Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: ReTQFzjEYA6jDujAYie3EQI2oZtE0UYG93fycdbTG3I=
Subject key identifier: 9D:64:48:A8:D6:56:B3:26:05:26:54:37:1A:F0:84:B7:42:47:D1:D2
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019CAA217BD2FDE4BCF955B94357CCD4AE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0F54
Signing time: Sun 01 Mar 2026 16:00:46 +0000
Manifest this update: Sun 01 Mar 2026 16:00:46 +0000
Manifest next update: Mon 02 Mar 2026 16:00:46 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: IUVjQrI8ZA9RI9UW5MZSzH9c8f+AbjWS/3kCcvmO35A=)
2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7b:d2:fd:e4:bc:f9:55:b9:43:57:cc:d4:ae:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Mar 1 16:00:46 2026 GMT
Not After : Mar 2 16:00:46 2026 GMT
Subject: CN=9d6448a8d656b326052654371af084b74247d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:7d:3a:5c:37:72:64:3b:33:a7:18:b9:d8:
7e:8a:f8:b2:20:46:92:76:a9:a8:ab:11:a1:13:b3:
52:64:50:06:df:48:ac:e7:97:61:7f:85:cb:92:21:
32:f6:1e:c4:c6:83:07:e3:9c:bd:7b:cb:e3:32:f6:
12:4b:a5:10:c1:55:77:78:21:2d:d6:82:24:8a:42:
0d:00:b5:69:ed:9d:48:5d:09:00:31:b0:71:cc:21:
19:34:c6:92:88:38:d7:93:09:50:59:60:f9:49:ec:
b0:d8:37:52:ad:8e:1b:ee:fb:81:50:77:34:33:4d:
55:5e:61:2c:d9:9b:6d:15:f6:0b:f0:6c:1d:b1:92:
64:08:ff:b2:ef:13:86:20:2f:75:04:8d:54:11:35:
42:d0:fd:49:bf:06:54:43:c2:c0:1b:d3:2e:e0:ee:
04:c5:f2:1c:6e:f5:5c:81:99:2e:37:e4:09:7a:0e:
ba:c8:d6:93:0f:f5:b3:e8:f6:f1:7d:f6:fc:96:27:
dd:3a:09:1c:05:7a:70:dd:18:3a:5a:18:77:f8:a6:
3d:8a:b8:ca:40:dd:93:4d:61:17:4a:e5:d2:40:bc:
96:2b:91:97:99:72:d2:38:44:03:92:be:64:09:9d:
31:4c:f7:89:db:04:85:cc:d1:ed:e4:c2:26:a6:b1:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:48:A8:D6:56:B3:26:05:26:54:37:1A:F0:84:B7:42:47:D1:D2
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:04:2e:47:a3:23:0f:3b:4c:79:8b:d8:40:e1:8d:18:ab:
c1:3c:03:85:32:22:0e:64:a5:a3:78:89:b1:e8:81:74:12:7d:
45:b1:4e:9c:41:1b:5b:96:bf:f6:fe:c6:1a:db:33:a0:c2:1d:
f6:c7:4b:61:4f:48:6f:84:da:24:7e:ee:19:1c:4c:63:a0:66:
b8:de:ba:2d:14:dc:4f:22:6b:82:0d:d2:5e:a4:e5:e2:68:09:
05:cd:76:f3:1c:fa:8c:fc:c2:79:37:c2:66:76:db:98:34:12:
b7:90:3f:b1:b2:0a:ec:d9:e4:27:55:75:28:a6:24:39:73:0c:
07:16:39:48:08:00:54:49:59:25:cb:cb:4c:20:96:ad:08:b3:
f0:51:58:55:a7:2f:65:c1:c6:bf:37:23:4d:94:1b:79:d8:ed:
cc:b0:3c:d1:91:27:66:2e:3c:77:02:8b:a8:f6:f9:c3:86:f6:
4a:cc:8f:99:65:df:db:45:77:10:58:5a:4c:88:c4:a9:d4:f2:
1d:e3:ab:12:95:df:ed:53:cd:22:0c:6a:47:d2:de:f8:f0:cc:
dc:67:63:de:21:4d:bc:e3:e9:17:a6:b1:ee:88:da:16:38:8f:
25:75:dc:7b:59:94:e4:e2:ef:85:4a:2a:ce:f2:4a:c6:60:c4:
d8:bc:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:06 2026 by rpki-client