Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: URn3apnMQEIF6fk1UhR8ZpHukftupszSDTJ1HCO4Hdo=
Subject key identifier: 08:78:3D:4C:34:C5:F4:60:88:75:54:0D:32:66:A7:A9:85:64:74:22
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019CAD90753E91E8E59A40EB0DF729C585A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0934
Signing time: Mon 02 Mar 2026 08:00:51 +0000
Manifest this update: Mon 02 Mar 2026 08:00:51 +0000
Manifest next update: Tue 03 Mar 2026 08:00:51 +0000
Files and hashes: 1: 0y3BSLlk43QtrfUoNgk-X73r4Lw.roa (hash: tEO4G8BHLgq+raaH5EwqIJrUEIOFZC3cQgG+JNY95JI=)
2: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 2G9bO5+IeoTmNXlL25MXv8y/jiA6JJgUx2Wm/0R7A+c=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:75:3e:91:e8:e5:9a:40:eb:0d:f7:29:c5:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Mar 2 08:00:51 2026 GMT
Not After : Mar 3 08:00:51 2026 GMT
Subject: CN=08783d4c34c5f4608875540d3266a7a985647422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:20:c3:f6:ac:51:88:33:98:8d:72:94:67:
b8:27:68:30:09:69:fc:9b:24:84:7b:89:54:2e:d9:
d9:ee:7e:7c:2a:9b:e1:c1:05:45:62:d5:0a:9c:e6:
80:c2:68:b1:9e:d6:53:fb:dd:c5:77:c1:6d:45:8e:
47:f7:7e:5f:60:e1:5a:ee:f9:0b:c6:24:62:44:1a:
9b:b1:14:08:08:34:2d:9a:eb:01:6c:92:54:0d:7f:
ea:b3:0f:d8:8f:8f:5f:8c:52:c1:70:0a:fc:8e:dd:
48:7e:cc:7a:0b:85:59:76:8a:e4:ff:83:62:6c:83:
51:ac:83:42:72:9e:9f:d1:40:a5:20:df:08:5a:b9:
e0:1b:06:27:49:a2:e6:f0:da:07:82:de:2a:12:ea:
68:71:b3:c4:b6:6d:14:f6:cd:b1:d5:c8:d2:f9:96:
5b:4c:36:d3:1e:56:d5:32:b4:f3:e1:df:6a:10:03:
a6:56:79:40:e7:83:3c:16:5b:df:50:a4:ed:c4:2b:
04:3e:38:95:24:70:f4:38:8c:56:c3:3f:21:d8:e1:
20:49:df:25:f2:22:33:39:65:5e:79:32:12:45:90:
1a:4e:29:27:bd:59:ae:32:19:a3:97:91:2d:2f:a4:
ce:6a:73:b3:45:32:89:82:ed:e2:dd:5a:ec:9a:af:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:3D:4C:34:C5:F4:60:88:75:54:0D:32:66:A7:A9:85:64:74:22
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:88:4d:30:b8:d3:01:9d:ab:51:dc:b0:bf:cb:aa:2c:34:75:
fd:7a:2f:1b:72:d4:36:0c:ef:c3:9d:a5:39:c9:ed:cc:27:da:
6d:79:7b:1e:3a:f9:09:ae:37:2e:79:ba:f1:3e:c1:9f:9c:96:
06:e8:42:ab:e9:ca:3f:ef:c4:f6:61:47:ab:69:23:93:fb:41:
63:e2:f3:67:71:c9:c8:a6:17:19:fd:89:0c:a2:73:ad:7a:5d:
f4:18:25:09:8f:0f:d5:34:fa:47:91:bf:c6:87:e5:68:c4:ef:
7b:a0:f7:e0:19:48:61:be:0b:95:e4:8b:32:4e:51:6d:2d:fd:
22:22:c3:39:48:3a:6c:42:b8:72:14:99:f1:43:ca:ce:c2:0c:
33:7d:2d:78:02:82:44:97:f2:da:8e:c3:28:c6:73:80:ae:59:
b8:96:c3:b5:62:33:a7:89:ce:10:06:57:43:60:53:c8:6e:f7:
64:05:79:96:29:34:74:19:e2:27:ef:c3:5b:1e:2d:41:ff:57:
b3:c6:1f:09:4f:a0:1f:80:b9:9e:a1:26:31:7b:cd:21:9e:41:
d5:58:ba:5f:a3:40:04:69:ec:74:8a:41:7d:ec:60:db:05:09:
1f:6f:30:db:a3:53:75:d1:3f:37:62:de:1a:10:1d:f2:95:14:
93:ab:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:44 2026 by rpki-client