Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: rttIIoLQPLX5QvYCjxYINdDgiqlAlUAhthP83rQrXGo=
Subject key identifier: EB:D4:D4:81:C6:4D:B6:BF:B7:9F:3B:61:B5:30:F6:FE:95:20:42:92
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019CAAFD9B0E14A98AE90738195AE6C6766F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 09B8
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: 5h+z+HktFTjTXgp4dYvR715nRxoqB/nv23T6olnDW3Y=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9b:0e:14:a9:8a:e9:07:38:19:5a:e6:c6:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=ebd4d481c64db6bfb79f3b61b530f6fe95204292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:26:70:e9:50:38:b7:4f:6c:b5:ad:e8:08:
28:29:44:e4:78:c2:e9:7b:0b:96:6d:c9:9f:02:58:
c4:5c:83:4f:58:08:f8:b7:2d:99:c7:6f:29:dc:82:
9a:b8:c4:df:b8:d6:9f:d6:56:34:48:5d:4f:1b:3f:
af:16:95:3f:48:1a:81:ac:50:11:6d:bc:63:3c:b8:
f3:96:2f:58:dc:74:65:9a:40:b6:a0:74:49:3d:6a:
a9:a1:21:a1:50:08:d2:fa:76:f8:cc:27:1d:67:40:
de:e2:0e:52:0e:14:3b:be:c7:a6:64:cb:b8:fc:23:
bc:6d:6b:39:f5:38:a2:44:b9:f2:b6:6a:51:81:fe:
50:40:b3:83:c8:63:0d:ed:b8:28:b0:0f:58:0c:b6:
eb:10:1c:b7:f0:bc:78:c5:02:3b:dc:f8:32:df:b7:
92:05:3a:43:5a:94:7e:57:0c:51:ff:17:f3:cc:6d:
4e:3a:3e:2b:ab:69:6c:1e:7c:1e:dd:92:76:36:9e:
c0:b5:dc:e9:ec:49:26:11:04:81:ca:74:8e:ee:60:
a3:cb:99:09:61:3a:28:59:3b:0c:20:63:3c:fc:55:
06:6e:2a:2b:70:6c:8d:c1:ac:00:7e:86:a7:51:e7:
8d:ef:e9:35:a9:8c:ec:8e:af:5b:fa:88:0a:01:c5:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:D4:81:C6:4D:B6:BF:B7:9F:3B:61:B5:30:F6:FE:95:20:42:92
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:34:bf:72:35:0f:30:f3:3c:b4:1b:cd:29:72:56:91:41:
f3:40:e2:66:99:43:c1:20:a4:b2:79:d8:93:d3:9d:15:83:cd:
71:4a:6b:ef:f2:9a:2e:9a:06:ba:4d:0d:98:51:90:d9:96:42:
91:e1:0c:70:ca:19:dc:53:5a:c5:e3:ea:e9:c1:98:18:93:50:
33:f5:89:fd:40:96:46:fe:12:33:01:3c:e7:f5:ee:1f:9b:6b:
87:f8:7f:02:38:a1:90:d5:eb:4f:09:ae:56:6c:de:de:e3:73:
61:35:46:9d:5d:54:68:5f:4d:73:75:7d:07:19:e0:a4:57:47:
1e:0d:1a:7c:aa:7f:7f:7b:0e:e5:75:0c:66:6d:da:fe:e8:aa:
59:d1:a6:f2:94:7b:87:17:e9:e4:1f:b5:f5:bf:f9:13:72:ca:
1f:95:2d:d0:c7:2c:96:f9:41:95:4e:5e:c1:47:9b:34:f2:81:
3a:4e:5e:fb:05:bb:d8:34:35:38:78:fb:23:d3:9d:75:16:4f:
df:15:da:1c:72:52:df:bc:18:9f:a6:a5:4a:69:a1:5f:83:a7:
51:ee:47:17:35:a7:ac:f0:18:4a:dc:59:fa:05:0b:46:27:de:
34:83:08:8c:86:72:d4:a1:3d:11:ac:8c:60:9e:f7:38:d7:fb:
45:26:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:04 2026 by rpki-client