Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: 4byuixb599bXgYiLg0NqAN9hlMkC6aSVke+5R2D0ONA=
Subject key identifier: C9:DA:B1:27:72:5C:8A:AC:E2:15:9D:99:32:76:E3:D4:16:29:40:7E
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019CB10016182A0D021CDE7CADA09033E232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0FB7
Signing time: Tue 03 Mar 2026 00:01:38 +0000
Manifest this update: Tue 03 Mar 2026 00:01:38 +0000
Manifest next update: Wed 04 Mar 2026 00:01:38 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 2zPtOBWb4yuPa2UgUs4B+mGi6YeTnoefH0QDYO4imDA=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:00:16:18:2a:0d:02:1c:de:7c:ad:a0:90:33:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Mar 3 00:01:38 2026 GMT
Not After : Mar 4 00:01:38 2026 GMT
Subject: CN=c9dab127725c8aace2159d993276e3d41629407e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:26:2d:1c:95:94:a4:d6:84:8d:aa:7b:83:
d8:be:15:5d:c6:a0:ec:32:04:66:bc:70:6c:2e:99:
ff:8d:63:6d:75:eb:1c:fc:0a:4c:d5:4e:d0:90:95:
f4:87:8d:e5:df:72:36:b3:95:54:13:43:07:27:fd:
2c:37:ac:14:b5:ea:cf:7d:db:da:5e:44:17:c2:9f:
0e:33:b2:6e:8d:3d:0a:36:69:bb:6e:1f:63:60:60:
0d:50:e9:66:10:00:df:98:d9:d9:0a:e0:bd:3c:5f:
41:4a:d1:ff:f6:73:16:c1:08:0a:db:c7:99:3e:8f:
c6:78:cc:ea:b0:1f:0f:f2:89:86:d0:55:a0:e9:87:
0d:88:3f:f7:23:14:4f:d1:05:89:5b:31:3a:4b:bc:
4a:05:4f:a8:04:c4:41:20:b0:47:e8:1c:b7:76:76:
72:f9:a7:4b:38:e3:0c:68:5b:7b:87:d9:c4:f9:59:
86:bc:0f:5e:5d:6b:22:8d:01:94:55:44:a0:fb:bf:
17:89:b2:39:22:ca:6f:ae:4c:dc:56:55:06:2b:4c:
9e:3f:01:71:a3:2d:3c:c5:71:a5:8a:9d:a3:df:30:
6b:35:52:45:70:41:36:10:6c:46:d4:c3:5d:ef:e4:
fc:16:a3:21:6e:8b:c6:82:8c:9c:8f:d1:94:4c:f8:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DA:B1:27:72:5C:8A:AC:E2:15:9D:99:32:76:E3:D4:16:29:40:7E
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:fb:7c:6a:63:cd:1d:3a:b4:4a:2c:dd:29:6f:c4:52:fe:
0c:02:f7:c6:34:a5:f5:c1:0c:56:8d:43:5d:af:47:6e:73:7b:
9b:b0:f0:07:b7:a3:66:eb:49:19:a4:5b:d6:94:67:51:eb:ee:
c3:a9:2c:49:3d:f6:ce:84:d4:20:9e:a8:d9:f1:17:c1:ee:22:
d7:24:a8:7e:cf:54:b5:b2:00:96:80:e7:e3:c0:bd:e9:77:c6:
0c:7b:b7:51:cf:bb:da:c0:72:f9:4c:f7:09:09:59:73:7c:21:
a1:8e:68:76:76:57:dd:f5:b8:6b:ba:f1:c1:22:88:f7:90:70:
46:79:94:07:ce:43:26:d7:98:99:61:d7:29:c0:d2:b1:fe:fb:
4e:ad:59:fd:b3:f1:a3:86:52:4e:32:76:93:08:bd:c6:08:cd:
00:33:18:63:ea:f4:ca:22:c0:2b:de:14:e9:1b:72:5a:9a:ac:
50:d4:d5:2f:8a:a9:4f:4c:0a:66:73:9c:05:02:4e:09:aa:17:
6e:55:66:41:86:da:0f:c3:5b:f2:3d:4e:12:8a:3a:ad:23:a2:
94:91:7c:83:d5:66:a1:ee:ee:d7:50:89:f3:7d:0f:d2:b5:60:
1a:6e:75:65:dc:d3:57:c3:0f:68:0e:98:eb:62:35:92:f4:24:
be:f1:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:34 2026 by rpki-client