Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: vPkjLXAsfrfqAMpnBcM4ELNkQmyBmW/wGLhkkcFvZ/Q=
Subject key identifier: 43:BC:42:AF:73:22:68:4C:A7:86:3C:61:4B:E0:C0:2B:8F:98:5F:FC
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019CA9B3CDF7B764A59F31880F48AA1CEF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0C12
Signing time: Sun 01 Mar 2026 14:00:58 +0000
Manifest this update: Sun 01 Mar 2026 14:00:58 +0000
Manifest next update: Mon 02 Mar 2026 14:00:58 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 32QMpC6wtmKQMD5sGFOY/0q/FsjSnlZREwgdgwGh3/s=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:cd:f7:b7:64:a5:9f:31:88:0f:48:aa:1c:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Mar 1 14:00:58 2026 GMT
Not After : Mar 2 14:00:58 2026 GMT
Subject: CN=43bc42af7322684ca7863c614be0c02b8f985ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:1c:a1:9a:be:ea:ac:91:a3:aa:e3:f6:97:
21:62:09:66:b6:34:65:c4:90:1e:09:70:5d:e1:76:
36:41:0c:ef:78:72:8a:f5:6d:aa:01:b7:74:1f:07:
59:88:ab:10:9b:c8:0d:9d:8f:be:d7:b7:fe:6c:12:
93:ff:f1:bb:df:77:03:59:ee:6f:f7:6d:08:ba:1d:
d1:16:b9:6e:32:07:73:22:03:0a:e6:b3:8e:c5:a4:
8d:45:55:ce:a8:eb:02:cf:b1:55:89:3f:1c:98:24:
bc:2f:8c:13:95:43:2b:b4:16:92:87:3f:c0:b2:e7:
ed:fc:b6:0a:02:da:ef:48:c4:6e:a2:85:d2:0c:b5:
ab:ff:37:ce:0a:ed:13:a9:52:90:d1:1c:2e:4c:1d:
4c:ae:d8:53:a7:03:55:39:33:d0:76:48:38:16:3b:
78:4d:27:41:2e:82:5f:31:49:88:9d:ec:e0:e0:bf:
48:03:24:0b:54:52:58:f5:f5:c2:17:32:e0:92:cf:
f4:bf:4c:74:70:eb:d4:12:ca:95:f0:06:c6:e3:e5:
7e:cb:1f:42:68:92:5d:f0:1f:6d:81:52:de:bb:2b:
1e:f5:83:a7:e2:da:18:eb:ec:a3:5a:19:bf:35:64:
cc:9b:f3:20:4c:78:1b:5b:60:bc:5f:3b:91:00:8c:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:42:AF:73:22:68:4C:A7:86:3C:61:4B:E0:C0:2B:8F:98:5F:FC
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:14:0c:46:e8:6d:94:64:8b:c6:30:59:63:97:49:31:c0:
40:32:19:8a:a5:22:6e:7a:4f:1d:5e:c4:cc:2d:3a:ac:39:e3:
15:ff:f2:35:f4:2d:3d:f6:1e:7d:f6:7d:72:77:62:58:92:25:
11:31:d7:9a:62:cc:ef:1c:47:8e:ad:7d:3c:eb:36:0d:79:1c:
07:32:f7:44:95:2a:61:31:1a:61:e2:27:3e:9d:32:34:2c:37:
1b:18:bc:36:4b:7a:2c:ef:4e:7b:78:64:e7:ac:23:c1:42:72:
cd:ca:bd:7a:59:c6:48:5f:40:4d:6b:fb:20:e2:2d:0d:77:cb:
6d:3d:56:a3:f5:9f:39:b0:93:07:ea:f3:8a:cc:3b:02:cc:0e:
3d:20:12:e9:98:4a:fc:6f:a1:49:2e:44:ed:54:cb:45:87:c9:
ee:04:5a:6b:a9:09:f1:74:6c:c8:32:c8:e4:93:24:89:98:8f:
f3:ac:52:6f:9a:cd:93:e2:46:17:60:46:07:ee:5e:df:0d:4f:
8e:5e:bb:88:36:bf:d2:54:3c:69:80:cf:d3:8a:89:8d:2a:c2:
30:5b:64:71:81:40:66:54:f7:04:ce:7a:e3:06:2c:c8:17:f4:
86:58:55:2e:58:8c:06:1c:93:00:ab:cd:e1:45:eb:14:11:a8:
91:81:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:36 2026 by rpki-client