Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: iEjpDKy60d6Yf5gzBMRmeeOu9kj1vvUEOBUC5v3SKPo=
Subject key identifier: D5:C3:08:7A:C5:BE:BF:EE:19:54:CD:1F:84:2D:BF:93:71:D5:37:F7
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019CABD9B351EBD8A02D8D4A701F05EB4807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: CznC6BjqL/yC0d9I9fsd5Eopl3rB2BJCEp8LWf3Dpac=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b3:51:eb:d8:a0:2d:8d:4a:70:1f:05:eb:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=d5c3087ac5bebfee1954cd1f842dbf9371d537f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:93:49:94:60:ab:09:e9:f3:b5:75:1e:94:
5b:79:9a:cc:09:39:f6:bf:54:26:06:02:a4:69:e8:
05:56:91:fc:43:c3:5e:5b:fb:ae:d9:ff:ed:56:4f:
2f:b1:9b:15:d2:e3:ca:01:f7:de:2f:fb:d0:8b:01:
5b:4b:53:e8:ec:7d:74:ae:f7:33:b6:ef:12:20:a4:
3d:7d:8c:ad:09:f3:b3:e4:6b:45:b3:61:bb:01:3c:
ce:7e:4d:aa:73:4f:f9:e1:97:12:f3:ea:08:a2:f8:
b2:5f:b5:d1:e6:a8:79:77:9c:d6:f9:de:13:0a:1a:
82:99:b3:2d:9d:c8:20:c5:90:56:e6:f6:86:87:f3:
68:f1:24:25:2f:cb:f6:92:e8:02:2d:87:a5:5e:95:
aa:82:32:8f:03:f2:e4:6b:cd:53:57:da:76:2a:1a:
64:44:b6:79:32:28:2b:d8:b6:42:0e:2f:dd:96:64:
f5:1c:56:11:97:52:4c:35:51:49:a8:16:89:2c:9b:
3b:34:0a:89:b9:81:e9:9b:78:ef:9d:db:8a:65:89:
1d:de:78:f4:42:3e:ab:ba:a6:ba:7d:39:57:7e:b0:
89:d1:8b:56:0f:04:db:4d:f4:9b:b8:4c:82:f8:a2:
b7:f7:83:36:6a:65:16:91:c4:d4:33:8b:30:e1:37:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:08:7A:C5:BE:BF:EE:19:54:CD:1F:84:2D:BF:93:71:D5:37:F7
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:17:2b:f8:bd:bc:4d:f6:a4:ed:1a:e0:25:fa:b0:85:94:5e:
0d:67:d6:2e:ef:f5:3e:76:3c:b5:f0:9f:64:80:aa:ef:15:9e:
ee:66:b4:bf:ed:24:90:21:5f:35:86:f9:79:8f:46:dc:95:df:
4b:8a:03:c1:37:10:32:31:43:0e:85:fa:2f:68:32:03:8a:31:
6e:c6:29:eb:66:35:74:09:70:c6:e6:bd:83:66:d7:a8:e5:b1:
33:83:52:5f:32:46:e1:94:b4:e2:95:39:7b:15:0d:3f:5b:88:
51:0a:b0:4c:53:1d:e5:13:4a:27:77:d9:a4:5e:d6:2e:2f:25:
b5:f9:f6:87:13:5b:d0:73:d8:90:7b:71:ab:86:d1:75:44:31:
cd:01:56:e8:2f:b4:ec:c4:05:54:89:a2:df:5f:8e:1e:d5:87:
a0:35:ba:ed:4f:b4:20:20:e5:5b:3c:b7:86:ea:05:da:8e:a7:
c1:f6:eb:93:86:84:01:7d:6d:af:09:fb:81:66:c7:fa:55:8a:
8f:c9:2c:54:07:13:78:39:fd:8b:5c:08:a7:be:cc:65:cd:a6:
93:e6:03:dd:42:6d:77:03:d9:52:19:bf:9a:f7:ea:e5:fb:95:
5c:6d:fe:13:b6:85:d8:fc:44:29:98:6f:9f:ee:22:88:ca:f8:
5b:e5:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:31 2026 by rpki-client