Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: xdkCAmsEUD7++WqcN9sgdwaKydCVOwQV9Gr8mQFEJZM=
Subject key identifier: 8D:9C:96:E0:A8:BB:CF:60:4F:B0:A8:BE:52:09:2F:8A:F2:E4:6A:24
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 019CAA58C0EB38B1E92612B046597D8A0FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: lYsVe4PcK9q48DZ6sb1HHfa+Khpe2HNax4+3CIzAfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c0:eb:38:b1:e9:26:12:b0:46:59:7d:8a:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=8d9c96e0a8bbcf604fb0a8be52092f8af2e46a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:58:a3:a3:7f:f9:03:95:25:af:1b:ac:25:
92:57:49:e8:27:2e:4b:9f:bf:af:b9:81:02:a4:07:
8d:14:f0:60:c7:c8:e9:b1:db:3e:af:0d:52:2f:d6:
9d:d1:9d:52:d9:e0:8c:00:02:97:ad:fb:06:cb:40:
ff:28:f5:e8:c7:c8:5f:ab:4a:87:c1:f2:5e:b9:46:
22:07:22:ea:27:12:6c:43:8c:de:d1:1c:99:42:6f:
42:0a:e8:9a:b1:f6:47:5d:57:3e:25:d3:5e:48:59:
80:5b:85:97:69:63:1e:29:13:71:d2:05:2f:a8:57:
a3:1c:a4:ad:68:64:99:2e:14:ed:c6:04:f1:77:95:
18:71:ce:f6:45:16:c7:c6:d7:c1:aa:b1:8a:0b:b7:
1a:98:45:0c:c0:c4:68:91:80:14:38:60:ff:11:09:
66:a4:58:36:95:ec:db:23:e2:b3:c7:61:17:59:93:
87:70:9e:cf:f0:34:ae:19:18:07:80:4a:a5:4c:d7:
f7:0e:ac:fc:7b:d4:31:ab:22:b7:69:08:20:e5:3c:
94:7a:37:a7:26:a7:74:8c:34:73:38:df:84:2e:36:
fc:5d:4e:4a:70:ca:e7:9f:ce:22:b6:66:dc:7c:d5:
bd:aa:78:b7:5e:33:35:2f:23:b7:e3:0e:54:f6:87:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:96:E0:A8:BB:CF:60:4F:B0:A8:BE:52:09:2F:8A:F2:E4:6A:24
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:2c:d3:6e:fa:e1:e5:6b:5e:18:5f:61:a9:64:d2:69:67:
8d:6e:9c:8d:d5:fd:1c:7f:a7:44:c3:4c:19:47:63:41:96:9a:
df:cf:75:8d:e8:53:eb:18:46:29:29:ca:7e:23:51:f1:81:92:
59:b4:c2:7d:7f:ec:8d:cb:24:f0:76:aa:fd:f7:8e:b9:bb:66:
81:a5:37:94:a0:b3:4b:0d:8e:3d:67:0a:39:c7:7a:13:f1:18:
0c:5d:f5:14:ce:d9:0f:18:b3:95:42:1f:75:07:8c:68:80:14:
06:f8:7c:ce:99:aa:5e:72:ad:15:ba:b3:25:c2:8b:f1:0c:2e:
32:61:04:66:b0:7f:2b:20:38:8c:c1:94:8f:83:48:ec:dd:3a:
22:03:73:d8:29:1c:62:47:04:8d:63:b8:44:f2:10:29:c6:b7:
50:17:29:df:cf:f4:50:53:34:f0:4a:6c:e2:a7:34:9a:b4:f9:
79:12:73:3f:86:b6:53:1d:36:fd:c9:88:4a:f3:12:76:71:cd:
4e:9a:88:ec:11:73:d5:7a:ca:cc:88:04:29:9f:df:6e:03:c6:
98:96:f4:65:13:51:45:8b:76:07:45:38:0a:77:54:ef:74:95:
95:1f:a4:3c:2c:e6:ce:85:09:0e:de:34:b3:c0:47:0d:59:b8:
bc:cc:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client