Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: B3Z+wz6WqVTop6fWNdJ6Iw74btVkGHhWxrNj8fByUS8=
Subject key identifier: B8:A2:B7:3E:3D:36:5A:63:F8:6A:32:D1:1A:6D:35:2D:B5:7A:1D:E8
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019CAA8F9C80983C3A816A178DCBD26A41BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 7sfVEaU8A8ihfr64sAxn8eAGmNo.roa (hash: ACNKKz0yFm+J3hHzQjyY3vUiOtbR7xfJ0cZ7zXLDPak=)
3: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: zbrjJptuG45kIeOQjaBlPJKJEh/WdLREPnOY4pwCr9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9c:80:98:3c:3a:81:6a:17:8d:cb:d2:6a:41:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=b8a2b73e3d365a63f86a32d11a6d352db57a1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:da:c5:d8:b4:3d:da:cd:1c:52:a6:e5:fa:
ca:05:0d:16:e6:83:96:2f:c2:82:ca:3f:5c:fb:5c:
b9:2b:b5:13:9c:e2:bb:91:9c:d2:d8:a0:d5:f1:94:
ad:cb:4e:13:35:b2:96:24:df:09:bc:14:0d:b6:b5:
45:bf:20:3f:f3:55:77:17:d5:27:6f:e3:ab:1b:c7:
1a:4c:f9:be:5e:d0:b4:4b:b3:5f:5f:85:9e:e8:4f:
3e:6c:8b:2a:93:7b:53:c0:29:db:26:7e:d5:0c:60:
1c:f4:fc:f5:8c:1a:a2:b5:a5:08:3e:6b:a7:0b:b8:
33:c2:9e:30:24:6c:c5:bd:17:03:31:6d:8a:b2:43:
33:ab:50:eb:3c:43:2f:ce:ba:06:50:ab:8b:4f:b6:
f7:6b:44:c0:1b:65:45:65:f7:da:8b:50:34:12:45:
c8:b6:2c:68:8a:f9:aa:d7:b4:f4:ed:4b:3c:bd:a0:
89:61:69:7e:5f:d9:fc:11:d0:e8:e8:b1:2a:de:86:
d8:47:a0:cd:a9:ae:8e:b5:98:81:f5:ee:55:99:4c:
e1:03:40:6a:e4:5f:7d:f3:21:78:9e:de:a2:08:b2:
3f:84:4e:1a:04:bd:43:42:39:ed:da:4c:13:5a:a0:
cd:5d:bb:91:64:97:77:d7:81:62:ff:2f:29:a2:fd:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:B7:3E:3D:36:5A:63:F8:6A:32:D1:1A:6D:35:2D:B5:7A:1D:E8
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:20:16:68:a3:93:5d:c3:bd:29:79:0a:76:58:46:0e:5c:e7:
9a:60:72:3a:57:27:eb:d2:c5:11:6c:13:65:ca:cd:d4:a0:33:
cf:6d:ec:e1:b9:f8:c5:2f:8b:ef:4e:61:cd:60:ea:bc:b5:6e:
23:82:7a:42:cc:01:db:38:bb:25:19:cb:cd:ff:46:13:03:2b:
6a:4f:ef:76:16:9e:df:b7:38:26:f3:b5:cd:e8:d1:2f:78:5c:
8c:ca:14:d6:a1:f1:2d:72:48:15:a0:43:6d:2a:c2:b9:2e:23:
11:da:41:58:b4:96:2d:5a:99:4d:7a:26:76:a8:40:9c:50:74:
e2:f8:23:55:6e:b7:e7:eb:e9:7e:f3:db:36:96:98:4f:ae:a5:
ab:05:07:a9:c6:e5:43:db:71:92:bf:b8:e6:c9:05:0a:f0:94:
39:42:3d:2e:68:02:87:71:60:99:02:d8:d5:4f:be:4c:c4:01:
1b:ae:dc:58:4d:49:37:81:ba:5f:d2:c6:d3:63:3d:bc:d3:d8:
a2:81:0e:a6:a3:7c:e7:3e:06:52:0e:b5:e9:89:7d:a2:26:50:
57:6e:6a:36:20:54:bf:51:1b:33:c2:b8:6b:99:aa:14:d6:74:
ae:dd:61:9b:2a:20:b8:9d:a3:52:6f:85:1e:47:f7:a2:f7:8a:
6c:d6:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:43 2026 by rpki-client