Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: sp/XZbNc2irO7syvXcSlXKup+Qin9mwTkgQxQaYJeA0=
Subject key identifier: B7:49:7A:27:C7:73:2A:C7:DF:39:5C:47:83:59:83:0A:45:A5:FF:7E
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 019CAB6C0956B14CEA88ACFC872B19130A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 22:01:50 +0000
Manifest this update: Sun 01 Mar 2026 22:01:50 +0000
Manifest next update: Mon 02 Mar 2026 22:01:50 +0000
Files and hashes: 1: KEVzLpiIlZvYuzak8r2VEN0lblo.roa (hash: vPPG7HusI8DfbdkDC9LeEMSZP0GfYBRUhRWHNDe+9aA=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: GqZCFtKXA7D4GqXuzDoRn1YM/rEsN98c/dPXNSMpe7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6c:09:56:b1:4c:ea:88:ac:fc:87:2b:19:13:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Mar 1 22:01:50 2026 GMT
Not After : Mar 2 22:01:50 2026 GMT
Subject: CN=b7497a27c7732ac7df395c478359830a45a5ff7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:ab:e7:5f:aa:30:f3:93:f1:fb:36:10:7e:
04:1c:90:6f:cd:bc:4a:c7:76:96:84:4e:76:aa:1f:
d6:56:04:51:2d:da:87:a1:71:ea:66:fc:8e:f9:1a:
c6:d4:f0:5c:b8:bd:66:9c:aa:f7:bd:40:58:c8:81:
b8:b1:11:b9:da:fd:72:a9:d8:99:9f:94:60:b3:50:
a3:6a:75:a4:19:98:72:a3:b7:12:32:21:a4:ed:2f:
00:04:ae:b4:e9:96:6d:e3:02:1b:d5:4d:e9:0d:52:
7f:3b:1c:66:fa:57:19:d1:80:48:0e:02:8a:a6:3e:
08:f1:78:86:21:50:f7:c2:71:21:3d:30:23:e2:6e:
54:f9:49:7e:3c:ce:ce:d6:90:2a:b1:c8:df:4c:58:
87:a1:eb:f3:a3:18:58:f8:94:b1:ba:80:1b:46:ff:
df:29:a7:fa:62:74:4f:1b:28:03:d3:68:8c:78:90:
9e:fa:28:f2:fa:ca:29:2c:53:fe:e1:53:a7:fd:89:
96:94:f8:d7:15:ec:bb:00:48:ee:47:38:0c:6a:db:
10:d1:2d:9d:fe:e0:e1:c1:a2:24:fd:c6:f9:ec:8b:
55:c7:89:55:ed:56:01:5d:0e:d3:1f:91:d5:70:ef:
2c:2c:22:18:e1:89:5f:97:f5:9f:c9:cf:86:dc:83:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:49:7A:27:C7:73:2A:C7:DF:39:5C:47:83:59:83:0A:45:A5:FF:7E
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8f:b1:1a:bd:92:f5:f7:d7:5a:ac:49:7c:27:83:ed:c3:3d:
bd:67:10:c5:c5:ce:e7:59:db:aa:5f:d4:9e:bb:80:e6:cc:20:
65:62:e1:bb:85:fb:a2:66:54:26:fa:87:69:36:b6:62:82:75:
34:31:26:a0:d4:c1:fb:bf:e3:40:41:06:2a:f2:9f:32:71:19:
9f:9a:75:e3:07:e1:d9:b3:bb:f8:31:08:72:78:ab:8c:3c:0f:
0b:37:4f:e1:1c:25:2b:6b:ee:ab:c8:d0:d4:3e:da:cc:58:79:
4d:06:1e:a9:37:80:92:9c:6a:45:ae:8a:32:54:f4:36:75:d2:
3d:d9:34:87:86:b1:4d:b8:46:e9:99:45:b2:df:c2:f6:aa:0e:
ce:ae:9e:6a:e5:b2:a4:15:56:50:b4:33:00:88:79:2d:21:b0:
c8:c9:36:f5:f8:71:55:9f:71:a1:25:44:fc:25:9d:31:c2:d0:
4e:66:27:33:8b:89:94:cc:3b:2d:f9:53:2c:aa:92:c4:7f:0e:
b6:11:0d:e4:8d:a1:bd:3b:ff:a8:cd:3a:45:8e:f5:75:ad:a4:
e6:8b:16:ba:d0:66:2a:d5:57:97:f5:fe:55:ba:cc:4c:de:45:
a9:6c:54:4b:7f:9e:6f:30:0c:e9:7e:81:a5:cb:c9:cc:5c:23:
d0:4b:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:59 2026 by rpki-client