Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: vpMLME+mk3vN+iWk5fnq1Sy7vo/Tdr7OJdaR5COK7BE=
Subject key identifier: CB:59:94:73:39:EC:EC:ED:92:23:22:71:B5:2A:6E:B7:BE:86:F0:E0
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019CAA58844C6047EAEA48F646B506DFF11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 14BA
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: nq1+XXNQwCN03ucIjQAXvQsy95agH3TTH33RxTslOtw=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:84:4c:60:47:ea:ea:48:f6:46:b5:06:df:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=cb59947339ececed92232271b52a6eb7be86f0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:0c:14:6d:a1:88:c6:23:49:7f:49:4b:a6:
e7:0f:65:85:6a:01:f8:e7:c4:15:b4:24:a9:17:df:
dc:a7:ca:0a:3c:59:c2:3d:47:ea:ce:8f:c0:f1:8c:
92:b8:c7:03:15:fd:6d:5a:d1:dd:bd:ef:7a:03:e1:
5f:22:94:9e:dc:e0:5e:92:f0:3f:5f:82:95:d4:07:
4a:19:c4:78:7f:55:4f:36:6a:3a:e1:50:b9:72:3f:
7c:4d:c4:1c:6e:34:4a:56:c7:11:22:85:9f:95:d8:
9e:2c:c3:1b:25:22:aa:93:cb:c1:c5:9e:a8:78:1b:
a9:e7:98:da:c2:33:65:52:34:16:24:0a:3b:48:ad:
7d:fc:35:b7:9c:39:f6:c5:ab:7b:99:6d:a7:54:04:
cc:05:a6:8b:11:3b:c8:39:56:af:bb:73:7c:58:2d:
17:b7:b7:b9:36:d3:89:e3:90:8d:bb:d3:8a:52:b9:
fb:07:90:3c:70:31:fe:1a:e3:5e:3f:c3:e9:a0:fd:
bc:a7:f7:76:6d:91:e0:29:76:9a:18:b7:75:ec:2a:
4f:4e:8f:fa:16:57:34:0b:47:e0:41:4f:7e:f3:a2:
f4:e3:45:1f:95:a3:9f:d6:45:28:9b:c4:ec:c8:d5:
9b:51:59:57:13:7c:d4:f8:ba:23:b5:a9:d4:f7:4b:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:94:73:39:EC:EC:ED:92:23:22:71:B5:2A:6E:B7:BE:86:F0:E0
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:64:47:38:2a:1f:bc:31:36:37:cf:42:48:9f:42:8f:68:
e7:d9:33:34:6c:2c:0b:6d:f1:76:ef:30:94:9b:09:91:2f:88:
d4:0c:40:ce:cb:f9:77:be:a2:b4:f8:3c:8e:39:38:ff:c2:e5:
ce:3d:7e:ab:1e:d9:3f:8f:e3:56:95:fe:0e:12:6e:a1:23:8a:
e9:e2:ec:10:20:16:be:97:a6:8d:32:9b:9b:a4:fc:59:3b:22:
c0:52:1f:c9:6c:0a:8c:1c:a8:de:b3:c9:f6:f6:61:b5:ca:bd:
d2:9b:3b:fa:7b:08:55:db:60:f6:22:64:ba:aa:31:ff:42:7f:
3f:5c:68:9a:57:d5:c6:8a:ed:9e:ef:50:71:a2:80:a2:dd:43:
25:75:ed:91:fa:7e:bb:97:b1:79:7e:33:f0:36:5c:06:74:3c:
f6:62:95:ea:b0:f7:79:44:84:df:62:27:be:0c:e1:d2:27:08:
b0:7b:68:3e:12:39:7b:e5:66:c5:b0:46:22:80:f1:c0:36:21:
00:ec:f4:e9:92:e4:00:43:cf:2b:75:f4:6e:c7:02:11:eb:9c:
29:35:74:1f:91:3c:8e:d2:49:18:72:87:1e:fe:42:2e:8c:d7:
f9:fd:95:3a:dd:e5:2e:96:84:0b:11:4c:74:a1:2a:5e:b9:ef:
49:bf:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:45 2026 by rpki-client