Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: RljS7U4kW1x5XyccDcwqxlKoA3OwbKr/FcScOEtONfQ=
Subject key identifier: 26:08:A0:3E:3D:4B:FF:1C:6F:ED:88:99:72:B0:6A:50:50:32:73:03
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019CAC7E5771057943D2E577DA36A204BC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 174C
Signing time: Mon 02 Mar 2026 03:01:26 +0000
Manifest this update: Mon 02 Mar 2026 03:01:26 +0000
Manifest next update: Tue 03 Mar 2026 03:01:26 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: /nAfn18ttN9Av5eUTJQ7rGybJAa6OvjwxyzN2mxniF4=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:57:71:05:79:43:d2:e5:77:da:36:a2:04:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Mar 2 03:01:26 2026 GMT
Not After : Mar 3 03:01:26 2026 GMT
Subject: CN=2608a03e3d4bff1c6fed889972b06a5050327303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:1e:58:e9:48:d3:2f:47:36:d9:b1:ad:54:
75:2e:6f:10:3d:4d:1a:a9:b6:be:39:27:6a:e3:bd:
01:0b:3b:c0:9f:c2:8d:4d:bb:c2:a4:d0:97:cc:e0:
fe:0a:63:d3:29:cf:99:d0:27:24:2f:f4:34:d1:64:
5c:cd:41:4c:ce:1c:de:71:da:1e:7e:fe:e2:34:95:
d7:60:42:f8:7c:ef:c8:72:5a:06:41:23:16:fc:31:
39:77:e0:eb:5a:e4:f4:55:f5:ef:75:22:13:09:55:
3f:7c:86:8f:3b:13:1d:f4:24:39:74:b1:65:ad:91:
11:e0:b7:95:3d:e0:16:b3:9c:cb:1b:eb:09:48:1c:
e5:47:b7:6c:76:3a:f1:23:9d:28:10:ca:cc:48:74:
43:71:5c:56:3e:e4:5b:7c:a5:f4:3e:8e:b3:d2:e9:
75:9f:42:75:17:21:aa:52:07:9e:d9:fe:20:1c:14:
0a:b2:4a:c0:1b:da:5e:c0:8b:18:bc:46:c4:f8:92:
af:d4:85:07:01:1e:15:a9:71:b8:57:85:72:0d:e7:
ed:8c:ce:61:57:05:74:78:b4:b9:b7:a4:b9:3f:ef:
ea:89:75:89:5b:2d:08:92:3d:8c:af:4e:59:8d:4d:
56:66:d7:d1:e6:c6:3a:24:3b:c6:e7:cf:0e:13:61:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:A0:3E:3D:4B:FF:1C:6F:ED:88:99:72:B0:6A:50:50:32:73:03
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:84:05:be:8c:ff:92:2a:d3:c8:bf:2d:82:c2:03:da:3e:
83:72:43:8c:57:c0:a3:34:8c:e0:45:6e:49:58:f7:d4:0c:d7:
06:06:19:cc:8e:69:49:78:0e:b9:df:1f:0f:29:8d:ad:13:fc:
d5:7a:36:5c:88:49:bb:6c:4d:bd:8e:20:3d:6a:b3:1b:f0:26:
c4:fb:c3:9c:92:d8:5f:a7:f6:97:0d:f1:85:78:4c:39:5e:2c:
fc:4f:1f:b3:0a:26:0e:3c:51:22:dc:5f:14:98:57:0f:57:61:
78:08:bf:24:56:9d:b1:12:5b:fb:96:1b:c5:04:19:79:05:19:
ac:7e:2c:24:86:e7:0a:87:d5:ed:c7:0d:3b:24:66:ed:97:b5:
7d:c5:d4:b7:da:29:86:89:08:aa:29:70:2a:23:d8:98:94:a9:
71:cd:df:23:02:ee:6c:aa:16:e0:15:35:35:e4:96:b7:12:d4:
a7:c1:6f:f4:64:c4:90:1c:6a:63:63:01:21:5c:98:dd:7e:f6:
f7:58:1c:f4:5d:21:e2:a9:a2:43:93:cf:6b:d6:66:2a:85:64:
86:69:7a:0a:08:a5:25:7a:9e:10:e1:4f:06:c9:2b:9c:1a:b4:
7b:3c:a2:d8:1b:d4:b9:a8:e3:0a:50:3d:ec:99:b9:ee:f4:ec:
ac:04:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:45 2026 by rpki-client