Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: 9uhOPm+1Px4pukbTGgSmdC0I1gMvkXhSk4NSHFH82l8=
Subject key identifier: 4D:90:38:81:CF:DA:2E:FF:2B:8C:FD:B8:27:92:E3:D5:0F:8F:F8:EA
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019CAAC638FF4DB2AB73FEEF4272E57765E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 09EB
Signing time: Sun 01 Mar 2026 19:00:43 +0000
Manifest this update: Sun 01 Mar 2026 19:00:43 +0000
Manifest next update: Mon 02 Mar 2026 19:00:43 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: eaZnG+kTI6aDb1Cd5ERM1ynqw+miW+YXPGlflB2Z1D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:38:ff:4d:b2:ab:73:fe:ef:42:72:e5:77:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Mar 1 19:00:43 2026 GMT
Not After : Mar 2 19:00:43 2026 GMT
Subject: CN=4d903881cfda2eff2b8cfdb82792e3d50f8ff8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:d3:0a:2c:b8:68:d9:f9:85:59:34:33:e1:
42:1e:b2:b7:02:82:a4:8d:bd:d3:3d:1a:01:88:5c:
20:79:b5:ff:12:26:11:21:04:7d:6b:63:c6:19:61:
c1:32:ac:9d:49:ed:eb:9d:51:be:95:a7:b9:83:58:
fe:40:0b:98:f9:3a:a7:ad:16:9a:43:31:94:13:c2:
0d:a1:06:39:18:8c:c9:09:75:99:f8:0b:f3:c3:1e:
65:37:ca:1a:74:11:db:08:2d:f8:3d:92:94:ad:a8:
57:da:cb:dd:c5:d2:a0:5d:9c:a3:78:aa:56:d6:f9:
4c:78:81:ea:39:48:2a:aa:6e:cc:b5:d2:3a:5b:bf:
0f:26:05:f1:c9:27:ac:f6:78:73:6c:7b:a4:45:20:
56:4d:ed:41:a2:cc:7b:21:eb:71:59:f8:d9:72:69:
c9:b7:67:3e:b7:e8:c5:6d:42:58:32:2d:98:40:0a:
72:f1:39:4b:85:0e:39:65:ed:dd:74:a4:74:2e:dc:
4f:81:ed:1e:d1:f4:ed:8e:7c:e2:47:18:ae:47:01:
47:82:0a:5f:e8:a0:27:ca:22:81:51:be:d1:de:cc:
6f:a5:8f:70:ba:76:8e:4f:54:41:e6:0b:68:65:f4:
85:8d:1c:80:27:ad:7e:7e:b9:56:cd:33:12:7e:d7:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:38:81:CF:DA:2E:FF:2B:8C:FD:B8:27:92:E3:D5:0F:8F:F8:EA
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:01:9d:12:c5:32:48:fa:83:5e:d1:97:b5:12:2e:b3:00:
46:41:34:03:2e:29:a7:ea:e4:cc:b8:19:7b:dc:73:c7:11:59:
a0:c7:b3:86:14:28:e8:bb:9f:6f:31:97:e1:df:f5:7f:2b:64:
3c:4d:77:e1:76:bf:6c:78:f3:ad:0d:9c:56:a3:06:6f:a7:ea:
cd:a3:1a:e2:6d:6c:e8:2b:24:68:dd:c8:8f:0f:88:f2:8c:ab:
7b:13:d4:3e:1d:08:ea:44:1d:a9:89:de:b7:d2:44:f3:39:01:
3a:12:16:45:2f:1c:dd:11:eb:70:a1:95:e7:d8:cb:e2:9d:ab:
90:68:08:7d:75:4a:82:27:50:59:86:80:22:dd:48:96:cc:e4:
70:7a:fd:c6:ae:2a:35:1a:5e:1b:90:17:21:2b:9a:80:66:ae:
b6:9f:36:a3:68:72:c8:8b:b8:22:bf:01:48:f9:f1:0f:6b:fb:
a7:2b:e2:a5:e5:de:c0:06:9f:3b:25:db:b5:fb:d7:92:22:30:
19:64:6e:dd:3c:95:ec:e3:ec:6c:c1:4e:f8:e9:f2:c2:94:99:
a3:8d:ab:28:10:e1:b7:8c:11:4d:d8:c3:f2:99:f3:88:88:47:
bd:99:ed:47:f2:fa:03:f7:af:a4:b2:17:b2:58:ce:d4:d6:9a:
0d:01:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:35 2026 by rpki-client