Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
File: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft (raw, json)
Hash identifier: TK4IX0axx5ZZt/n7CTfF1ewnCZn5TXaWBHJoYHzDecY=
Subject key identifier: 32:B1:EC:47:CF:42:7E:9F:D4:58:4B:A7:B8:6A:5F:65:B4:E5:97:73
Authority key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
Certificate issuer: /CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
Certificate serial: 019CA7FD33D60B8CD95604F77E8B9DEB5394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
Manifest number: BF
Signing time: Sun 01 Mar 2026 06:01:54 +0000
Manifest this update: Sun 01 Mar 2026 06:01:54 +0000
Manifest next update: Mon 02 Mar 2026 06:01:54 +0000
Files and hashes: 1: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl (hash: 3YFxyAPPfWKNas5ptdO37PDXiQeMyzosvk6a85ub01U=)
2: XnLaG9PYNz8rUVpjon2kQr4cuFs.asa (hash: JI7fzzmhznUk8hukgTd4y7R4XLhGL1pr/tYt5yPOjXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:33:d6:0b:8c:d9:56:04:f7:7e:8b:9d:eb:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
Validity
Not Before: Mar 1 06:01:54 2026 GMT
Not After : Mar 2 06:01:54 2026 GMT
Subject: CN=32b1ec47cf427e9fd4584ba7b86a5f65b4e59773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:84:f3:47:ec:32:8f:f8:c6:1a:e0:09:4e:
43:8f:32:a0:98:ed:bf:67:a4:83:1d:6e:82:4f:fb:
2a:8f:79:a3:75:b8:db:46:bd:93:a2:8c:f7:73:00:
62:97:02:86:f4:d7:79:45:3f:9e:53:78:7e:72:0c:
4e:37:2f:e5:57:bd:fe:de:eb:3c:53:9a:ee:3e:04:
8d:c1:d1:be:e4:38:6f:18:46:68:2d:6e:65:be:01:
e9:d9:96:b0:29:7e:41:ec:39:a8:8a:ba:58:52:9c:
ac:a8:5e:d7:27:4a:a2:6d:65:43:d6:fa:b6:21:cf:
fa:74:16:ec:93:a5:7a:4a:a3:c0:ea:18:33:bb:1f:
43:22:91:43:a3:44:38:d9:65:b9:43:59:9f:11:b0:
ed:cd:0e:f2:9f:4f:35:98:4e:e9:e2:0e:ff:e0:78:
a2:bc:15:8c:cf:ac:3e:2b:a1:06:b5:4b:33:76:ee:
ca:4c:5e:3a:2e:94:b9:b4:c1:1d:aa:79:6a:fa:0f:
2b:c3:6e:27:d4:62:b5:e9:30:93:67:9d:1a:31:50:
25:96:34:00:0b:39:47:cb:90:9e:b8:9f:c8:17:95:
14:9a:33:f0:a2:a9:1d:52:c4:8d:88:61:d0:ef:21:
1e:40:e6:ae:3a:e3:ed:10:1e:19:46:ac:7e:69:f9:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B1:EC:47:CF:42:7E:9F:D4:58:4B:A7:B8:6A:5F:65:B4:E5:97:73
X509v3 Authority Key Identifier:
keyid:F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:b7:f7:d2:18:fa:67:40:e5:2e:64:5a:c0:3c:7a:8b:7d:
05:ff:d7:cb:7b:e5:67:3c:b6:03:22:f1:88:ae:8e:49:d1:58:
ec:98:4b:b1:56:94:f9:56:4d:b0:cf:f5:67:06:88:e3:1d:ae:
01:24:c6:1d:fd:fc:aa:c3:3a:d3:27:42:3b:8d:ff:27:d7:0e:
bb:24:61:9d:6d:a9:d6:a7:10:25:a8:48:61:40:b1:c5:49:d5:
cd:39:1a:48:09:e7:5a:c7:3b:fb:fc:09:ff:c6:44:b1:46:92:
07:b4:68:8f:9c:31:c6:67:17:6d:0a:25:6a:43:ac:9e:45:1f:
20:e9:d6:56:33:c3:bb:8f:06:53:a1:bf:4d:9e:c4:d8:a8:18:
d4:d1:77:d2:37:bc:00:8c:fb:98:76:8c:b0:37:e6:e4:57:5b:
11:dd:88:02:7f:31:6a:f7:6b:0f:cf:68:5e:84:14:fd:81:11:
35:fe:9f:35:ea:1f:d2:90:0b:10:10:b7:74:f6:7e:84:24:0c:
35:a9:7c:cc:e9:99:db:45:7c:09:ba:79:5e:89:62:b2:6c:c6:
a3:b4:89:20:1e:84:bf:aa:fc:a6:25:2a:76:ea:d9:f0:6e:62:
8a:7b:bd:db:d4:dd:6a:69:53:df:7b:33:f1:fb:be:34:1d:2f:
a2:42:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:43:01 2026 by rpki-client