Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: 6VCTFavMfQ0u452pdcIOOqRY+Rp2UZvpFXbF/hWDsew=
Subject key identifier: F9:B7:96:2F:A2:A9:80:75:2A:A4:37:B5:09:D7:DD:41:2D:FC:25:C7
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019CAB34933697664338C8303D95F9EE5420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 055A
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: WEhztT7pvQ37DgaoxfNmypyvob0dQ3Uxmm2AZzLx31E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:93:36:97:66:43:38:c8:30:3d:95:f9:ee:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=f9b7962fa2a980752aa437b509d7dd412dfc25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:2b:39:d4:be:b1:25:75:2c:fc:32:b1:5a:
1f:98:01:fd:ba:da:bb:2b:7f:24:3e:62:ee:a8:2c:
b6:68:97:5a:9e:ce:1d:85:29:df:36:df:1d:27:c0:
9c:d6:aa:77:7d:9f:2c:b2:91:d4:b5:8f:b4:42:32:
c8:07:10:de:c6:1d:25:1b:c2:84:48:3d:f2:83:0c:
83:74:d2:c5:33:e8:96:c9:4d:ea:a3:6b:7e:79:fd:
ef:35:68:05:c3:17:74:98:5d:79:f9:52:35:1c:f7:
8b:27:dd:30:79:19:f9:76:c7:83:54:4a:77:ed:13:
0f:6c:89:8b:12:a3:88:e5:42:62:41:47:3a:e3:4f:
71:a9:15:5d:1a:80:8c:0e:a8:32:af:2b:59:f7:47:
90:19:54:34:d8:df:00:ee:8f:cc:22:9f:44:1e:b2:
b2:bc:66:f1:a9:34:52:fb:49:cc:6f:76:d2:de:7e:
b4:bb:76:3b:9f:bc:6e:47:0a:6f:cd:a0:00:46:83:
92:f5:e2:c8:b0:df:6c:b8:4b:3e:35:d3:a0:66:74:
2e:40:04:df:4b:88:f1:62:74:b1:c0:10:6a:20:04:
9d:75:d6:3c:8d:96:97:79:3a:c1:c7:df:dd:5b:f4:
40:aa:98:c0:e5:07:82:15:09:8b:d3:5b:80:2a:ab:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:96:2F:A2:A9:80:75:2A:A4:37:B5:09:D7:DD:41:2D:FC:25:C7
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:5a:1c:85:fd:f2:12:39:cd:56:39:1a:4b:fe:22:63:c0:
23:6d:f1:aa:c5:d0:32:69:37:af:4a:ff:65:8e:65:8b:49:6b:
33:e6:7a:23:91:14:9b:c6:00:be:84:dc:22:62:e0:4f:9a:1d:
59:67:c5:2a:31:83:d5:f8:58:f1:bd:71:c1:cd:82:93:47:b1:
15:b9:b9:ef:9c:22:ca:45:86:94:45:f1:e2:74:d6:5a:7e:7e:
88:c8:df:ef:b9:fa:fa:34:62:34:60:b2:b4:06:5d:92:27:16:
32:38:84:0f:fa:0e:90:ae:3f:70:e7:0c:f1:74:da:c0:3f:80:
6c:1a:7a:dc:9e:af:30:84:a4:83:f4:24:74:70:57:70:f6:89:
4c:d2:fe:0e:51:fc:04:d2:16:a3:67:a0:a9:3a:a0:5e:97:e9:
0c:7a:b4:0d:00:be:a6:ab:35:1a:19:21:5e:e4:09:85:c8:dd:
39:73:01:db:46:b0:96:09:4b:22:bd:51:bd:cf:6c:18:c5:63:
d5:cd:40:09:0e:3f:a8:4d:c2:5e:71:23:fa:55:b2:7b:50:d3:
e7:1d:00:f7:2f:db:e7:13:9a:6f:f0:9a:73:c2:1d:c5:02:01:
ec:f5:9a:a3:a6:77:48:0e:0a:2e:1b:8f:02:c0:23:2a:42:97:
5b:71:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:00 2026 by rpki-client