Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: WojzLY17qLAHkKUXIzluR/Oj/sA26WOl7wYIGk38vEQ=
Subject key identifier: AA:7A:42:D1:8C:BA:69:9A:17:98:01:C3:E2:68:EA:71:B4:25:CF:1A
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019CA97C850D080D310D0FC6BDF7C3E7AC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 043B
Signing time: Sun 01 Mar 2026 13:00:35 +0000
Manifest this update: Sun 01 Mar 2026 13:00:35 +0000
Manifest next update: Mon 02 Mar 2026 13:00:35 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: g2sDm/yJz9WwXYPKmLzDW/Nan5X4qQz2y9rbChbhLoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:85:0d:08:0d:31:0d:0f:c6:bd:f7:c3:e7:ac:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Mar 1 13:00:35 2026 GMT
Not After : Mar 2 13:00:35 2026 GMT
Subject: CN=aa7a42d18cba699a179801c3e268ea71b425cf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:bc:16:2b:63:47:0e:5b:c0:99:ec:f0:7d:
59:d0:93:48:08:16:98:a7:83:82:1c:93:51:16:cb:
51:8f:d7:58:ab:e4:36:96:7f:70:e7:f2:42:1b:0a:
b6:5d:d7:f2:cb:a1:42:e2:12:7c:4d:c8:8e:dd:4b:
b4:fd:e8:d7:23:9a:4e:f5:cb:ab:3e:8c:16:a8:a2:
1a:7d:d4:8a:f4:83:d4:6a:3c:ca:c5:e9:3b:9e:15:
40:27:20:a6:ea:6e:37:35:46:09:91:61:d6:52:78:
d1:72:ae:2f:c6:df:6d:75:57:20:54:76:85:dd:eb:
c0:29:89:78:13:1e:5c:81:c2:68:e8:e8:e1:3c:75:
7a:8b:84:ac:29:d8:34:06:c0:20:de:8c:a6:8f:1d:
5d:29:79:74:9e:23:84:55:ca:98:29:86:fb:21:8b:
aa:ef:e3:eb:95:fd:4e:2c:58:e8:e9:49:e4:5e:9f:
25:a0:a1:66:25:66:bb:a7:ec:63:ec:4d:ea:56:5d:
f1:60:60:37:06:c3:5f:26:0d:5c:36:9e:99:bc:75:
f5:de:a3:3e:40:b1:10:1a:94:26:bd:51:0c:46:41:
71:1a:25:2f:bb:8d:c0:6f:ce:3f:1a:9e:f8:d0:86:
98:4e:39:12:5a:e0:6a:39:a7:8f:3f:fb:38:25:c4:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:42:D1:8C:BA:69:9A:17:98:01:C3:E2:68:EA:71:B4:25:CF:1A
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:94:16:2e:da:31:eb:22:02:91:6a:0a:97:26:51:7d:01:
5f:ec:58:bd:be:3b:d0:3d:26:98:29:49:4e:f9:ae:47:16:13:
83:32:04:95:b3:01:a9:39:af:85:48:7d:ed:b6:c1:2c:cc:07:
98:03:01:1c:e4:73:f1:48:df:50:10:66:25:4e:c7:2a:9d:d6:
0f:c1:99:70:89:08:37:a8:37:46:d4:2d:32:d1:3c:3a:7e:31:
1b:59:e5:00:56:c0:3b:e6:ed:c2:37:9a:1a:89:36:72:7a:db:
a0:42:57:cd:d6:26:30:11:86:b0:5e:9e:6c:f9:03:50:ae:27:
c3:98:7b:3b:40:3f:58:14:ec:05:20:50:52:32:56:ac:50:32:
4a:9c:1e:1f:fa:96:06:18:94:7f:a3:ed:75:18:f1:6e:73:48:
0f:39:e7:2f:12:d1:5e:e5:ad:a8:ba:da:d9:91:ec:f4:2f:65:
18:bc:4d:87:70:c7:09:f3:73:92:65:ae:1d:b4:42:05:f7:58:
bd:0c:63:09:c6:f1:df:3c:a1:10:59:19:54:c6:44:9f:05:e6:
3a:cb:48:a6:f2:4e:b3:a5:dc:46:8b:4c:89:d4:a4:1c:c4:3a:
b3:b3:a7:e6:36:00:1f:e7:e1:26:3d:35:c0:b4:4b:7e:39:37:
8d:72:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:50 2026 by rpki-client