Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: dUbBGRhUUMLILX16T9m0lIiEvXqCHfSZfVv8gJVAf3k=
Subject key identifier: 4A:83:5E:33:AF:A7:14:D9:A7:45:4A:34:8D:FC:C5:53:8F:77:78:ED
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019CAB6BD7267548FD5B981EBDA620CD251E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0505
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: bfK8ED6RqePD6tQEUAiBCkJle8XdKTT+m28GJyekl6s=)
3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d7:26:75:48:fd:5b:98:1e:bd:a6:20:cd:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=4a835e33afa714d9a7454a348dfcc5538f7778ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:6f:08:08:92:6e:59:7b:14:07:87:1f:3b:
fd:92:c0:fe:7b:c1:cd:5f:46:c3:a4:f3:78:ab:45:
cb:fc:eb:de:5a:84:6b:25:5d:af:93:15:79:cb:da:
b3:dd:35:a2:c7:78:e5:98:11:23:a9:bc:4a:f1:83:
13:8a:15:58:89:42:59:11:15:11:0b:81:f3:19:27:
d4:86:f4:55:b5:70:0c:b8:03:38:6b:75:48:03:a5:
a6:14:63:ca:1c:fd:d0:5f:2d:6c:30:7e:96:5a:38:
d2:6e:fc:31:9f:ca:f6:38:ad:99:8b:b3:63:de:ea:
35:d9:0d:99:b6:cd:93:05:f9:11:00:c9:e4:74:a4:
99:19:d6:c8:3b:6d:e2:0e:eb:55:72:9a:3d:6d:85:
75:0a:9f:09:39:84:3a:6d:2e:a8:94:16:74:bd:9b:
39:c3:ff:7c:33:79:2b:95:5a:d2:5f:c7:ca:5b:1e:
ad:98:df:27:04:83:bf:49:8c:33:49:2c:37:b5:51:
66:12:23:4a:94:78:dd:c8:10:67:b2:b8:5e:fb:be:
fe:73:75:7f:a2:cd:04:72:8e:6d:80:23:6c:82:7a:
be:f8:69:81:be:44:e3:8b:89:ed:b8:18:aa:1b:c8:
92:07:03:14:f6:d4:bd:28:f6:c5:f2:ee:dc:13:ad:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:5E:33:AF:A7:14:D9:A7:45:4A:34:8D:FC:C5:53:8F:77:78:ED
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:1a:20:01:b3:3c:89:a9:05:56:a9:de:a6:46:ee:8b:f4:
df:f9:d1:7b:d0:c0:03:9c:f7:29:9f:d1:fe:8a:7b:cd:89:8a:
43:52:d2:b2:76:40:55:77:d3:0a:56:ea:4f:7a:22:0c:52:6b:
4e:68:f1:c5:7d:ad:92:4b:72:37:ff:14:f9:46:d2:fc:16:f7:
af:2f:95:64:09:90:68:07:2d:4a:04:26:31:2e:eb:93:bb:76:
c4:72:52:62:7a:d1:25:94:1f:9a:06:61:3c:bd:1c:1e:22:cc:
21:61:c4:36:34:ed:8f:87:ff:0e:e6:1e:20:15:bc:0d:cb:f2:
5a:aa:2b:29:a8:3c:ea:70:b5:77:ce:9f:b8:96:51:f6:11:75:
6a:ef:e7:cb:53:67:f4:f0:0c:3c:4f:3c:25:ff:5c:73:76:b6:
80:dd:d3:86:24:43:d7:bb:0f:fb:2c:1b:9d:0d:d4:03:94:93:
47:94:40:13:0a:6b:ff:37:6d:1d:9f:ed:5a:fb:1a:56:0f:ea:
28:0c:b8:44:33:16:f7:70:29:98:1e:2c:79:f4:ab:29:1f:2d:
07:01:f7:17:ab:25:53:d8:96:40:cf:61:83:cb:47:80:d3:8f:
d3:8d:9a:ce:a5:47:d5:8c:4e:79:d3:74:d0:eb:25:de:1f:cb:
7e:87:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:34 2026 by rpki-client