Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: clrZugH35ItYfHp1+RZyU42qyFfi4dViE7sxUKJcucU=
Subject key identifier: 65:73:4B:8E:2D:BA:BD:E8:11:2B:D7:9E:48:2C:98:2F:6F:61:06:40
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019CABA1DCEDED1FA60135473523CDB610BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1731
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: t8qt9NpB/5loCaTA9eEjS3UCpW5Q9ZE0oXfwF6RksTE=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:dc:ed:ed:1f:a6:01:35:47:35:23:cd:b6:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=65734b8e2dbabde8112bd79e482c982f6f610640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:03:a3:f2:fc:28:2c:df:b3:93:bd:0a:d8:
ae:15:2f:02:b4:e7:e1:17:1d:96:32:a2:36:7d:f0:
d5:a4:3c:21:3f:03:63:f4:c0:9a:54:80:eb:a5:3d:
e1:6d:f7:46:38:48:e1:cc:f4:bb:52:35:71:67:a1:
fc:b3:d2:f5:d1:08:78:0f:ef:ce:b9:6f:f2:88:9f:
ec:2e:6c:7c:2d:d9:f1:bd:0c:35:05:82:93:de:f5:
bc:69:ec:15:b2:e7:d6:e7:e4:19:e1:10:d0:65:a3:
c1:b2:55:28:db:47:db:68:28:35:86:2e:43:f2:d5:
ec:90:59:4d:21:f5:0c:51:db:12:25:6c:11:9c:bb:
38:24:2c:2c:2f:1b:09:cb:1f:16:29:ca:95:27:70:
55:e8:13:57:8b:b4:3f:86:29:be:34:06:74:69:b1:
ea:d5:6e:27:40:87:15:47:fe:e2:94:64:a9:86:14:
d0:7d:fd:05:f5:a2:52:a9:17:3b:5a:40:9e:86:7a:
71:bb:d6:f2:24:60:1c:38:f8:06:e0:fd:25:f7:13:
06:68:c5:23:91:a4:3c:7c:af:38:01:c4:24:9b:4b:
38:6d:30:27:60:da:bf:c4:f4:17:a0:48:c6:d0:21:
e1:16:16:bd:98:97:b0:d0:08:e9:5b:ae:5a:90:28:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:4B:8E:2D:BA:BD:E8:11:2B:D7:9E:48:2C:98:2F:6F:61:06:40
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:86:c1:a0:23:69:15:16:14:6f:cf:49:46:55:b0:c2:dd:09:
97:f9:17:f4:06:6a:60:70:ab:cb:13:ef:0a:6b:40:30:7b:1c:
d0:44:21:ff:c0:c1:2f:c8:0c:b6:29:65:ce:0f:45:a0:19:51:
1e:4c:de:cd:96:7f:97:c7:89:e5:52:14:06:51:6a:a0:f7:c4:
f0:ac:cb:f3:2d:af:47:fc:d8:5b:b4:8d:61:16:53:48:66:0d:
6f:79:25:6d:f8:75:cc:fa:b5:93:e4:46:be:f8:57:f0:b7:6e:
a0:19:6c:f8:47:d4:96:4d:92:29:0e:97:e7:f1:44:36:75:27:
25:7a:86:42:a6:c8:e5:42:12:59:76:bb:53:be:89:51:fd:46:
f0:2b:60:30:8c:33:8b:b1:7d:28:53:80:e4:ba:a9:9a:2b:ab:
e4:35:38:4b:12:c6:73:b3:82:ad:af:ab:7d:95:79:8a:1b:60:
40:e9:c6:f2:84:14:1e:29:db:23:48:63:29:f0:b8:71:9b:97:
da:b7:ab:72:8e:26:50:94:03:6c:12:e8:f2:dc:03:1c:bd:a0:
37:94:9e:32:96:48:8f:fc:45:80:8b:1c:4e:42:d0:b5:0d:1a:
9a:d4:90:20:75:34:30:f1:08:62:2c:83:0f:b4:5e:60:57:e7:
94:02:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:10 2026 by rpki-client