Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: WsC/hSGBL1pcrNQs/bwU98b9SG10DK24zY8jlgz/7dc=
Subject key identifier: 7B:9E:E5:B7:41:61:24:8E:EF:06:C7:FF:29:6F:6E:9A:2E:5E:48:91
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019CAC7E1B0FFF9E11F23761C3616953C931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 1237
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: zvQ3u1DaEfHyRUB/Z2hGXfBpSdwmnK4KnQ+eKT377LA=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1b:0f:ff:9e:11:f2:37:61:c3:61:69:53:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=7b9ee5b74161248eef06c7ff296f6e9a2e5e4891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:a2:ee:ef:cb:f4:ec:8a:9f:e2:a7:02:ad:
56:be:2b:3b:bc:56:7e:27:bf:83:46:e3:d4:f2:55:
b8:a5:23:4a:44:15:2a:a6:f5:16:23:a6:ad:d4:dd:
15:95:66:c3:c7:09:b6:73:0c:21:12:a2:bc:49:9c:
17:b7:00:c8:e9:ac:16:57:33:4b:46:fc:12:18:b3:
30:41:a1:0e:4e:1d:66:d2:6b:e2:47:3e:22:78:73:
09:2a:44:41:e2:2a:e7:0f:43:a7:3c:4a:ee:d7:43:
96:c3:01:ad:ab:f3:f8:61:61:c7:a6:1a:91:c5:9b:
08:de:87:22:b1:40:ec:6b:92:da:04:f2:a0:a0:ad:
9e:84:c9:b0:3a:74:d9:90:a8:cb:64:73:e7:51:56:
2d:ac:1a:32:b3:00:6e:c5:f0:c3:46:ad:72:5e:b9:
59:c4:6b:76:3c:21:7c:85:99:68:d8:04:65:8b:7d:
8e:37:91:44:11:1a:cd:3c:b6:42:6f:c6:46:60:e5:
a7:a3:aa:8e:6d:7a:65:f9:0a:61:08:ec:ea:45:ce:
6e:b1:aa:ff:45:16:74:cf:96:3d:90:e5:6b:81:8d:
ae:a1:d1:10:52:57:19:e2:90:61:ac:ae:17:55:58:
73:0f:af:1c:4c:92:ef:31:f0:4e:a5:22:eb:2b:65:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9E:E5:B7:41:61:24:8E:EF:06:C7:FF:29:6F:6E:9A:2E:5E:48:91
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8a:b5:68:13:27:f8:a0:03:8f:f9:bb:71:f0:5f:33:ca:6e:
9c:51:33:d0:24:4e:29:3e:99:6f:61:4d:fc:55:85:11:3e:81:
f1:1b:19:d6:08:cf:f5:b6:70:bb:d7:d7:b0:74:d0:26:c6:4e:
7b:d3:14:be:e3:69:c8:99:a0:24:bd:5b:fa:1c:24:04:b0:a3:
5c:ea:05:bf:bc:76:e9:b6:1d:5a:a5:b9:1f:ce:53:0d:20:22:
2e:62:f8:67:f1:c5:83:01:73:ed:1d:50:34:8f:6e:76:32:06:
1b:78:0b:a6:dd:c6:70:3a:2b:22:dd:b6:d2:f0:5f:b3:2d:16:
f0:d7:49:69:5b:00:36:af:96:c2:ed:d4:29:30:d0:eb:ee:74:
63:a5:7d:fd:b5:4e:35:fc:40:1c:3f:3d:09:08:2b:87:89:15:
c4:15:a2:f6:47:cc:77:8f:77:9c:b7:0c:9f:19:4a:7b:d7:5f:
60:89:ff:fe:99:f6:bd:6c:20:96:21:03:a2:06:29:f0:0e:88:
4c:24:7f:63:2e:e9:12:95:9a:73:cc:f4:c6:cf:0b:d9:eb:94:
2f:d3:56:4f:2b:a0:05:73:af:0b:90:8d:3c:1e:25:51:f8:9e:
19:29:63:33:1d:16:35:46:ea:48:6c:e2:55:55:04:1d:51:9a:
95:52:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:36 2026 by rpki-client