Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: MRWUAqL3RKtQWAmMwcq9XHbRr71j4SE3XcQL8P9FoGk=
Subject key identifier: F3:8F:1F:EC:BC:73:DD:5C:8D:38:F1:B3:3A:D3:08:2D:3F:8A:49:72
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019CADFEBE24D75D96A013ED8EDF3368A919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 14C2
Signing time: Mon 02 Mar 2026 10:01:18 +0000
Manifest this update: Mon 02 Mar 2026 10:01:18 +0000
Manifest next update: Tue 03 Mar 2026 10:01:18 +0000
Files and hashes: 1: 6gA1OlRN1ocGTkJB84vRgcbm7yE.roa (hash: m0QRct0nDamOcIZ5SWxkfJtavcfbw7Z34cfgKRNCHWc=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: AdWKaGAd5qGD8RN7iLaG2XHwYJ09Eab/910eGaKsSX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:be:24:d7:5d:96:a0:13:ed:8e:df:33:68:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Mar 2 10:01:18 2026 GMT
Not After : Mar 3 10:01:18 2026 GMT
Subject: CN=f38f1fecbc73dd5c8d38f1b33ad3082d3f8a4972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:ea:6c:db:e2:b4:c8:ea:69:02:e8:6e:fb:
23:4d:e2:19:c5:fb:c0:e6:39:92:86:8f:44:91:f4:
9a:d6:67:da:cb:c3:cd:81:2e:97:dc:98:8b:f5:f2:
03:16:00:6c:3e:22:f1:af:e4:37:c7:0d:61:84:0d:
1a:df:da:4a:31:1c:7d:56:66:4a:10:49:aa:2e:e3:
01:dc:70:4c:0e:b8:d9:9c:10:07:49:b1:c5:9d:37:
c8:26:e0:89:86:10:b1:39:01:2b:c7:35:75:f3:d6:
b9:0e:94:1f:63:f0:a9:21:fa:38:21:35:0a:41:ce:
fd:5b:41:91:44:70:a8:01:89:fa:c0:35:3b:5c:07:
1d:fb:5a:cd:ae:9c:c3:5d:34:85:a2:8a:8f:06:eb:
65:fc:f4:d2:fd:e7:96:5d:e4:f5:f5:64:5a:d7:35:
aa:64:8e:ec:6b:b9:6d:f6:87:86:55:9f:6d:38:35:
b1:f3:a8:35:fc:3a:94:4b:08:00:5b:95:d9:78:ad:
d6:36:38:84:f3:d6:95:0a:07:50:cb:2f:9c:77:e2:
45:cf:f0:26:7e:ee:50:4c:33:04:7d:5d:bc:0f:ed:
bb:71:5f:ca:83:09:58:55:72:e1:37:bc:53:ae:2d:
8f:c4:52:80:da:5f:b4:cd:c8:07:8e:22:b3:30:0a:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:1F:EC:BC:73:DD:5C:8D:38:F1:B3:3A:D3:08:2D:3F:8A:49:72
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:e7:bd:2e:d0:75:07:f1:cd:75:fc:ae:bf:6e:b4:7d:f8:
36:de:80:4e:b8:35:24:8e:82:be:6c:bc:c5:f4:2f:79:64:52:
ec:5f:80:38:17:ce:65:cc:07:0b:cb:11:a8:c3:e2:d9:3b:c6:
26:d7:f3:e2:e2:72:99:64:27:6d:d9:7b:1d:97:cc:69:07:26:
11:d2:cb:a9:ef:aa:f3:9f:8a:3f:de:fa:d9:71:9b:0b:73:9e:
32:67:08:99:0e:79:73:9a:02:11:bb:0f:82:7e:af:38:3a:ef:
66:a4:09:58:17:fe:c8:2d:46:d9:9b:cb:97:7a:73:58:2c:14:
30:87:d0:6c:99:ae:65:d9:38:e8:8f:58:fe:1e:cc:cf:88:63:
3a:9a:87:eb:cb:47:53:f2:b3:56:f2:4f:2b:79:70:f8:db:c2:
ea:74:f4:86:af:f5:cf:e1:e5:e4:c3:e8:90:f5:2d:81:06:53:
3d:f5:b2:49:66:2b:9a:27:68:1c:b2:e4:78:54:57:1e:d5:53:
b3:91:e9:a9:c3:b6:3c:02:e9:46:43:50:a2:0a:f6:c1:d1:9d:
0f:16:18:32:db:75:7c:04:77:22:c9:70:d6:59:2b:f6:b5:2e:
42:ab:48:09:f9:48:63:2a:98:61:16:76:d8:97:91:82:d9:52:
fe:44:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:48 2026 by rpki-client