Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: kBLWK9W5M5RWZUTxW77VPsXOgyBd/w/D8hzyDFbpj6o=
Subject key identifier: 8B:7C:72:E2:71:85:AB:4D:38:19:53:FB:F0:6C:81:5B:BE:C2:49:FA
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019CABDA0727B003850C6CBECE204D96A62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 039D
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: Dg11zc6gCj1UJMCeVbQf+OZhv508gwmCcbGkYYUtKq8=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:07:27:b0:03:85:0c:6c:be:ce:20:4d:96:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=8b7c72e27185ab4d381953fbf06c815bbec249fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:cc:6b:15:d7:1d:03:3a:c6:b2:f6:cf:c0:
4f:5a:cf:96:5f:5c:13:7c:61:2a:f8:0d:93:75:51:
3a:2e:2c:e4:05:96:90:43:e9:b6:cd:a9:2e:d9:14:
53:a2:7f:b0:f1:f6:1b:81:d3:d9:04:67:8c:fe:0a:
5b:02:56:01:9b:cf:06:b6:3c:bc:da:0b:94:2c:05:
14:3f:da:dc:7d:1f:4b:81:04:c4:59:0f:4c:a0:fe:
18:0c:d8:fa:d8:f5:50:34:dd:3a:4c:b9:29:94:8f:
02:a4:5a:b9:b8:35:11:72:98:34:52:6e:7d:87:0b:
4e:f6:c9:26:48:e9:28:4a:52:4e:d0:52:ca:fa:2d:
27:9d:49:92:83:6a:97:84:61:2f:84:6d:c0:81:c5:
d0:23:f7:eb:76:13:07:ae:9f:14:a9:9e:ad:ba:a6:
df:a1:a1:fc:ac:0d:80:0b:69:9d:f9:d8:96:2b:85:
c9:5c:11:0c:76:b2:d3:e9:49:36:bb:14:79:30:c7:
ea:5e:0d:45:7d:a7:80:af:c9:65:b9:38:54:fb:17:
93:20:4a:2d:c7:ba:d3:43:e6:63:d2:d2:2b:92:4b:
e6:fa:60:89:17:1a:d6:c5:f1:ca:89:71:ef:2f:42:
0b:dc:7d:19:46:77:c3:43:f8:8c:e6:b4:3f:74:1a:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:72:E2:71:85:AB:4D:38:19:53:FB:F0:6C:81:5B:BE:C2:49:FA
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:69:d6:dc:f4:54:6e:db:47:ee:e8:69:77:44:f1:38:f5:
c7:bb:cd:03:dd:39:ae:bd:2f:93:47:ad:b1:7c:2e:63:2d:ff:
9d:21:af:56:9b:50:d4:f8:78:9c:78:77:15:e2:a7:16:49:46:
dd:b1:8e:c9:c5:86:3d:45:2e:04:39:91:e4:6a:a5:74:8d:00:
de:af:d2:c8:ca:23:e8:e2:5e:75:fb:51:b4:08:1c:4b:1b:be:
0a:cb:58:7d:e8:33:a2:9a:d7:2c:75:c0:ab:31:34:b9:9b:92:
1e:cf:d1:6c:8b:88:51:28:8b:86:df:c9:db:cd:99:64:88:7c:
68:28:9e:14:05:62:2c:90:5c:25:12:04:6f:bf:34:0c:df:c2:
44:9c:6b:38:53:9f:69:71:66:bf:ed:c2:80:7c:9d:06:c0:c3:
41:cb:66:09:4c:98:b8:72:55:d1:11:d7:9c:1e:55:38:ce:b2:
c9:3c:3a:ab:10:12:28:71:13:e5:9f:c7:0e:c2:fc:1c:00:1e:
f2:bf:0d:cf:f2:58:0e:75:0a:28:c3:bf:31:0a:33:ff:a7:42:
0d:0c:29:44:d4:b1:69:f6:f8:3c:60:00:47:b1:30:3e:26:48:
a4:71:95:f6:3e:30:61:8f:7c:d4:fa:cc:47:c7:33:ae:bf:7d:
36:17:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:29 2026 by rpki-client