Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: W9/ErpaZa35nHZuVnX12Ox+rUZyd/ZmTju16BAlKdDs=
Subject key identifier: A9:2D:C0:FE:4E:58:18:0C:22:E0:13:2F:E2:12:93:57:29:E1:67:A6
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019CAC0FF13870AB388429FDE4D27FF607C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 0528
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: UpB/Jc+0l0zAmnPSNhU/4A5dVwN7SGsSWu8/t18O/fQ=)
2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f1:38:70:ab:38:84:29:fd:e4:d2:7f:f6:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=a92dc0fe4e58180c22e0132fe212935729e167a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:4b:1e:6e:f0:48:02:f0:69:92:72:eb:5a:
8f:28:03:4a:8b:16:92:09:f9:5e:a0:63:17:40:39:
3a:31:a8:38:20:a7:7b:a8:28:4f:08:9a:12:bf:fc:
05:55:71:ab:aa:55:87:7c:08:58:49:92:8e:b1:4c:
da:50:a6:65:79:c0:a7:66:ac:64:96:ea:dc:40:9b:
d5:1f:8f:6f:86:6a:9d:38:41:c6:0f:36:54:ab:f3:
17:be:6b:af:28:18:dc:31:0a:38:ed:08:18:84:e9:
13:7f:98:1b:aa:ae:c7:03:6e:aa:aa:cf:ca:3b:0e:
f0:dc:8f:f9:e5:44:35:45:cf:89:41:97:4a:f9:18:
8d:b0:f2:9a:9d:43:89:28:4a:32:53:09:66:60:0d:
73:11:1a:34:c2:93:b3:19:f1:e9:e9:1e:89:f9:9e:
24:33:34:91:e4:b7:12:be:92:32:1e:f5:ff:34:d0:
cb:05:74:97:fc:ef:51:6d:b1:d5:19:5b:1f:95:87:
2d:6a:03:45:a1:bd:5b:ff:e6:09:37:af:98:cc:d1:
14:69:3b:4a:6a:98:ad:a8:94:63:ed:97:0b:f2:e5:
fd:e9:7e:e3:8f:dd:b1:c7:39:0a:2c:45:ef:2f:5e:
2e:ce:4b:b0:dc:4b:3b:5b:14:4a:84:c2:89:1f:2d:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:C0:FE:4E:58:18:0C:22:E0:13:2F:E2:12:93:57:29:E1:67:A6
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7d:a8:5b:c5:44:c6:28:9d:df:d4:0a:87:fc:db:2d:b5:50:
bb:6c:df:21:3b:4d:e0:53:58:36:ef:44:4a:27:67:47:18:37:
66:10:a4:47:b1:de:7e:74:67:fd:69:ef:fa:1b:2f:c7:f4:ab:
48:cd:83:a8:9e:c0:af:79:56:b8:0b:de:0c:ed:71:d4:c3:68:
02:94:0a:c1:4f:6b:7e:05:6e:a4:a1:31:c9:b6:2d:4e:59:a1:
96:b9:97:2c:b9:d0:dc:d7:b6:67:77:f8:7b:e9:92:42:33:43:
0b:25:6a:a2:f6:3e:d5:a5:1a:bd:f3:82:56:7a:5f:ca:c4:21:
af:20:a9:7d:7a:9d:eb:ec:45:10:40:16:e5:87:d1:c1:8d:8e:
fd:fe:02:51:7c:02:27:11:b9:28:bc:c7:f9:a2:e6:8c:68:15:
ed:93:a1:84:75:28:d8:d1:53:52:a7:39:a5:f8:5e:44:e9:7f:
32:40:3a:11:5c:ca:2a:c5:ee:b0:23:b5:cc:12:1d:94:0b:59:
9f:dd:98:67:6a:fa:ad:3a:ed:5b:67:66:1a:c4:52:a2:63:fe:
e8:64:99:0d:ae:37:65:a5:1a:e5:4e:14:6c:2f:56:b8:91:96:
b0:dd:3e:75:84:c0:96:16:1e:1f:5e:87:96:e6:ee:4b:9e:b9:
aa:0c:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:37 2026 by rpki-client