Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: htfHkNddy860txwcuRQJpY95ADQqC9Ee3c1kKdudMfE=
Subject key identifier: BD:7E:B3:8E:D8:C3:85:58:FB:CB:8A:CC:D2:51:CE:A4:58:C6:67:C8
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019CACB516FE71423FF42756C2FF7BE2A57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 135C
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: VnzS3gT8Oiw1GAIyetLbOqcSEYYItqdMo3s3427SdY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:16:fe:71:42:3f:f4:27:56:c2:ff:7b:e2:a5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=bd7eb38ed8c38558fbcb8accd251cea458c667c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:31:b6:9c:46:33:a1:0e:0b:e6:ad:aa:34:
7c:b2:8c:8a:89:79:54:0f:67:1a:fb:0c:d7:e6:01:
2d:5c:88:cf:83:8c:fa:4d:3c:9e:8d:f1:49:f5:1c:
c9:f8:f1:ca:f7:05:9c:a0:3c:2a:3b:8c:dc:67:4c:
5e:40:ae:98:02:dd:ba:62:66:29:91:e4:4a:52:5c:
24:62:64:19:7e:ab:af:77:43:85:6d:f5:95:63:63:
07:7e:3d:d1:fc:c7:e7:5b:0e:89:d2:3c:7d:00:21:
d6:ac:65:2b:a4:2a:33:01:2e:27:b8:a0:d6:8a:4f:
ab:1b:ef:1b:1a:2d:26:7d:24:64:23:0b:57:96:9d:
72:64:36:e6:be:e8:13:87:8a:65:df:d1:af:19:fc:
65:47:91:80:8f:df:6a:1d:cb:1a:64:c0:29:d2:4b:
47:2c:7d:9e:47:c7:92:20:93:6e:67:f1:32:10:79:
8a:55:0d:1e:d4:65:ae:5c:5f:77:fd:ab:56:c8:d2:
cd:05:7f:3b:f8:e6:df:75:c4:32:43:ea:ea:37:90:
8c:10:6b:0a:34:3c:01:13:8c:91:f8:f6:12:30:63:
c7:2b:4f:5a:06:3b:5a:b6:64:32:79:bb:fc:d8:90:
4b:94:11:53:66:94:c6:2f:fb:f1:a7:8f:18:32:d5:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:B3:8E:D8:C3:85:58:FB:CB:8A:CC:D2:51:CE:A4:58:C6:67:C8
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:26:fd:b4:2a:de:ba:7b:93:0c:9b:dc:cb:b1:88:29:d9:b8:
5e:d4:90:18:3c:6a:c9:90:45:5f:6a:6c:40:1c:71:61:7e:7f:
48:ec:32:61:7f:d3:85:d8:64:97:6d:a5:27:bc:ad:fb:12:4c:
fe:e0:2d:3d:9f:ec:da:73:2a:88:4a:29:0f:cb:f9:7a:a0:ba:
e1:72:0f:74:b7:29:96:8a:c7:92:86:d5:fd:8e:a8:8c:32:b8:
d4:ac:fd:e1:5e:35:f5:1b:b2:14:5f:83:b5:39:af:e9:dc:41:
44:af:cf:6c:64:91:fe:2b:a9:9e:72:9d:05:05:89:23:67:b2:
55:9c:af:de:f1:89:4a:28:df:75:82:56:50:2c:82:0b:4f:d9:
e8:c6:7b:dd:a3:f9:15:04:8c:87:d2:3e:d8:f5:5c:2a:f0:58:
79:00:c5:b4:74:6b:5e:30:5b:6c:70:d8:ef:83:65:64:48:eb:
8d:80:e2:fc:32:94:5f:32:86:fb:b9:4e:49:46:90:78:d4:02:
e5:ed:c0:11:44:58:0a:a5:88:d7:71:04:61:24:a6:af:f0:e3:
73:0a:91:5c:67:8e:b7:14:eb:a8:07:0b:a6:b4:cb:89:2d:5b:
b3:dd:af:c4:36:23:b9:00:cc:1c:a6:d5:36:9c:a6:3e:52:86:
01:37:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:13 2026 by rpki-client