Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: oDPZSImn67Hx25Y32rc+8xey+DV+X5focRwB4ZdAYYU=
Subject key identifier: DB:36:B3:2B:FC:6A:10:2C:ED:BD:F0:DB:9A:8D:5E:81:5A:91:7E:20
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019CAA21916E6189C4CB1BF07A96730F4B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 128F
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: q+Jy/DgTYElCPFosZQqetTMGQTKTMuQ/JMYxL6VVGeI=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:91:6e:61:89:c4:cb:1b:f0:7a:96:73:0f:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=db36b32bfc6a102cedbdf0db9a8d5e815a917e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:25:54:78:53:39:b1:0b:25:07:3a:05:62:
95:e6:91:df:d6:1d:50:32:0c:53:00:1d:f0:c3:cc:
5e:bf:41:0a:d2:77:45:8b:a6:63:e8:19:d3:3f:06:
6b:48:82:ca:d1:9b:4e:1b:d3:24:5e:e9:65:8e:2b:
4d:1c:3d:24:f0:b0:f9:b8:fd:ff:05:c0:d1:e9:2d:
c4:8c:48:0f:04:30:ba:da:04:99:c5:89:31:85:4d:
b6:57:dc:ae:d6:f0:ba:96:e5:1a:9b:81:ca:72:21:
4b:bf:33:3a:98:19:95:28:65:ae:67:f4:32:76:82:
4a:80:cd:8e:f0:56:c9:64:56:ef:cf:86:70:47:a8:
18:09:ce:ba:55:e6:43:93:97:30:6d:61:fb:7b:62:
72:a3:0c:eb:e8:3d:e6:09:30:6f:22:c6:9e:3e:9a:
85:1b:54:44:2c:ca:33:37:58:86:5c:95:29:54:92:
b7:7a:18:f3:89:fc:d3:f2:0e:5e:23:59:15:6c:a3:
e4:f1:0c:e6:d2:d4:00:48:30:71:2b:1f:94:4b:28:
94:df:97:4c:0e:0f:f1:ef:95:e7:c7:5e:bd:5f:16:
31:43:cc:f1:80:47:07:52:97:91:ea:c7:17:94:8c:
2c:f6:f9:bf:36:6b:44:cd:0a:2b:13:f1:03:43:f8:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:B3:2B:FC:6A:10:2C:ED:BD:F0:DB:9A:8D:5E:81:5A:91:7E:20
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:18:fd:b5:06:3d:12:6f:1f:9d:2f:eb:12:82:ce:84:86:
5c:88:c8:fe:f6:44:53:09:06:d0:3b:d2:11:7d:1a:29:a6:c4:
aa:0b:21:85:41:88:92:c3:5b:d3:79:e2:8f:23:f3:98:85:18:
76:1b:fd:97:2a:21:ee:9c:9e:b5:11:64:70:83:fb:73:b6:62:
36:6d:aa:76:86:a7:1a:c3:58:9d:86:06:72:32:fc:58:8e:45:
48:df:19:6f:13:ef:05:6f:79:9f:1c:d0:a6:3c:c8:c3:39:4d:
79:59:14:6c:dd:df:39:73:56:24:60:fe:76:2e:2d:0e:54:d5:
57:e0:7c:e5:1a:da:9c:9b:0b:85:0a:b2:fe:e0:2c:b6:3f:94:
d0:9f:8d:86:0b:cb:38:c2:bc:a4:81:46:48:8e:5b:0f:c2:e7:
2a:0c:1e:39:dd:18:48:27:59:d5:fa:59:fc:68:67:6a:99:1f:
41:67:94:e1:dd:21:96:f1:8d:15:2c:88:a4:37:f5:0c:da:2a:
84:18:d3:52:94:2f:6d:65:3e:d0:d7:a1:4b:69:42:8a:44:03:
a8:a4:37:f2:c3:25:ce:46:bc:6d:3e:fc:ee:15:10:ef:36:61:
95:32:c6:86:58:3d:df:2c:26:df:8a:ed:62:43:c7:d2:ba:f5:
42:f3:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:53 2026 by rpki-client