Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: ShGeChx4pC+yzAtiVbqWz4NTPvH7k/e6VsrshcoFh7A=
Subject key identifier: F7:83:EA:F7:8A:EE:84:B5:52:50:58:22:2D:8B:30:2B:38:A9:AB:EC
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019CAEA35C8CBC00F7FA7FBDAC2F564F6910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0F2A
Signing time: Mon 02 Mar 2026 13:01:07 +0000
Manifest this update: Mon 02 Mar 2026 13:01:07 +0000
Manifest next update: Tue 03 Mar 2026 13:01:07 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: G+IG1sDhjSDC8fnONdhwWsqoqIygWOhm3WChOqy9QtY=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:5c:8c:bc:00:f7:fa:7f:bd:ac:2f:56:4f:69:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Mar 2 13:01:07 2026 GMT
Not After : Mar 3 13:01:07 2026 GMT
Subject: CN=f783eaf78aee84b5525058222d8b302b38a9abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:98:c4:0a:b1:87:54:0e:4b:a3:fa:c4:67:
b7:27:c5:1c:b6:81:d6:97:03:6c:7a:cb:a7:91:e0:
c9:35:57:c7:5b:12:1d:f9:23:bc:a0:c3:79:10:55:
8d:4d:02:91:3e:31:ac:a8:74:96:34:7e:50:52:40:
f1:14:00:10:db:78:86:d9:4e:62:70:03:1c:4a:ee:
30:b7:63:f9:2c:64:0b:5b:e8:6b:ce:cc:c1:de:e7:
50:37:5e:48:8c:8f:73:19:d4:bc:19:3e:f5:e2:62:
a1:03:f9:45:37:44:c3:ac:79:bc:0f:8d:57:e0:11:
20:66:20:bc:43:33:65:11:f6:1a:bc:51:87:fd:8b:
30:d1:20:da:33:88:18:c7:ae:ae:a0:1d:ce:a9:68:
58:ed:8f:77:5f:ed:23:44:ac:bc:44:1d:7d:d5:a0:
fe:a4:af:32:b9:28:65:73:e2:fb:6f:8a:a0:c4:85:
6d:39:aa:c7:7b:1e:85:66:90:20:27:c3:e4:f3:1a:
f6:27:fc:e5:2e:1e:20:09:66:0c:c0:07:7f:2e:3d:
32:7c:39:ee:d4:95:90:9e:c0:ac:c0:91:61:f2:99:
e1:1b:bd:81:e5:56:fa:80:ef:a7:a6:6e:c9:d5:56:
7b:09:39:12:f5:a8:33:05:cc:30:4f:68:8b:2b:16:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:EA:F7:8A:EE:84:B5:52:50:58:22:2D:8B:30:2B:38:A9:AB:EC
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:cc:7d:fe:97:41:77:88:2b:94:bf:6f:bd:61:d8:83:61:
b6:09:23:6d:79:ff:36:19:c0:86:7b:38:4f:f3:c4:60:f5:13:
c3:34:54:fa:a5:1a:70:f9:42:4b:de:cb:27:22:a3:ff:30:8d:
ed:69:f9:8f:c0:eb:ad:1b:2e:11:98:16:fb:ac:96:59:c0:b2:
18:74:ec:ba:ba:7f:7f:fd:76:c5:68:70:20:a0:ea:39:8a:62:
93:1a:0f:37:07:57:a6:c4:61:11:98:79:3b:ab:cd:21:2b:bd:
1e:f9:da:fe:e2:e3:36:98:04:27:ab:04:aa:1d:46:37:36:4c:
6f:dd:82:89:4e:4c:4d:a2:54:fd:b8:5b:20:d9:13:b4:53:38:
88:c6:b4:ca:45:c9:25:7d:29:ec:23:8b:17:c8:ab:4b:34:da:
5c:98:e0:1c:6b:20:8e:21:f9:4c:5a:d0:67:c5:af:20:e0:8c:
cf:d3:03:3e:10:80:e9:28:ea:93:e6:56:23:3d:03:c3:63:a7:
fd:ef:1e:9c:48:47:28:35:85:b6:70:c6:53:32:85:a9:bb:29:
31:e9:dd:31:61:de:6b:c8:95:ef:45:6a:9a:97:03:e2:67:81:
b8:c6:b1:53:c2:23:1f:35:e0:e2:1c:d1:a1:04:a4:38:59:30:
bc:20:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:03 2026 by rpki-client