Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier: qCBapJifc4JdzkRwg4DkZShO/tIcftIy9UtWRk1cM8A=
Subject key identifier: 58:07:20:01:0D:34:6D:8C:FF:7B:65:7B:63:D8:D6:EA:B7:58:2E:39
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 019CAAC6ED33937544ED55F6312506F38B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number: 17FD
Signing time: Sun 01 Mar 2026 19:01:29 +0000
Manifest this update: Sun 01 Mar 2026 19:01:29 +0000
Manifest next update: Mon 02 Mar 2026 19:01:29 +0000
Files and hashes: 1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: ouBuvEEdKfE9jMVoA4BCkpGiXiw6Gy3c6nrxBJ3LZ8c=)
3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ed:33:93:75:44:ed:55:f6:31:25:06:f3:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Mar 1 19:01:29 2026 GMT
Not After : Mar 2 19:01:29 2026 GMT
Subject: CN=580720010d346d8cff7b657b63d8d6eab7582e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:c7:bd:94:20:f8:05:58:94:95:8c:c4:59:
85:80:a5:22:d5:45:fb:e1:27:01:e3:ea:0c:f4:a6:
e1:b2:30:aa:77:23:0a:f1:6a:2c:97:ca:2c:c9:ab:
d1:a7:fa:e3:91:d5:d3:c2:ca:84:4c:6f:c1:2a:d8:
cb:f9:88:7c:f3:ba:48:06:42:86:b2:f4:b0:b8:c8:
aa:50:a6:72:af:06:bf:51:54:17:7b:96:c3:a2:c0:
1e:ea:03:55:3d:26:c0:fd:3a:a2:57:de:fe:2a:70:
f8:6d:22:42:a4:28:49:96:c0:d1:32:4a:6c:0f:61:
28:42:fc:c1:45:e7:a6:64:07:7b:c4:f2:12:e3:c1:
e7:84:e1:62:9d:51:44:1c:51:2f:19:04:4d:59:3c:
37:d9:c9:73:a9:68:d9:15:83:71:35:a4:56:71:4c:
06:42:35:fb:dd:fd:d3:65:c3:68:93:b3:5c:36:11:
57:83:94:29:c9:92:57:8b:0f:db:f1:c4:b4:7c:96:
b3:f2:b9:f0:fd:7e:5d:20:3e:28:da:0b:5a:c2:97:
f3:8e:15:5e:5d:48:46:92:7c:71:33:a6:42:29:1a:
aa:23:c7:03:e2:fc:4a:45:21:e2:98:cc:30:73:46:
3e:9c:11:6b:17:ca:f9:bc:d4:11:1c:09:aa:c6:2a:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:20:01:0D:34:6D:8C:FF:7B:65:7B:63:D8:D6:EA:B7:58:2E:39
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e3:23:29:cb:aa:cf:3b:c5:47:9f:ec:b6:d5:22:f0:c9:6d:
9c:a8:84:47:79:9f:79:27:73:2b:19:cf:b8:0e:90:6d:ec:d2:
50:9b:2b:89:89:72:59:af:f0:83:02:98:ab:41:5e:18:55:79:
10:5a:08:9f:05:4e:30:f4:67:40:71:b4:e2:b3:93:57:c1:53:
ab:44:42:d4:4c:76:c3:c8:42:55:5f:96:2f:14:e9:5f:3b:08:
65:e5:50:80:c3:45:94:cb:c8:97:a5:7a:a1:ca:f5:64:78:c4:
51:64:61:bf:93:40:76:25:98:1f:87:40:28:51:32:24:2e:54:
80:7f:fb:64:a4:71:50:06:15:3f:cd:27:4e:3d:92:97:86:6e:
60:15:54:1b:3d:9b:3a:57:a3:96:22:69:59:1b:3b:0a:ed:62:
f8:8e:1a:50:f9:ed:07:a7:1b:89:76:1e:f6:c3:7f:3f:d5:a4:
87:b5:4c:a2:36:c9:70:27:af:0a:1b:b4:3b:5a:fe:88:d3:cb:
e0:62:e1:0f:45:1d:e3:dc:df:c8:20:f7:48:48:8a:fc:f5:62:
98:da:91:b1:7f:de:59:6a:ab:fb:44:e5:6b:97:62:3e:94:cc:
20:1a:9f:49:63:65:a5:e4:c2:fe:93:3e:dc:da:25:8e:16:42:
9d:ee:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:50 2026 by rpki-client