Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: 1K2MsWzNwp6F+KsEeFYob/jhMJSPD8I8SJ7xQ8LWwww=
Subject key identifier: 05:9F:87:D2:84:06:58:67:C6:89:46:40:BA:BA:3B:F4:1D:4E:B7:EC
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019CAAC629C47B72EC1A027D96C899AAB1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: D932sOuP1KKkLWGDUJloOCbbl0C0jZk1o8X9HaKJLig=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:29:c4:7b:72:ec:1a:02:7d:96:c8:99:aa:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=059f87d284065867c6894640baba3bf41d4eb7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:a2:8b:8d:7f:47:37:47:91:61:7f:43:7c:
de:7d:4b:3f:a6:7a:86:de:96:6e:77:b5:60:b0:9f:
31:f9:d6:13:a1:d3:50:c3:af:6d:20:7c:d5:38:05:
01:d8:80:a0:69:3e:b0:02:5d:a1:a0:e4:c0:c8:5d:
78:1a:a8:be:7c:66:ec:ce:17:26:c5:8d:75:dd:fa:
30:de:74:00:7d:d0:63:b1:8b:e2:58:8d:3a:e5:29:
9e:a9:35:f2:37:24:38:b7:32:c0:18:3c:24:a1:3b:
05:e1:54:cd:75:c9:c2:06:6b:63:8b:91:52:ef:a6:
8b:23:56:ca:87:10:82:1e:95:53:ad:82:84:63:00:
4d:2c:af:67:05:e1:bb:eb:08:ee:a6:93:1c:b3:48:
67:fe:56:03:2d:42:e8:5e:27:59:26:1f:73:fd:3d:
b4:3a:12:84:42:a1:f5:46:b3:b6:61:94:b8:4a:dc:
d8:8f:17:ff:29:8f:0c:cf:2d:b6:95:68:98:83:2e:
c6:0f:d4:1e:21:80:a6:c3:7c:7f:20:98:58:75:ee:
1b:ba:87:a1:e2:96:69:0b:f6:bf:e7:5e:1c:84:d1:
62:06:47:f4:92:50:d7:8c:4b:e9:ab:cb:77:2a:86:
8d:30:2c:92:3b:e1:76:ec:c2:df:ad:c5:88:39:c4:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:87:D2:84:06:58:67:C6:89:46:40:BA:BA:3B:F4:1D:4E:B7:EC
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:87:f3:b7:d0:f7:c9:87:ee:9f:fc:fe:39:c7:b6:93:b7:
01:51:37:ef:a2:db:df:7c:c0:b4:00:76:da:74:05:b4:50:5b:
25:e9:d2:91:73:fa:28:43:59:01:01:e2:24:3c:7e:cf:b1:5b:
c5:02:c0:3e:d6:a9:d8:83:4f:b8:71:8f:ff:39:00:36:d5:14:
2b:00:73:0a:b6:d1:ef:55:a1:b3:c3:b6:5f:b4:0e:01:33:50:
b8:39:4b:87:c2:0b:f9:50:c1:81:b3:7e:4a:d9:ac:a6:c7:31:
74:ad:80:2c:f9:26:85:20:7e:ed:f2:7e:93:7f:8e:99:06:e1:
12:e1:3d:ae:34:fd:08:76:11:2a:59:01:22:e2:d7:53:ef:22:
97:ae:25:65:89:a8:12:08:d6:0c:92:6b:a5:73:f8:04:29:ad:
0f:2c:bc:d9:d2:4f:1f:89:96:7c:21:4a:77:10:2d:0e:9b:ce:
31:c4:6a:0b:e6:09:81:40:ff:98:24:a3:18:fb:4e:e5:f0:74:
f3:8c:2f:8e:a6:db:2e:5a:14:7d:32:43:20:8d:66:d4:62:56:
02:a6:94:2d:a4:4d:e9:d6:37:da:30:22:96:90:bb:55:03:35:
4f:22:e4:35:a3:ee:ad:81:76:61:03:71:be:23:24:bf:54:f7:
3a:2e:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:26 2026 by rpki-client