Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: 43sUfprr3gyjF//soAS3C5mfjBSBJmuZtwIBs8bNkIY=
Subject key identifier: 24:4A:82:D3:8F:9A:0A:20:B3:6F:33:9F:08:CE:D8:62:92:B1:53:38
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019CA9EB053580997335171E579ACAF786B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: 3ZTb62BhbqHPu56JB/qUKfNvo3n3UssN0TNlNzaz+WM=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:05:35:80:99:73:35:17:1e:57:9a:ca:f7:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=244a82d38f9a0a20b36f339f08ced86292b15338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:b2:9c:9a:ed:b0:d5:79:9c:28:0e:ca:83:
e4:50:e1:b5:b6:60:79:d8:f0:56:1e:62:03:eb:04:
13:dd:bd:5d:a9:bf:54:2b:0e:5b:b6:12:9a:36:a2:
ea:a1:f0:04:7b:aa:c0:4c:54:9b:1d:3a:8f:7f:04:
a0:22:54:52:44:db:06:6d:c9:c4:ad:b7:fe:08:53:
0d:b6:c7:e1:f1:de:fa:a7:c3:59:53:0b:3a:b1:2e:
85:72:8f:70:55:b4:8c:87:dc:a0:d6:d3:c7:3a:6d:
45:26:2f:d5:03:1c:c8:a9:10:70:95:81:33:10:ef:
74:29:54:fa:68:67:5d:6f:33:92:cd:e4:bf:cf:0c:
79:fd:c4:bb:85:41:7b:6a:cb:48:26:11:47:d8:22:
6b:b5:a8:12:2c:cd:4c:18:da:b2:dd:a5:a0:45:3d:
1e:74:24:14:8b:7f:82:2e:7a:38:65:29:ab:9f:a3:
8b:8a:b3:28:fd:47:f5:c8:6e:8c:72:da:25:74:cd:
3a:23:03:c8:ec:74:83:5f:55:8c:24:96:da:a3:46:
18:89:18:c8:09:9f:f2:7a:8d:7d:61:2b:24:e5:0a:
54:1a:54:44:09:c0:2c:bb:a3:a6:bc:2b:c1:91:5c:
f1:f6:4b:a9:0a:d2:17:8e:ed:fd:de:fc:81:2b:bc:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:82:D3:8F:9A:0A:20:B3:6F:33:9F:08:CE:D8:62:92:B1:53:38
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:14:3c:cb:82:7b:0a:23:55:b8:30:b8:03:96:85:81:1b:
f9:a4:7f:15:6f:28:3b:45:19:2c:b4:c6:1f:0f:ac:d0:5f:ea:
7b:02:0d:35:8d:76:f9:ba:76:87:40:83:71:61:96:db:f4:f3:
36:b4:ef:6f:07:87:c2:0b:91:0e:c9:6b:ea:13:ed:cc:25:1f:
c3:21:89:4e:24:3f:35:c1:d4:b9:c3:c1:55:83:3e:e0:95:94:
af:d8:b4:64:b4:04:02:37:99:bf:7f:6f:4a:55:90:76:0a:2e:
a3:7d:24:aa:f7:db:f6:ad:a3:a3:12:a4:2d:4d:c8:5a:e3:a4:
86:c1:a5:61:db:c4:31:72:83:45:73:f8:27:d9:5d:bc:d9:07:
b0:04:e0:08:2f:96:8c:ca:e8:de:bf:60:5e:40:d5:a3:0b:5b:
82:b2:50:82:4d:a6:5d:b9:44:68:50:78:b1:cd:ba:9e:3e:f3:
13:3f:03:e9:9b:69:b0:eb:dd:6a:ae:12:35:e8:4b:d3:29:6e:
45:c7:92:23:cf:47:55:fa:42:80:36:40:4d:6e:6c:ca:4c:3e:
ef:8c:05:90:db:38:34:05:e3:d0:62:4d:7b:f6:de:6c:73:75:
10:6b:91:3a:33:f8:55:8c:2b:8c:a9:c9:a3:0f:82:bc:35:7a:
96:1c:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:12 2026 by rpki-client