c:27:33:5e:d8:90:4b:43:
36:c2:a8:d7:65:37:8a:24:f7:65:e2:e7:00:19:32:99:21:a7:
b1:78:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:29:01 2026 by rpki-client