Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: N9FqVgHZNzw7y85HWoKmIDFO5Twpcun7uFlQpNqhZmM=
Subject key identifier: BB:C3:4C:99:CD:55:0C:D7:D7:CB:AA:CC:45:E4:AA:B0:A3:F0:FF:A8
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019CAB34306F9FB690F9483B4A63B4744262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 07C7
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: X69ZMY8lJJDNJEnWwn5KnKpEyrrpASr2HfYT0RWsXQE=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:30:6f:9f:b6:90:f9:48:3b:4a:63:b4:74:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=bbc34c99cd550cd7d7cbaacc45e4aab0a3f0ffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:d8:16:f3:c3:db:4f:17:77:31:96:50:b8:
41:de:34:c6:41:40:e4:3a:db:76:92:6d:4e:b0:7b:
89:d9:62:20:c5:3a:7d:eb:85:ab:52:13:32:27:a3:
6c:83:85:88:68:48:49:48:82:9f:fb:0e:e7:9e:d9:
20:04:a1:a5:35:a5:86:3b:d0:7c:84:14:f3:70:e3:
e1:c6:84:60:ca:26:da:26:88:c3:63:31:ab:fe:2c:
b1:8d:f5:5f:dd:80:61:18:4d:8d:35:c0:cb:78:ec:
28:94:c3:00:bd:57:55:f7:33:79:60:71:ab:1e:05:
f7:2b:c8:95:9e:7a:ad:f6:4c:9f:a0:93:59:95:e0:
6a:04:9c:65:04:79:6a:7c:1a:9d:69:36:6e:81:5b:
20:7c:ab:af:f6:c9:47:52:9c:d6:34:74:55:30:a7:
2c:58:83:a6:b4:71:fa:fa:62:67:1b:30:13:e6:da:
51:de:0c:72:69:94:71:85:94:b4:93:17:74:8b:b7:
09:a6:89:a2:86:d8:42:6f:a0:fd:e7:e5:e3:b5:02:
61:85:7a:1b:5e:29:a5:bb:52:59:cf:b9:32:9f:bb:
4d:6f:6d:97:c9:a1:7c:06:12:1c:d3:16:b4:fe:78:
0d:6b:1b:7d:6c:12:24:8f:6c:1e:e5:d7:05:b2:91:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:4C:99:CD:55:0C:D7:D7:CB:AA:CC:45:E4:AA:B0:A3:F0:FF:A8
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:01:56:04:72:cd:7f:0a:d3:62:ca:e4:85:aa:ef:e6:94:bf:
e3:16:f2:09:35:bc:60:31:7e:b6:7e:6d:e0:8d:0d:25:47:01:
73:32:8d:6b:25:57:e2:84:a2:fb:ee:f0:67:5e:14:e3:1b:87:
0c:e2:56:7b:dc:c9:88:73:80:70:0c:17:2f:7b:48:1f:b3:dd:
09:91:7b:c0:29:13:23:ad:a7:0f:f5:30:72:ef:9a:91:2c:8c:
d2:6d:a4:53:9f:14:a1:ec:44:60:64:d9:39:30:52:87:1d:f9:
9d:88:8f:82:99:80:65:9e:9c:8c:c8:55:53:a6:aa:11:e5:ad:
56:cf:8f:a5:ba:43:24:55:b0:4d:00:0c:b5:ed:38:31:6e:8a:
c2:7e:d7:34:2e:52:da:69:c5:d5:a6:b6:cc:20:2f:aa:aa:85:
15:c6:08:21:4d:9c:01:d5:f8:99:34:bb:d8:58:b9:4b:3b:4d:
89:cb:20:a1:e5:09:31:ed:e4:41:41:45:59:bf:22:97:4e:79:
92:49:84:ee:fd:5d:b9:01:0b:4e:fc:00:8e:5e:05:d2:2d:6b:
f6:34:10:3d:a3:98:c0:27:49:f9:e3:4e:f9:80:29:74:e2:3f:
25:cf:e0:de:6f:45:90:a7:cb:1c:91:a2:37:4a:0f:c6:8f:be:
9c:35:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:40 2026 by rpki-client