Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: zFWruKf7AKzr1I2Uge2jLavo3rE3nUlY8WQh6q13y0w=
Subject key identifier: 82:A8:60:AF:D9:07:68:02:63:1B:6F:FE:E4:D7:B1:0E:3F:D3:5A:D4
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 019CACB57E8EBC5F519CB7B5FC963422D086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 156D
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: AQHWdZnPqOYl8nCWQXL5z4UIM//xZGsvwn5FVwG/8y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7e:8e:bc:5f:51:9c:b7:b5:fc:96:34:22:d0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=82a860afd9076802631b6ffee4d7b10e3fd35ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:33:59:b3:d2:88:cb:f4:ba:2c:81:03:ee:
94:1e:5c:89:30:cf:6d:76:2f:6b:37:18:eb:a2:04:
97:31:4f:e6:a3:e7:9f:49:c4:37:af:08:80:98:da:
d5:25:a9:57:31:ea:24:e5:50:d9:10:93:43:f0:7a:
65:c8:91:b2:04:c6:76:6d:03:05:7d:af:d1:df:44:
88:af:29:51:a6:c6:dc:49:16:30:62:52:a0:78:81:
90:6e:0f:a5:d8:f2:3f:f3:d5:38:c4:06:b5:eb:32:
d6:44:30:ee:2b:46:01:b6:aa:57:ec:c6:a9:cd:1c:
6b:f0:81:fa:db:90:4c:9c:1b:11:04:68:7a:02:29:
9b:ed:8c:98:43:64:3e:c3:c5:79:41:34:95:c8:ac:
74:56:2a:36:38:17:93:f9:10:d9:f4:fa:4c:81:fb:
34:b0:84:38:5e:09:fc:52:24:76:54:a8:6a:0c:28:
31:7c:03:70:49:7f:2f:a0:a9:77:63:97:29:72:ff:
49:6b:60:84:00:eb:b2:f7:82:76:3f:b2:3c:c4:95:
72:82:5a:a6:33:62:ac:76:4a:77:29:ca:f7:e2:64:
e2:89:e1:35:fb:e6:d5:36:3e:44:32:47:a9:bb:06:
3c:35:e6:64:cc:1f:32:f0:27:5a:2b:d9:85:7f:fa:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:60:AF:D9:07:68:02:63:1B:6F:FE:E4:D7:B1:0E:3F:D3:5A:D4
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:19:56:cc:22:db:95:c9:3e:a7:18:0c:d9:9b:b3:46:6e:
ae:0e:a7:10:fd:39:76:c1:73:1d:9b:4e:e2:76:c7:81:4a:5e:
e4:20:39:ab:3f:5e:04:cd:9d:7c:d1:d7:e7:21:08:cf:67:e6:
12:3c:73:9b:60:5e:f6:2c:84:72:57:cb:18:6f:4e:82:af:fd:
38:7d:8b:e4:0e:97:e7:da:36:0f:38:5d:cc:14:a8:c5:fe:cc:
a5:2b:45:ca:17:da:08:f3:a7:6b:6a:08:2d:a5:34:da:98:5d:
f2:29:8f:46:ec:9f:d4:67:a7:27:6f:a9:3f:f6:cc:97:f6:67:
ca:0a:23:27:89:09:73:60:e2:01:f4:45:b1:6b:c9:b9:cf:9b:
7c:2b:da:64:fb:41:7b:07:ec:33:df:1c:5e:00:35:63:f2:41:
1d:ae:27:3a:f7:ab:ef:fe:94:b4:2f:b0:ef:29:52:c1:8d:6f:
4f:db:c7:e6:46:fd:f0:01:b3:fa:0b:2d:25:eb:b5:4d:f1:0c:
bb:d6:1a:90:6e:5b:de:e7:2b:d9:32:eb:83:9b:cf:89:84:f1:
88:ee:16:48:30:6e:c8:1d:10:3b:5c:70:7b:56:50:fc:61:b2:
8e:5e:e2:e6:45:bd:c6:b1:ae:98:df:73:7a:01:2f:93:6c:01:
66:67:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:43 2026 by rpki-client