Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: jgmUP9pnv0ecdIoFOYOtR+H4HSPx5rfDo+9VBXvY3cg=
Subject key identifier: F4:A7:31:FE:93:37:2D:E2:E1:9B:CF:D2:7E:62:CB:00:CF:F9:06:BD
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019CAE35EEC610DB570D60E1D8A9B416B90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 0649
Signing time: Mon 02 Mar 2026 11:01:35 +0000
Manifest this update: Mon 02 Mar 2026 11:01:35 +0000
Manifest next update: Tue 03 Mar 2026 11:01:35 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: kgu7dZEsnZLwT4Hp0E/FdYhXMLGyPK6pWCJMVumcZyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ee:c6:10:db:57:0d:60:e1:d8:a9:b4:16:b9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Mar 2 11:01:35 2026 GMT
Not After : Mar 3 11:01:35 2026 GMT
Subject: CN=f4a731fe93372de2e19bcfd27e62cb00cff906bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:7d:10:f5:ff:fa:76:3a:ec:e3:d9:b4:9f:
aa:d6:f7:27:79:e6:5f:5c:c8:5d:48:df:e6:03:b7:
28:58:9d:36:35:bb:76:cd:72:3f:d2:d2:7f:92:e5:
8f:9e:c2:47:21:51:02:4b:1b:ca:c9:ba:04:6e:5c:
1a:03:e6:92:bf:81:99:7e:ae:d5:81:cb:92:b6:b0:
cc:44:62:a8:3f:36:a1:be:8b:27:4f:17:50:76:64:
8e:f9:30:df:1f:c7:e3:22:f7:86:de:06:6d:97:7d:
19:63:55:9e:92:c0:bc:f8:11:66:5e:6e:28:e9:e7:
2a:87:b0:15:f6:8d:64:a4:b5:b3:9a:58:69:de:84:
7d:ee:30:ac:a2:57:0a:3d:95:ec:53:dd:29:32:63:
fd:b7:10:7f:ea:94:3c:e2:a5:1d:19:3a:2f:e1:b0:
44:c1:aa:53:64:a7:2e:86:68:9b:ff:dd:93:c3:8c:
51:ae:f9:ad:8e:09:ae:16:a2:81:4c:3e:d6:20:1c:
bd:45:58:78:94:a4:ce:5c:c7:8e:8f:ac:1a:a6:fa:
40:56:25:2b:40:5a:d7:98:07:fe:19:d9:2d:0f:a8:
b4:15:60:36:d0:85:5e:90:18:9c:83:cb:79:8a:be:
00:f2:5b:de:0e:a5:f0:55:5b:44:d7:16:77:d8:aa:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:31:FE:93:37:2D:E2:E1:9B:CF:D2:7E:62:CB:00:CF:F9:06:BD
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:2a:69:d7:94:91:18:33:ae:90:c3:2a:3b:32:36:81:cc:
3b:c7:f7:5c:7d:e2:e3:97:dc:b8:dc:28:51:5a:81:0c:a2:df:
39:0b:4c:60:03:e8:4d:62:3a:0b:46:66:30:9a:4a:e4:4f:67:
c7:96:73:40:27:ce:08:5f:2d:6e:95:fb:77:86:5d:2b:55:d3:
47:49:58:73:b2:0f:ab:be:a1:ad:d6:88:e3:41:0a:12:28:36:
62:9f:94:cb:1c:6b:8f:df:2c:a6:6a:28:cc:5b:6a:27:38:c7:
e5:40:c0:98:3d:22:71:1d:a5:36:3c:1b:a7:cf:8c:6b:db:3b:
ba:81:6f:16:38:93:8a:a9:59:6d:cb:51:41:4c:d7:43:b9:9c:
d8:ff:de:9f:18:b1:12:57:89:b9:da:3e:04:4a:b5:96:57:0b:
a3:f2:6a:3c:c0:35:59:44:00:87:67:38:4f:94:14:89:3a:76:
f3:3a:7b:60:72:de:89:35:7c:c0:17:6d:1a:a6:1f:9e:47:5b:
df:de:20:fd:ae:cb:b4:2a:af:2a:15:25:68:ce:35:61:6f:63:
fa:53:76:be:7c:c2:a1:70:b6:01:fe:b0:5c:86:61:49:a6:bd:
3d:01:ec:58:1f:b3:04:d2:97:83:68:88:88:b3:e0:03:ed:c3:
fb:ee:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:40 2026 by rpki-client