Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: d5Ie0Tk7XTqUJfyqZ+rzLQ7A0gqHca1AsLRpN+nNG9U=
Subject key identifier: 0B:4F:D1:2E:14:B2:7B:CA:CC:26:36:58:2D:8D:DC:6A:ED:54:BA:3C
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 019CABDA087EA542344169D8D028492CCD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 15FA
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: Dg4qMUQRL0x0hY/3CuxCaS4HJx++LP7LdJocxvyg0c8=)
2: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (hash: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:08:7e:a5:42:34:41:69:d8:d0:28:49:2c:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=0b4fd12e14b27bcacc2636582d8ddc6aed54ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:b9:08:72:c0:55:8f:c2:14:3d:2b:d4:63:
07:db:b4:4e:ac:7f:a0:c4:89:8f:77:59:8b:91:41:
4c:28:81:af:f2:4f:6d:10:64:71:2c:03:3a:69:4c:
b1:17:f1:b4:22:f6:41:49:d8:7b:aa:57:8a:da:7f:
09:08:8f:b7:68:71:fc:74:82:38:c5:1c:97:45:67:
84:37:b9:5a:d8:39:69:87:25:94:42:64:16:b3:3f:
3c:dd:17:fd:15:68:31:b5:23:e9:57:ae:40:06:e4:
da:36:e7:bc:31:d6:8e:96:03:61:a4:8b:c5:0f:d7:
1a:34:56:e5:8f:34:5d:ad:f8:db:ee:77:70:51:62:
27:cb:d6:66:11:99:d2:15:a2:d9:65:f9:c2:1c:15:
e2:69:71:04:2a:9b:fe:5d:0b:a3:f4:6a:b7:82:cc:
c6:7c:9b:0d:07:8d:8c:60:10:27:37:c0:70:78:3c:
a6:a4:a1:79:f8:f5:33:f4:76:8b:5f:a6:b2:4c:80:
1c:b7:4b:47:73:71:19:4d:e4:92:88:85:51:32:4c:
d9:96:b1:70:88:a4:10:5a:7b:31:72:4d:35:0f:f3:
d4:9c:93:30:5a:cb:40:bb:8b:ab:35:18:ff:40:ec:
1a:e4:ca:15:24:f6:6f:bc:e1:c7:ce:f9:50:08:7a:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:D1:2E:14:B2:7B:CA:CC:26:36:58:2D:8D:DC:6A:ED:54:BA:3C
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:03:f1:30:29:bd:8f:ed:4b:b2:bd:19:c3:2e:c0:17:06:8c:
0a:41:5e:34:89:eb:dc:b0:be:44:0d:39:d9:70:e0:7d:f4:57:
a0:16:0e:03:73:ba:00:17:2c:53:d4:77:0d:fb:da:c9:21:04:
57:4a:79:a6:5b:2e:7e:43:a8:1b:e5:da:61:b2:1d:c5:24:0d:
de:0d:3f:ce:c2:e1:11:e7:98:ae:f9:d2:da:d0:ba:38:81:6e:
55:c5:33:ec:28:f6:ac:8a:c4:97:77:34:4d:7e:7e:d3:11:95:
7c:ff:59:b7:53:ff:00:59:22:29:06:e9:1e:3d:1a:69:f4:5c:
a2:c1:13:ad:79:52:24:62:7f:ae:10:3d:1f:2e:85:a2:92:41:
87:9b:45:7c:ae:90:7d:bb:58:aa:60:4f:bb:6c:63:b7:bf:d9:
b6:2d:2b:b9:6d:e0:97:e9:48:2a:91:7f:4e:29:c2:52:eb:da:
3e:fc:3b:9b:31:18:41:2d:69:f1:61:85:5e:89:e6:bc:35:bf:
a9:f9:b9:fa:ff:1f:dc:e2:99:7d:2e:aa:83:34:fd:13:5e:d6:
e4:c2:b1:71:96:7f:0f:7f:3a:51:c3:14:ea:7d:65:be:8c:ba:
6c:a9:99:ee:67:36:51:71:69:f6:18:5c:c1:d4:e6:6a:0b:d5:
0d:5d:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:01 2026 by rpki-client