Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: A+o0DSpNBIb1oa/yr8Dse+SNOAr8cQmZbhrGRMvr85I=
Subject key identifier: B3:62:3E:72:58:C3:CF:A9:49:D4:01:C8:F7:E9:51:2D:CA:B1:A0:39
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019CACB57085AF76BF8FCDC0552AAB7F8502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 08E1
Signing time: Mon 02 Mar 2026 04:01:37 +0000
Manifest this update: Mon 02 Mar 2026 04:01:37 +0000
Manifest next update: Tue 03 Mar 2026 04:01:37 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: PtEv0DXAmiznpFTrP+IHSJ3TqzsPzvSFFzZZVT/MD0w=)
2: aHOqp1ZMoDrn_Rz0nU13prJUF_M.roa (hash: aPL+Mw0PwgSles+WTwist9EMPvDKnBfA4ED9lGmk97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:70:85:af:76:bf:8f:cd:c0:55:2a:ab:7f:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Mar 2 04:01:37 2026 GMT
Not After : Mar 3 04:01:37 2026 GMT
Subject: CN=b3623e7258c3cfa949d401c8f7e9512dcab1a039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:ea:6c:12:7a:e9:7c:2e:bd:c9:69:24:71:
a3:b7:3b:c0:30:24:e4:21:fa:b5:d9:48:d1:e5:07:
d9:01:09:08:ad:fb:07:fe:6d:b7:e9:55:ef:c4:c9:
4f:df:06:04:23:5a:e7:4e:04:c1:b5:0d:04:04:8a:
0a:45:71:ab:ea:4b:8d:b3:cc:ee:80:ad:c0:81:9e:
c8:b2:ef:78:dc:99:ca:91:21:77:5f:d7:14:3b:9c:
d4:36:47:77:d2:54:7b:7b:dc:2c:6d:0f:82:c7:09:
ea:3b:34:18:5d:57:4d:03:3d:28:e2:49:a6:d2:6c:
8b:d4:29:a1:4e:9c:52:79:49:d8:a9:9b:9f:6d:3e:
10:20:8d:a1:a7:3f:fd:aa:6f:2c:39:6d:ca:e1:a3:
71:a1:56:e7:06:42:c3:15:58:d8:de:6f:9a:b7:87:
3c:d5:1b:3b:12:bd:2a:6e:ee:3f:f7:db:e7:d1:2c:
f2:8c:9a:33:93:63:d4:ac:92:a1:a4:60:a3:8c:63:
cf:82:c6:d8:0c:d5:31:2a:0d:b8:5b:82:ba:5e:8b:
92:9a:ae:f5:c8:69:9d:95:c7:31:f8:ed:a7:87:bf:
b2:2b:4b:f8:90:ed:a1:4e:a6:71:00:24:f6:19:6a:
f2:80:4a:cb:01:ab:98:1c:06:11:f4:d5:ea:bf:da:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:3E:72:58:C3:CF:A9:49:D4:01:C8:F7:E9:51:2D:CA:B1:A0:39
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6e:99:c2:a7:5c:ad:4a:07:1c:62:ad:15:65:51:a0:3f:30:
e8:8a:be:0b:b7:5c:48:0a:d0:82:7e:72:7a:14:4a:1e:89:d0:
00:05:f8:24:01:90:22:92:88:35:95:c8:a2:12:11:f0:19:53:
06:03:20:20:81:7b:82:53:35:7f:17:43:e5:b9:1a:64:d9:b5:
a2:46:10:5a:22:fc:36:74:c3:40:4c:c9:d1:37:cc:0d:ed:6e:
a8:07:a9:76:e9:19:65:27:6a:9e:cb:ec:10:fe:24:2d:b3:1c:
2c:17:fd:c8:0d:45:c4:95:83:e9:38:cf:1e:19:fa:29:c5:33:
40:f9:33:0c:c2:30:88:a6:b2:ff:b2:38:9d:a6:8a:15:a7:25:
01:e6:6e:10:7b:d7:51:65:db:06:85:d1:be:09:b6:f6:16:91:
2d:9e:28:ee:8f:9e:f6:cc:12:22:34:53:5d:08:c9:59:2f:00:
2d:f6:7b:01:da:36:e1:6e:52:ec:24:11:e5:6a:27:5d:17:cc:
70:60:d5:64:c9:49:da:58:7a:9c:6a:f3:81:1b:c9:63:ac:e2:
cc:28:bd:60:5d:f2:c2:ee:12:4b:28:4e:9d:bd:cd:f0:31:74:
b8:a5:ff:10:3a:22:29:3c:e1:68:e4:39:08:aa:64:43:47:0f:
a0:4b:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:19 2026 by rpki-client