Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: 69VxmiUhJ7IAX5Ldcnra6spWMTlvfZ0ZRc/+YUNLRHM=
Subject key identifier: B2:11:C3:68:C4:14:68:A3:2C:50:AE:A1:94:4F:18:86:23:6D:D7:CF
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 019CAB6BCBA596249D6A778CCA03829BB8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: os9+ZNO3ur5bdiYVa5eB4i2diQkhL3QlDHDE+6jF8Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cb:a5:96:24:9d:6a:77:8c:ca:03:82:9b:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=b211c368c41468a32c50aea1944f1886236dd7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:78:2b:f3:04:b9:2e:89:a9:c4:cc:8e:3c:
42:a1:2b:b2:83:9b:ec:da:4d:00:65:81:bb:14:42:
51:49:80:b0:75:71:00:54:2b:51:52:2d:8c:c9:a1:
b8:52:c7:9d:e3:c0:42:a2:8d:be:41:b8:14:93:ce:
3e:b8:48:77:72:c3:db:d6:13:c0:9e:81:a0:1a:20:
2a:a0:7c:b4:c1:fd:7b:27:2d:89:59:2d:41:14:d3:
f3:fe:13:e2:50:00:a2:b9:b1:f4:7c:63:60:ac:b8:
0e:a7:93:29:79:d4:83:0d:f0:92:a6:a5:02:d4:7b:
05:da:80:46:d5:b0:f2:8b:00:0c:09:11:98:5a:a4:
e6:07:0d:c8:d6:b7:59:e5:3e:6e:ef:cd:5b:eb:fd:
81:50:fe:da:51:c4:9b:d2:4b:90:e6:67:b5:e7:d8:
ba:62:4a:70:0e:2b:a4:d2:77:42:8e:29:13:7e:be:
64:c7:7f:83:d3:ae:38:ed:d4:48:d0:33:42:a3:c0:
3d:65:c7:f2:9f:55:df:c4:c0:9a:71:f2:f5:25:03:
1f:5e:71:6e:46:15:56:df:8d:5a:51:92:8b:d9:d1:
40:08:bb:0e:ed:41:04:f0:87:03:9b:c5:51:05:ca:
b2:aa:26:71:c9:3e:31:62:07:66:2b:c7:79:ad:00:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:C3:68:C4:14:68:A3:2C:50:AE:A1:94:4F:18:86:23:6D:D7:CF
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:33:01:08:3b:48:7e:e5:e2:01:67:55:fe:7e:f7:ab:28:c2:
de:89:08:05:6c:95:9a:28:ad:ff:66:a1:47:8b:63:ae:01:7a:
af:dc:08:45:bb:5e:4a:92:d8:9e:d0:c8:9f:f1:1f:97:0f:35:
3c:fe:5f:3e:af:77:e3:59:ae:2f:05:0e:70:d4:0b:2c:5d:a0:
bf:b3:fb:c2:ad:96:e8:71:06:95:ef:19:dc:56:18:1b:8d:ab:
10:c8:3e:5a:59:6b:99:05:b6:44:c4:a7:ea:f0:a6:27:f4:22:
06:d0:8d:47:31:62:6a:be:ab:74:8c:70:49:ad:6c:38:fc:ef:
da:9c:f7:e6:3f:47:15:da:d0:93:63:39:54:3b:f8:fb:fc:f3:
c9:85:fc:0e:ee:52:7b:a8:2d:87:7c:dc:82:b5:b9:25:d9:b7:
79:f8:6b:83:35:bb:c7:db:a5:dc:39:68:27:7d:6f:f9:6e:1d:
13:49:3d:dd:3c:c8:a1:7e:7c:e1:f6:34:d6:4c:18:75:f3:c7:
47:2f:5f:1c:de:49:fc:b5:fd:ce:00:39:74:59:d4:eb:25:9d:
85:15:bf:6e:b7:b7:7b:da:63:b2:8b:23:63:f8:56:e8:80:82:
5f:66:b2:f2:79:5f:4f:17:e9:fc:76:aa:1d:4b:49:87:b4:bb:
58:75:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:38 2026 by rpki-client