Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: Bt6lsDvOvtTH8F4N0wLFdZH2LUGBy9kyMD+ugpFPPvM=
Subject key identifier: 69:A0:8E:12:B5:A9:61:42:17:DE:97:28:49:B5:E2:92:33:5B:CC:31
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019CAAFD763A8342C1E0A266C5B75CB7E9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0EA2
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: FdwJtYfB27zJjuWPZVlknax4ZFlFQr/MkF8Qxz8PSfQ=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:76:3a:83:42:c1:e0:a2:66:c5:b7:5c:b7:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=69a08e12b5a9614217de972849b5e292335bcc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:fc:dd:b1:de:c7:75:3e:da:36:84:90:ca:
b4:e0:b2:54:cd:77:81:0c:7a:b5:1c:1e:c4:9f:6d:
8e:7e:57:69:06:f8:6b:8c:f7:cd:27:17:82:ea:5b:
9a:79:53:29:e1:dd:32:96:82:19:18:92:3e:fd:d1:
1b:70:5b:1f:a3:98:65:83:00:5f:e8:23:a5:74:29:
32:a4:4d:0f:72:71:77:e6:fd:b6:96:55:19:0d:07:
d5:be:1e:94:3c:d1:5f:00:6b:9e:35:b1:48:a1:65:
81:3a:b7:9f:d3:35:6e:1b:ae:a5:28:fb:29:e2:38:
5a:8a:ff:34:b1:a1:f8:55:a2:12:26:2e:35:11:37:
86:a3:a8:da:6e:03:10:c0:25:68:02:aa:dc:f7:d4:
70:f8:81:59:56:81:9f:92:22:e5:df:60:f9:b8:4a:
33:41:2e:2f:5e:5a:2e:69:6c:a2:ab:d5:5d:34:af:
3f:83:ef:a5:46:02:83:fd:54:b5:cd:6f:4d:4d:06:
e1:d2:92:b7:a4:ef:40:70:fe:84:c4:80:42:96:67:
22:e4:41:eb:4c:c1:cf:f1:5a:4e:2b:cf:2e:62:d3:
33:01:6c:d7:54:d3:d1:f4:72:9f:a8:eb:1f:11:96:
75:ad:7b:08:d7:51:15:83:08:40:e7:a3:eb:5a:8f:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:8E:12:B5:A9:61:42:17:DE:97:28:49:B5:E2:92:33:5B:CC:31
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:fb:df:ab:46:6f:8f:1a:b9:01:1d:bc:3a:49:08:4c:01:
92:42:25:61:61:c0:96:b5:1c:eb:f6:5f:14:c2:ba:cb:15:82:
c6:f2:de:5b:f9:76:e1:3f:dc:79:4d:2c:92:b3:93:1a:c0:94:
60:62:ff:c1:74:95:c8:be:84:99:b4:27:7b:b4:43:96:15:b1:
b1:01:da:7f:af:ce:39:74:b0:29:71:87:7e:74:fd:a9:8f:1a:
9d:a7:f9:5c:04:f5:9c:7b:da:0c:e8:9f:83:3c:cd:82:a5:18:
d1:67:12:37:74:d9:e2:c2:98:fc:62:75:cf:dd:4c:f7:f5:c9:
28:18:cc:42:67:16:0c:2e:39:fe:06:eb:c6:73:ce:34:c1:c3:
f4:ff:17:38:f5:20:3d:af:81:4a:72:45:62:e3:35:8e:7e:97:
07:44:17:5a:e7:5c:ca:83:19:2b:95:cc:5e:f1:03:47:2b:6e:
83:9c:a5:95:0f:42:c6:b8:9d:9f:a7:bd:5e:21:64:59:21:5d:
49:27:1d:5b:60:e7:42:28:a8:9e:32:04:00:fe:af:aa:66:80:
8f:16:c7:97:c8:cd:fe:1b:26:c3:36:00:64:2c:3b:6a:1e:11:
23:9c:af:ac:bc:7f:a1:ac:43:2a:bc:e3:ea:bd:f5:09:62:8d:
f8:74:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:52 2026 by rpki-client