Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: w0kUNyfntcIzPdOMWV8DXk2mKKxE+euGc5yECEt1QoA=
Subject key identifier: F5:3F:46:ED:C4:4B:4F:04:9C:8A:8A:CD:B8:CD:B4:37:0D:F6:4E:00
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019CAC103C357B24B3C391676B6554F0E6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0CC6
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: 20YDp4Ib7BkwLQ9Atb2PY2cMt0UOFyZeV43fYZn7W78=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3c:35:7b:24:b3:c3:91:67:6b:65:54:f0:e6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=f53f46edc44b4f049c8a8acdb8cdb4370df64e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:31:f6:96:a7:df:b2:38:09:f7:aa:9b:db:
c0:ea:42:f1:a7:c4:27:65:65:c9:54:7f:f5:e2:20:
38:ee:09:22:d9:4b:b5:d0:1c:28:94:cb:74:0b:8d:
d6:b8:aa:fd:38:96:bf:01:5e:97:2a:f5:b6:ee:b3:
f4:d5:52:e1:9a:80:87:a4:88:87:02:1b:ad:e0:e2:
ec:b7:5c:a3:e6:d3:85:87:40:4c:45:2d:e2:41:85:
62:97:4c:dc:81:28:64:22:e1:bb:97:2c:0f:3f:35:
05:92:91:78:08:31:d6:b3:93:77:82:8f:3c:bd:d7:
a0:11:84:4b:c0:c6:f7:50:6e:28:0a:c9:0a:d4:8a:
b8:33:01:00:2a:dc:c3:2a:78:5d:35:8c:d4:58:eb:
2b:f7:ab:a2:41:69:c5:07:fd:38:59:bc:b1:55:af:
71:36:ae:d8:63:f2:28:5e:0b:b1:e8:7e:9a:ce:3c:
73:8e:60:9b:74:15:a3:d1:3e:f2:84:27:51:73:c2:
c9:9d:41:e5:0d:01:e0:55:2f:3c:69:93:e8:54:74:
23:06:13:a0:9f:f5:59:8d:e1:82:a4:cd:55:77:19:
7b:69:06:f3:88:95:00:8e:f1:e5:3a:4f:09:24:ab:
44:73:5d:d2:a5:0e:f5:ed:bd:2c:b2:06:df:1e:fa:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:46:ED:C4:4B:4F:04:9C:8A:8A:CD:B8:CD:B4:37:0D:F6:4E:00
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:cd:31:48:1d:74:65:97:5a:07:21:63:06:b1:b0:57:ce:
4d:31:35:cb:6c:8e:de:57:53:a7:e0:26:d2:8d:60:49:1f:0f:
4e:57:03:2a:4b:0b:ee:59:f9:c0:50:61:f3:dc:09:47:a5:66:
ce:ef:98:b9:91:49:99:de:3d:12:61:02:86:96:8f:43:00:c6:
e1:69:0f:83:ea:6b:96:73:38:74:cc:03:e7:7a:0b:13:c1:f1:
31:6d:82:df:57:9b:07:f7:1b:1d:60:2c:98:96:75:e2:97:9c:
a8:04:d3:b5:ad:79:01:33:04:fd:52:73:4d:b4:ac:a0:4f:8f:
c9:6d:c7:cb:ae:0f:47:c5:1c:4d:b5:b4:5e:fc:40:fb:82:64:
ce:8e:c4:65:4e:6d:c6:f9:0c:b7:c6:f8:97:65:69:16:a0:c1:
dd:9e:21:a5:c6:1b:c7:a5:32:fc:46:11:51:67:28:98:a6:c3:
e3:34:27:96:dc:55:db:d4:e7:1e:36:91:5d:df:c6:c7:93:81:
7f:2c:33:a6:16:8c:2f:30:9c:8d:d1:45:18:e8:8a:91:37:6e:
92:81:02:60:c9:88:78:b7:63:39:89:fc:7e:a1:e1:ad:1a:8a:
d9:e4:ac:a2:99:71:e6:3a:d2:3a:90:61:12:41:a3:15:03:0f:
d9:9b:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:24 2026 by rpki-client