Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: 6nWAv70ua/X9HOkgviRDza0zpEf9HJp8TwWl917tGq8=
Subject key identifier: D7:AE:CD:AB:F0:60:1C:21:D9:F9:51:D5:1E:FE:06:C3:AC:53:5F:0C
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019CAB6BAB29B3A59BFEB935BA63546032FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0C09
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: CuQjX0TRKTCV4maHtx/7dGnN6biMeiLTuX48RsIx+MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ab:29:b3:a5:9b:fe:b9:35:ba:63:54:60:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=d7aecdabf0601c21d9f951d51efe06c3ac535f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:8c:06:f5:15:b2:2f:ed:19:86:c8:ea:3e:
a4:82:52:4d:bc:3f:41:57:0d:d6:25:aa:75:fb:4e:
70:77:67:23:80:86:1b:89:8a:7b:5b:b2:18:3d:fc:
77:ed:da:e5:2b:12:b7:ce:9e:cf:40:e6:39:f5:ea:
c8:74:b0:71:d0:e1:28:db:1a:46:5d:1e:06:11:6f:
b4:92:d3:86:bf:00:29:7f:2b:eb:9e:8a:f7:28:fc:
c0:09:9b:2b:80:01:8a:3a:0c:9e:6c:dc:af:d2:a2:
1d:13:06:78:6e:01:5f:fe:69:dc:a6:7e:4f:32:f9:
94:f4:ca:a3:49:53:c1:cb:ad:18:59:27:dd:2e:6b:
a2:c0:cc:54:c7:fc:80:f5:62:3d:21:02:6c:ca:02:
8d:73:4e:6a:95:c0:50:01:f2:c3:55:14:74:57:b1:
f2:2d:06:52:d1:67:0c:e9:cb:0e:b0:c5:6d:0d:b2:
99:40:42:3f:b3:82:95:3c:28:bb:8f:f6:2b:fb:08:
c3:9e:64:0b:99:98:cb:30:10:70:87:f2:75:8b:6c:
0c:ed:d6:e7:40:25:c1:e3:ab:63:a5:22:53:39:1c:
65:12:ec:3a:c4:c2:13:33:72:b4:f6:ff:a5:a6:93:
35:4c:09:e5:34:01:93:2b:7e:53:83:9f:2d:42:5e:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:CD:AB:F0:60:1C:21:D9:F9:51:D5:1E:FE:06:C3:AC:53:5F:0C
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:62:ba:09:2f:a0:93:6d:40:03:37:8d:31:42:ea:71:46:82:
b2:e4:c6:3f:ea:4d:04:da:1d:d4:e4:31:5a:02:1a:cd:fa:35:
37:b8:31:b4:e5:f4:eb:cd:08:b0:30:df:f7:16:6e:c6:4b:4a:
d0:bb:db:9f:4f:27:9c:a0:cf:29:bf:8f:0f:8f:13:d9:b9:65:
e9:dd:cb:aa:6d:f3:a4:1f:3e:98:94:88:1d:0a:0d:5e:55:5d:
95:82:bd:7b:32:af:84:af:5c:34:3f:15:20:5c:c0:21:b4:e0:
e9:b2:cf:6e:86:17:9a:d7:2d:4f:ed:24:c1:4a:22:8b:c0:99:
47:fa:c5:da:99:2a:12:2b:24:e1:fe:18:9d:07:ff:84:67:74:
23:d7:13:15:ab:21:e2:b6:7a:76:ff:67:7c:bb:53:4e:71:5c:
64:e1:e5:84:94:a2:ef:fd:3f:b2:c3:e1:c2:1c:e8:59:a6:69:
72:3a:d0:67:97:16:b4:bd:f3:c9:78:d1:7c:b6:38:1f:fc:31:
3c:56:2c:f1:6c:09:a7:28:fe:47:fd:a4:04:16:84:35:c6:78:
1c:b2:16:74:a5:71:b0:0c:b3:d9:a6:97:bc:79:2e:34:70:b4:
33:de:de:58:39:5d:ea:0f:83:1f:1b:8d:05:d9:0a:80:e0:14:
23:25:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:52 2026 by rpki-client