Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: QF7BmNQdWQrxdxYgs49fMw5r8Iz7RtLbezNf8fcmGq0=
Subject key identifier: 13:1D:72:F1:33:CF:9B:DA:97:9E:CE:D0:64:8D:D9:D4:9F:22:F7:3B
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019CA9EA95EE41A195A5CEEA08349707BB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 12AB
Signing time: Sun 01 Mar 2026 15:00:49 +0000
Manifest this update: Sun 01 Mar 2026 15:00:49 +0000
Manifest next update: Mon 02 Mar 2026 15:00:49 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 89DswWrIS2lGktAW2JMomXZh/7cN7o800hRKLIn5VFM=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:95:ee:41:a1:95:a5:ce:ea:08:34:97:07:bb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Mar 1 15:00:49 2026 GMT
Not After : Mar 2 15:00:49 2026 GMT
Subject: CN=131d72f133cf9bda979eced0648dd9d49f22f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9d:84:a7:a7:64:b3:7b:bd:f0:61:95:b5:3d:
c3:cd:00:dd:f8:11:fe:15:68:a0:7e:1f:9a:13:c9:
86:5b:1c:f0:5e:05:e9:7f:a8:c3:4a:1b:f2:8f:6f:
94:c5:f5:7c:ac:a2:b2:18:0f:c5:5c:4f:2d:e7:bb:
3d:c1:46:c3:d1:17:ca:e2:ee:f9:2d:da:68:ba:5d:
b2:cf:15:d6:f8:a7:a8:c5:86:3f:9f:1a:c7:c8:f8:
fe:47:5b:e8:ee:28:55:79:ff:9f:c7:83:cf:8a:c1:
2a:05:27:d9:e5:3d:64:97:27:22:40:e9:ea:ce:98:
88:e9:a2:22:a7:13:02:4a:92:7c:fa:57:25:78:57:
b7:59:bc:cb:f2:aa:1e:a2:c6:36:eb:9a:a7:1f:a9:
c5:ac:8c:0d:f8:88:45:07:ea:ae:59:7f:2a:8f:47:
06:4e:be:20:11:26:44:a4:06:9d:c9:92:6a:d2:6a:
1a:06:2b:5f:87:a7:01:ce:92:cf:d7:c1:ac:eb:09:
99:86:85:49:87:05:d4:3a:05:e3:0e:88:53:07:a6:
cc:b5:f0:cf:a1:af:de:2b:99:22:f7:e9:70:67:f6:
73:c3:51:1a:27:65:f0:70:dd:9a:ef:98:5c:e0:58:
99:c8:4c:8d:4e:39:02:9c:e7:9e:2b:79:a8:10:00:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:72:F1:33:CF:9B:DA:97:9E:CE:D0:64:8D:D9:D4:9F:22:F7:3B
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:06:e2:fa:6d:c9:f8:4b:4a:41:74:83:fb:6c:1c:db:df:
6d:d9:b0:a8:42:ef:9d:7f:eb:dc:1c:1a:40:70:9f:61:cb:7f:
c7:72:12:92:ab:f4:a3:d1:23:b7:99:d9:a6:21:85:c8:48:da:
e0:31:db:9e:f3:6f:32:76:2b:28:27:60:7f:c4:dd:32:b1:12:
58:a0:a3:fe:4a:14:83:6e:46:b4:fd:f3:a8:3d:8f:ce:20:bd:
7d:7e:6e:c6:ba:43:3e:ec:cc:5f:2c:48:55:89:0d:50:4a:4d:
a7:40:1c:44:3e:b0:13:f4:df:7a:38:ac:ad:5d:38:93:04:07:
7a:53:a3:40:81:5a:c7:89:66:c5:6c:4e:bd:94:32:73:27:ef:
29:0b:4f:67:90:3c:e5:f7:83:bd:36:43:39:eb:f0:50:25:18:
c3:ac:d6:96:89:03:7a:6e:eb:eb:72:05:3a:9c:0f:08:13:b5:
1f:01:a8:d7:99:f9:00:72:4c:51:c1:7b:7f:ef:c1:32:21:dc:
ed:dd:1f:b9:6c:6b:37:44:be:0d:78:5e:b7:d0:ce:9e:3f:a7:
2d:4b:ba:cb:a1:a0:d4:a0:dc:75:6e:de:00:89:ce:5e:7d:07:
cb:b1:bd:f1:0d:92:07:2e:25:27:83:28:44:06:d0:34:ed:dc:
13:a3:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:24 2026 by rpki-client