Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: sDGIS+dI60LF3jGOkQlI7e+NdVHthJB6vEFcULRPX9Y=
Subject key identifier: 07:87:56:4E:CB:A1:8C:EE:C9:90:D4:C2:25:6A:03:37:C4:06:D4:6C
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019CADFE21838B6897523CC581E832BA7219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:38 +0000
Manifest this update: Mon 02 Mar 2026 10:00:38 +0000
Manifest next update: Tue 03 Mar 2026 10:00:38 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: BcG5lJ43zmm15naYyztXN43qGUVlJl/vxCexse+Qx8U=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:21:83:8b:68:97:52:3c:c5:81:e8:32:ba:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Mar 2 10:00:38 2026 GMT
Not After : Mar 3 10:00:38 2026 GMT
Subject: CN=0787564ecba18ceec990d4c2256a0337c406d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:a4:fc:be:5c:b5:66:e9:cd:ec:45:3f:0c:
55:d5:df:5d:53:90:7b:4c:42:dc:34:02:62:11:1f:
ff:dc:82:01:ed:48:5b:48:32:7d:60:7c:8f:42:ac:
88:dc:d6:15:34:09:de:c1:d7:89:25:0a:fe:2e:82:
f0:cb:b7:51:29:2e:71:51:cf:b1:09:a2:d2:48:64:
78:9e:cd:1f:b4:d8:f7:7b:e0:c0:e0:a3:97:dd:22:
36:e5:98:53:2e:34:55:d5:c8:3a:8c:49:9b:40:3c:
a3:eb:91:f1:a2:2b:ed:11:c5:b0:16:d5:a8:d0:0e:
cd:89:a2:92:5e:e3:7a:1e:c8:45:01:eb:a0:75:f7:
d5:08:b4:14:66:ea:a2:59:a8:e7:81:42:91:d7:29:
9f:80:3b:cc:6a:17:97:bc:23:d0:a7:7a:b3:bb:18:
93:93:c5:00:42:f7:7e:54:22:48:e1:45:0c:85:a4:
e4:e9:7e:f4:23:c3:9b:a0:db:70:7c:5e:8a:20:f7:
bd:be:77:bf:8c:66:41:09:25:f2:ce:a1:0a:76:10:
9f:9f:5a:77:fd:0f:32:62:08:4e:36:6c:4d:93:5a:
c7:3b:e2:a6:2c:75:7c:8c:a3:60:ef:c7:c1:55:70:
4e:cb:77:e3:0a:eb:78:4b:53:7f:03:6a:06:5f:cb:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:56:4E:CB:A1:8C:EE:C9:90:D4:C2:25:6A:03:37:C4:06:D4:6C
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:73:5a:71:a7:34:77:77:98:57:45:a3:ab:62:b7:94:16:ba:
ad:4e:b7:ad:f0:b2:58:d7:82:ea:a4:2b:a3:e1:54:f9:bb:b0:
7f:74:e3:fc:25:da:f8:e6:7e:0d:b9:07:c5:52:3f:9b:79:ef:
42:d4:e3:75:4b:81:46:3a:73:98:d2:f4:cd:27:c9:64:54:c5:
69:58:7d:8b:e6:9b:bd:6c:04:58:91:49:a7:5a:97:f1:9c:f8:
42:8e:2c:82:9e:0c:b4:df:39:6f:65:3b:b8:b3:47:4c:e4:ba:
15:f8:cf:4b:ed:25:66:89:54:4d:ca:16:31:f6:e7:fa:e3:6d:
ff:ba:86:02:05:5b:a2:18:6f:5c:4c:18:70:af:19:7f:53:59:
84:9a:14:76:6d:06:fe:8f:b9:ac:a1:88:36:00:78:cd:b1:f8:
21:9d:d0:15:a0:05:d7:24:53:ed:7e:a3:cc:0f:2b:fe:1f:8f:
63:2c:53:ed:4d:8e:b6:e4:33:7b:eb:44:bd:fb:44:ac:60:78:
de:0b:03:84:8c:d2:8b:92:50:b3:3a:3a:e3:a5:c2:2d:3e:96:
98:68:4b:22:d4:b4:32:0f:29:92:f4:b1:28:be:67:9a:0c:2f:
11:71:77:1e:ad:86:5e:00:0c:22:56:88:30:6d:37:b2:6f:c0:
f2:92:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:35 2026 by rpki-client