Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: qB8QJA34InVLOMBpKN0yhhpLgMm8rUsVTLPMIjRH24U=
Subject key identifier: 38:5D:0F:9E:50:56:62:55:B3:66:75:A6:14:7F:8A:F2:FA:58:E0:86
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019CACB5192648633CC8148750D9F8E4ACF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 07C7
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: rgUB2PeMd8XwvlbJs6O9GrDL/x4UKEtvccLIXQ/rpX8=)
2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:19:26:48:63:3c:c8:14:87:50:d9:f8:e4:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=385d0f9e50566255b36675a6147f8af2fa58e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:55:d4:87:f8:de:72:62:25:27:7e:84:60:
3b:c1:22:76:be:f2:9d:97:43:01:84:7e:58:88:c7:
b2:e8:05:f1:60:e7:91:03:1f:b0:d0:07:89:2c:3e:
c2:d6:3a:38:01:5f:67:0a:ad:d0:9c:54:0a:53:e9:
0b:f6:99:e5:59:34:56:35:22:6c:b2:9c:cc:bf:d8:
dc:30:c6:9c:1c:a9:45:b2:ec:85:a4:1f:ad:77:74:
77:6b:a5:6b:8e:d8:33:8c:82:56:f2:19:99:c5:80:
43:3b:f1:a3:12:f5:8a:20:3e:99:e0:e8:91:ba:f9:
9e:de:d5:a1:c2:2b:18:f1:9f:d9:e2:c0:09:34:6e:
95:96:9d:7d:ae:47:9b:f1:ad:58:40:85:57:8f:c3:
c0:bc:85:7a:a7:cc:dd:20:c0:04:82:4e:17:bc:c2:
ed:af:f7:b0:af:2a:14:a1:07:db:20:9f:1e:ca:c6:
76:fe:60:4d:22:dc:15:20:04:33:48:17:45:a4:e2:
dc:15:9c:70:c9:9e:20:88:58:bd:bb:6f:c1:38:f1:
45:5e:c7:b6:ec:d6:62:d7:2b:4a:a5:94:14:ff:66:
9d:b3:2a:0d:34:c8:96:61:fa:73:5a:36:da:3b:7a:
35:6d:2d:02:73:17:ad:43:d3:59:b8:26:5f:c9:15:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:0F:9E:50:56:62:55:B3:66:75:A6:14:7F:8A:F2:FA:58:E0:86
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:00:64:0b:18:93:ca:59:c2:c0:c3:a1:3b:04:8d:47:60:
15:bb:38:96:15:13:ce:e6:5f:c5:4f:c0:17:de:7c:af:05:65:
14:01:ff:08:a1:31:68:79:32:91:99:75:8e:53:37:ef:b5:a8:
dc:ba:16:b6:75:0e:bf:02:2a:99:64:f1:2b:30:5e:4d:8c:13:
7a:85:07:8d:74:49:e2:e3:93:ce:ec:28:b6:e5:63:c5:1b:5e:
4e:68:88:f7:52:ce:46:7e:4b:5e:b4:48:a1:1b:a1:3a:2a:b7:
a3:4d:bf:9b:9f:08:f7:1f:e7:fb:ff:3a:94:2f:a3:24:e6:c4:
06:91:87:47:2d:02:3e:2f:79:55:7d:4d:b9:53:29:f3:14:94:
fa:db:8c:8b:fd:dc:5f:08:8f:ea:93:ed:60:7e:01:d2:c1:d6:
40:4e:80:15:c8:06:90:38:54:05:e8:e8:e8:25:b2:48:44:04:
02:99:bf:7f:67:94:6b:9e:18:ad:08:36:4a:cd:dc:73:63:61:
45:79:63:7a:dc:2a:d2:b6:78:b5:d4:ee:87:33:8a:32:fd:82:
96:93:83:6d:a9:2b:57:e2:fc:4d:51:c4:15:c3:ca:dd:df:ae:
f6:74:a4:cf:3e:59:2f:95:53:49:ad:e7:9b:b4:01:c8:73:c4:
86:cc:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:21 2026 by rpki-client