Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: Kq8xTJZbB1RGZ2dokM3NmHiw9H+AVljBnqn6nbEZIGI=
Subject key identifier: 0F:03:9A:70:1B:8E:48:D9:37:40:37:55:FC:FB:7C:7C:9B:33:E5:06
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019CAD5A18778071FE77AC1E3A0C0475E730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0908
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: xElXyoU6kooVTS/8Sl+zHXcdyCgCG2PgzUPdHqA5eeY=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:18:77:80:71:fe:77:ac:1e:3a:0c:04:75:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=0f039a701b8e48d937403755fcfb7c7c9b33e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:60:bc:ea:ce:25:18:85:48:e4:f1:b3:42:
c7:6d:b8:f8:65:63:5c:d7:63:16:29:d0:22:bc:08:
b6:77:95:4d:86:30:83:19:4f:16:e0:bf:14:db:5f:
9b:7d:f3:d6:e2:a3:2c:66:ed:aa:1f:cc:69:85:5c:
1b:bb:1c:5a:9d:17:8d:0e:8d:50:5a:81:07:bf:1a:
98:a1:c7:d3:e1:a3:af:80:bd:4f:58:40:aa:21:72:
02:42:95:02:86:4f:24:a6:c9:05:84:b5:55:d8:76:
bd:1e:7d:44:b4:9f:d1:09:ce:5f:82:c2:1e:70:e1:
ca:f8:33:80:09:65:89:19:f2:a1:e9:69:d8:f0:a5:
53:95:88:bd:d3:48:ae:71:8a:9b:6b:b8:b4:72:ed:
5b:2e:c1:92:71:72:39:2b:92:41:61:98:af:94:4b:
55:27:a7:d1:86:37:8c:98:fa:15:7f:57:52:38:05:
bf:4f:1f:d6:f4:fc:21:ce:a4:4b:8f:17:78:ce:c6:
5f:0e:72:e0:20:b9:ce:3f:97:62:f5:9d:ad:c1:3b:
78:89:e2:7c:60:15:5c:9b:b4:20:ff:81:db:ab:26:
20:de:4d:65:d9:69:78:ed:ce:56:db:e9:00:2f:59:
fc:7f:14:39:74:e8:2f:5d:c3:54:0b:79:76:75:44:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:03:9A:70:1B:8E:48:D9:37:40:37:55:FC:FB:7C:7C:9B:33:E5:06
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:2d:88:1d:76:ee:77:33:0f:02:5f:4b:30:f6:f9:48:d0:
4e:b3:2b:22:8e:b5:55:ac:66:4d:28:48:68:c1:bd:c9:a4:fc:
9e:9d:56:86:b6:e9:56:9f:51:89:c4:7b:ca:e2:67:0b:a0:eb:
b6:65:f8:be:71:8b:67:73:5c:8e:f8:4a:75:4f:2e:2c:d1:fa:
5b:4e:1e:97:c3:18:c2:79:f8:f5:d9:c1:61:00:57:27:80:87:
5d:3f:69:e5:71:1f:0f:f3:fd:be:25:a8:ff:4e:69:5e:4b:51:
4a:77:cd:50:69:ce:87:1c:13:f4:f7:e4:42:cb:8a:7a:3b:a6:
ce:36:1c:47:9e:b9:68:5d:19:28:e7:68:e7:3d:0f:29:19:73:
2b:62:fa:ca:d9:f6:c0:65:cd:14:d5:51:9d:a5:e2:51:b0:04:
69:ec:c7:16:3c:6d:f8:2e:be:f6:51:85:fa:d0:46:90:55:c2:
6a:28:b7:78:d9:c8:23:9f:30:38:a1:52:76:1b:bc:f6:5e:71:
9b:04:1d:65:dc:31:2c:83:fd:fe:00:e1:ad:3a:d9:f4:37:0b:
66:ad:f4:ab:e4:28:f1:40:e9:67:ba:22:60:70:ab:c5:1a:97:
7b:13:bc:a2:a7:da:26:89:3f:1d:f7:73:08:cd:0e:0d:6f:a2:
fe:8d:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:06 2026 by rpki-client