Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: 63QsWSmvRXLlUY+u6Mmr+w7wwCincshUzCLoqujjPwM=
Subject key identifier: D9:87:9B:1B:66:D8:1D:A5:93:F9:63:86:ED:D0:2D:F0:93:96:69:2E
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019CAD59DA5CE849FA2FCDDD4AC288202E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 04BB
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: RsWscJNvyKSotfDO6bFMvdPEcUsFGv06DWtg5X4Ps5U=)
2: zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa (hash: kIqOQiOgFlHvbyCS3PuGJtN+6np/Op863FpjkLwsVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:da:5c:e8:49:fa:2f:cd:dd:4a:c2:88:20:2e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=d9879b1b66d81da593f96386edd02df09396692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:c8:79:35:33:a5:8f:fc:44:98:8f:e5:52:
a3:2a:c5:fd:e9:62:3f:84:1e:05:47:34:2e:6b:30:
d3:1b:8d:dd:72:d5:44:b4:35:5d:23:ad:70:a0:e3:
2f:83:06:4c:4f:ff:f9:f6:a2:d6:57:0d:fd:31:9b:
d0:bb:44:ac:28:12:ea:d3:bb:57:8a:db:93:a0:02:
56:1f:f7:09:70:38:c2:80:08:d7:9b:9a:e4:ad:b9:
a7:aa:13:36:02:11:7e:3c:fe:b7:18:62:b9:7d:26:
d8:c5:f2:ae:ff:74:da:c8:a9:2a:45:a6:bf:e2:6b:
4a:2d:68:f3:c9:c1:9e:7b:5e:15:ea:66:20:09:b0:
bb:b2:c9:14:f8:bd:1d:bd:51:c6:98:aa:86:58:19:
b4:4b:44:6e:93:24:23:a7:9c:e8:76:29:70:57:15:
57:da:d6:4e:b5:3d:93:41:9f:ba:90:08:14:a4:02:
b3:9f:6b:47:af:e0:61:26:f8:4a:94:12:97:f1:92:
8f:50:39:e9:d2:c8:26:98:69:4f:50:33:f8:8f:74:
8b:ec:22:e5:26:31:cf:97:19:86:8e:1a:ee:03:f3:
7d:b9:f4:df:dc:ac:40:0c:41:c0:6c:a9:38:a5:45:
e7:f8:26:82:35:ef:77:84:61:05:5e:4c:7f:c4:88:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:9B:1B:66:D8:1D:A5:93:F9:63:86:ED:D0:2D:F0:93:96:69:2E
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ad:29:36:cc:2a:3b:6a:6a:d1:f2:d7:a8:bd:4b:81:cd:97:
cd:37:00:59:1e:7e:b1:d2:b8:9b:64:c1:89:d7:8d:d6:05:1e:
e2:f2:39:07:ef:fe:1e:7f:20:cf:71:51:50:a4:b1:39:5e:db:
55:f4:d8:13:3d:be:bb:35:dd:c0:c5:eb:f0:a0:2d:82:74:60:
16:2c:06:17:d3:9b:5a:d0:c3:a8:c0:45:06:1e:f0:02:ce:6b:
0a:c0:c3:e3:6f:3b:ad:1a:28:c6:8e:0f:f1:2e:c6:04:d5:1e:
6b:4d:e2:c3:a5:35:c3:65:b3:a7:5f:7f:6e:2f:ae:c4:1f:fd:
e0:f5:34:ea:36:eb:5a:50:15:00:92:72:2a:03:f4:af:ee:bf:
be:5f:2d:75:c1:61:41:5b:08:26:cf:52:55:79:19:cc:d6:8f:
99:59:f1:e9:ef:8e:ea:61:1b:76:b9:52:a8:13:53:cf:c8:84:
e0:d8:2a:24:49:ac:7b:ed:c4:79:32:59:b8:4f:cf:f1:22:b4:
f7:49:65:ae:fe:73:4f:a5:63:d3:ad:b4:ee:5b:5f:ab:ab:3f:
6c:1f:b7:db:82:f5:a4:c3:3a:f8:3e:9d:38:9d:89:1b:cd:23:
94:bd:ac:82:ed:ec:39:eb:9d:9c:a8:9b:f5:d5:62:9c:0f:7f:
8e:bb:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:34 2026 by rpki-client