Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: O50x4tx8/byHB27UIo8dE/18tCCyC/JX9GXQkuGH9tQ=
Subject key identifier: E4:61:8C:8B:D7:BE:45:D2:7F:BC:2F:61:90:F5:9A:8C:28:A5:9A:BF
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019CABD91D80702F19F4B204684CD72AC6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: UiCfCHSlgzIyRha68V62zvFv3oL3QZC4qwqnjbJsQsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1d:80:70:2f:19:f4:b2:04:68:4c:d7:2a:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=e4618c8bd7be45d27fbc2f6190f59a8c28a59abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:6b:73:80:ca:52:3c:b4:b1:e7:15:ae:f6:
b0:ad:30:75:c9:ef:7a:16:4a:1e:9b:d6:48:e5:f2:
6f:df:94:d3:6a:e2:bc:b1:a6:09:7b:fb:39:bc:61:
3b:66:73:ed:ca:31:92:37:98:63:90:68:4b:a0:50:
58:eb:3d:04:e9:13:5b:58:3e:b5:a6:da:25:99:a1:
92:80:86:a4:3a:58:91:29:aa:7b:81:28:73:25:db:
5a:a8:55:2c:9b:38:10:a5:15:57:f6:78:50:f5:e4:
a7:9a:d7:9c:3e:42:b6:8c:71:ec:f8:4f:0e:b4:6d:
cd:ef:74:2f:70:3b:fa:b5:5c:8c:2d:95:bc:3c:26:
f5:4a:1a:22:43:0e:de:dc:13:a0:f3:c1:1c:6b:e6:
d5:46:22:c4:1f:c5:a1:ba:55:25:4d:5d:87:00:7a:
39:c4:c8:e4:bc:22:b8:08:1c:95:91:80:a8:43:0f:
6a:dd:25:f4:d5:1d:2a:13:3a:b8:05:63:a2:49:84:
08:99:51:73:23:9d:ed:6d:c5:24:72:f7:3e:ed:40:
36:32:3d:24:c4:51:83:ee:c4:e3:36:ac:26:8a:7f:
1c:ad:31:a3:13:ff:ad:ba:1f:c6:00:26:55:ea:75:
ba:ae:53:34:08:31:09:48:14:e4:86:82:97:f2:fa:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:8C:8B:D7:BE:45:D2:7F:BC:2F:61:90:F5:9A:8C:28:A5:9A:BF
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:14:0a:68:7a:16:2a:c0:ab:e5:73:3e:37:80:ee:ab:1a:5b:
63:e4:08:9e:26:f5:6b:c8:71:92:52:27:8f:39:20:eb:af:e0:
e5:b6:a9:95:e0:a1:b3:56:a2:a5:ae:20:84:b2:07:97:29:62:
f9:31:9d:2c:8c:f4:f1:25:31:ae:fa:d6:d8:39:02:3c:92:d2:
84:dd:0f:b3:66:82:c3:02:1e:ec:5b:d8:85:8b:b1:25:6d:23:
13:f4:86:9a:e0:04:d7:65:19:22:b1:a7:cb:86:b7:53:0a:8a:
82:01:be:d3:e0:f0:ad:ff:d1:b5:17:34:60:30:ee:17:26:db:
cd:ce:46:3c:87:12:10:04:a3:2e:11:09:12:23:27:cc:a6:a4:
cd:a6:80:45:3e:a4:53:51:f9:1e:26:f4:1d:3b:3e:f9:48:d2:
ea:df:5d:1d:6d:4e:66:5f:2e:ab:7a:47:41:52:ad:de:15:26:
ef:af:d7:4e:1a:ee:cf:6a:ac:d0:cb:b3:6e:9e:ee:2a:3d:14:
db:19:85:69:e8:a9:98:5c:c3:71:06:4c:23:97:e4:5b:9b:4c:
e9:65:e7:cb:d9:6d:8c:a8:77:82:e0:65:17:2e:d9:60:20:71:
f0:d9:37:42:d8:3d:46:c7:cf:ba:f8:c1:03:dc:19:cb:54:67:
43:62:08:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2R2AcC8Z9LIEaEzXKsbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1
NjVlZGIwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
EyhlNDYxOGM4YmQ3YmU0NWQyN2ZiYzJmNjE5MGY1OWE4YzI4YTU5YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww5rc4DKUjy0secVrvawrTB1ye96
Fkoem9ZI5fJv35TTauK8saYJe/s5vGE7ZnPtyjGSN5hjkGhLoFBY6z0E6RNbWD61
ptolmaGSgIakOliRKap7gShzJdtaqFUsmzgQpRVX9nhQ9eSnmtecPkK2jHHs+E8O
tG3N73QvcDv6tVyMLZW8PCb1ShoiQw7e3BOg88Eca+bVRiLEH8WhulUlTV2HAHo5
xMjkvCK4CByVkYCoQw9q3SX01R0qEzq4BWOiSYQImVFzI53tbcUkcvc+7UA2Mj0k
xFGD7sTjNqwmin8crTGjE/+tuh/GACZV6nW6rlM0CDEJSBTkhoKX8vpPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORhjIvXvkXSf7wvYZD1mowopZq/MB8GA1UdIwQY
MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct
ZWY2MWE2MTQxNDJkLzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk
LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxQKaHoW
KsCr5XM+N4DuqxpbY+QInib1a8hxklInjzkg66/g5bapleChs1aipa4ghLIHlyli
+TGdLIz08SUxrvrW2DkCPJLShN0Ps2aCwwIe7FvYhYuxJW0jE/SGmuAE12UZIrGn
y4a3UwqKggG+0+Dwrf/RtRc0YDDuFybbzc5GPIcSEASjLhEJEiMnzKakzaaART6k
U1H5Hib0HTs++UjS6t9dHW1OZl8uq3pHQVKt3hUm76/XThruz2qs0Muzbp7uKj0U
2xmFaeipmFzDcQZMI5fkW5tM6WXny9ltjKh3guBlFy7ZYCBx8Nk3Qtg9RsfPuvjB
A9wZy1RnQ2IInQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:16 2026 by rpki-client