Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: aLAollBpCoBpJpNVABOkhWqaLF0YN56c439tGKk/gAw=
Subject key identifier: 0C:71:FF:FA:66:F1:97:57:0A:29:BE:6A:40:BD:65:D2:39:CE:80:E7
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019CAAC62F2679EF2452C6B586F5E24DB318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: 0aovAcGXdwpNlkFnFr0y+8kNYE+88pIRz3lmkyLfW2s=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2f:26:79:ef:24:52:c6:b5:86:f5:e2:4d:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=0c71fffa66f197570a29be6a40bd65d239ce80e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:02:d3:ab:80:8c:5d:dc:a6:33:f5:0d:71:
65:9b:bc:0b:0d:ec:c7:ac:32:bb:6f:b0:1b:b9:0f:
86:09:21:da:40:cd:85:50:0c:63:cd:62:41:0f:97:
84:20:f9:86:7d:18:85:fe:34:69:d1:45:08:59:2e:
39:1f:f1:64:99:01:51:81:a3:bd:e8:9c:d0:d4:b1:
61:9c:38:68:57:a8:31:c9:66:07:17:d7:08:f2:94:
72:22:e4:62:bd:27:37:2f:81:da:57:67:a0:bd:5b:
f3:d8:b2:2a:21:3f:26:cf:37:d8:da:0f:5f:46:7a:
d7:b9:ad:4d:04:f7:9c:d6:50:c3:00:34:1b:a4:66:
a6:be:ff:9a:eb:76:ac:64:0c:69:63:b9:a6:76:e7:
6a:20:2f:e0:8a:b7:5b:5b:c2:45:b0:bf:b2:05:5b:
8d:f6:83:ab:6a:e0:3e:70:2e:0a:1d:a4:7c:fe:d7:
d4:44:5d:52:4a:89:27:68:aa:59:5f:d5:c0:41:5e:
f4:65:34:87:0c:cf:9a:cb:10:db:08:f7:d5:d3:9d:
97:32:57:5d:e1:d1:50:3f:93:7f:b6:41:1d:6a:c8:
27:ef:93:53:69:6c:af:f5:73:98:b3:38:fa:27:d4:
c3:08:27:ef:37:2b:a6:78:9e:13:85:9a:57:c7:6a:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:71:FF:FA:66:F1:97:57:0A:29:BE:6A:40:BD:65:D2:39:CE:80:E7
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c6:35:40:1c:e4:df:01:d5:ea:36:e0:2e:58:2b:59:ee:e0:
33:af:c9:2c:d0:20:4d:7a:fd:3d:64:f7:a3:67:dd:3b:0d:fe:
89:fb:51:56:cd:62:1c:77:d1:9c:7c:e9:e3:e9:7e:3f:89:d2:
9a:bc:6c:12:0c:fe:a9:22:84:28:51:e2:08:15:ea:52:6b:a8:
45:28:2c:2d:f8:39:b8:53:56:70:0b:06:9f:3a:20:07:00:2d:
21:5e:38:73:ea:e5:08:2f:32:c7:ec:38:4d:a6:20:eb:a0:78:
6d:42:9b:8a:19:9b:52:2b:52:ea:8c:45:0b:45:fa:59:57:cf:
0c:59:f3:b9:c5:d3:90:55:d2:48:34:17:27:04:b1:55:eb:34:
20:5c:38:58:e3:9d:a8:e9:81:62:f0:43:9e:90:0a:9e:42:83:
03:ad:b1:8a:f3:db:95:7d:0e:fc:04:21:8f:93:46:02:be:ee:
c9:77:f9:e1:a4:ad:7c:f3:b4:03:fa:29:e3:96:22:c5:fe:2b:
d8:ec:87:29:2f:7b:31:68:da:a4:fa:f2:4d:34:4f:63:9b:e0:
56:5b:29:b9:37:8d:bf:bf:87:3f:86:94:6c:1a:db:e5:8b:5a:
1d:d1:c1:b9:41:4e:a8:eb:e7:d4:3a:0e:df:17:f3:e2:38:b5:
38:13:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:27 2026 by rpki-client