Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier: N9tgbKeOlP3nW5S4Qq63Y1V1UosbTJYV62c4/yidjjo=
Subject key identifier: D0:4C:FF:A3:58:EA:A5:59:DC:F0:99:E2:9E:6C:B2:44:23:EB:4B:EA
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 019CA9B3D5DF0B5C523FCED3CF60833C96D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number: 0E4B
Signing time: Sun 01 Mar 2026 14:01:01 +0000
Manifest this update: Sun 01 Mar 2026 14:01:01 +0000
Manifest next update: Mon 02 Mar 2026 14:01:01 +0000
Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: juTaJ6GIHYxfK5sRpvLYa2iCdvn9ELp6Hgm+IAaiCZQ=)
2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d5:df:0b:5c:52:3f:ce:d3:cf:60:83:3c:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Mar 1 14:01:01 2026 GMT
Not After : Mar 2 14:01:01 2026 GMT
Subject: CN=d04cffa358eaa559dcf099e29e6cb24423eb4bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:9b:01:0f:3a:01:a1:60:36:98:27:f3:47:
41:9b:17:c7:4c:79:3d:b4:b3:aa:e9:01:78:2b:f8:
c2:91:a7:02:46:40:47:af:9f:bb:0b:9a:2a:d8:cb:
1a:c5:59:6c:52:8f:68:7b:08:47:3d:ec:b9:99:92:
65:af:12:b1:fd:04:9e:c0:1d:1d:9d:41:d0:2f:9c:
6f:c9:dc:24:97:77:26:63:d6:7d:b9:80:5f:1f:8c:
c9:53:a5:24:26:7e:da:9d:ce:f1:d1:54:91:28:28:
7a:db:96:92:83:f1:24:df:4a:7a:df:31:07:8d:62:
2a:30:a9:42:d1:30:22:95:a7:62:1d:cf:b5:b9:fb:
ad:aa:bd:32:c8:5b:70:e2:6e:eb:d0:85:8f:d1:d5:
c8:fe:28:a3:86:38:4e:5b:a2:31:50:23:cc:48:42:
a6:10:97:4f:5e:5f:e1:b5:67:90:80:26:c9:77:c1:
5b:d4:3c:96:fc:04:78:da:4e:c6:16:c6:7d:94:7f:
38:47:03:4b:37:55:ed:a1:23:35:8e:54:dc:cf:52:
fd:fa:23:81:b6:d8:52:09:1b:69:30:40:7d:3b:19:
3c:98:25:6b:36:f1:1b:22:54:ca:0c:0e:ff:5d:85:
f0:cf:cb:bd:96:af:b7:02:67:d1:d8:51:61:10:b6:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:FF:A3:58:EA:A5:59:DC:F0:99:E2:9E:6C:B2:44:23:EB:4B:EA
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:d0:c9:f9:0e:ed:48:92:33:b3:a4:cb:99:29:b6:e3:89:
9c:e2:f2:d4:a8:21:fe:14:53:3e:24:f7:7e:c4:dc:b1:74:2c:
1c:55:3c:c4:53:16:00:cf:57:9f:f1:e5:6a:09:22:4a:04:9b:
76:11:89:f7:45:9d:1c:e9:63:b1:34:35:e9:4f:ec:f6:a2:5c:
f4:04:0a:c2:98:72:a3:cd:ac:a6:18:90:6a:b3:94:1f:75:04:
33:8d:cb:14:3a:12:77:f4:46:cf:85:39:72:ee:b1:33:72:67:
3e:9d:7a:0a:9a:d8:83:3f:81:b1:9d:1b:99:1b:94:1a:5d:86:
37:84:91:88:75:85:7d:01:e1:3f:8b:5d:a0:23:c6:e5:90:ba:
33:fb:9a:0c:6c:3b:09:a1:a9:18:90:a4:e4:4a:7c:92:26:b4:
40:e2:39:fa:b4:f0:d9:bc:05:34:34:aa:d5:06:b0:61:42:50:
e2:e8:4c:8a:13:9d:0c:52:24:5d:ac:f7:45:f8:65:52:c2:07:
18:6c:9b:a3:ab:f6:e1:12:53:fa:da:bc:49:c4:25:d6:38:3e:
f0:28:09:36:26:36:19:61:83:4e:b0:d1:9e:ce:b8:95:87:43:
8c:f7:c2:87:47:ff:50:f4:a2:21:19:a3:b7:7b:74:dd:2a:c7:
49:b2:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:59:10 2026 by rpki-client