Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: vJygoy5IOWQo4wtNyyLGGVl3On0A5ls4AzeP0DwCz0E=
Subject key identifier: 89:5C:8D:D6:5D:F4:E8:DD:29:A4:8E:37:4A:26:54:AB:46:2F:F9:4E
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019CAC467E6BC1AC79F14C7EED7B6FB2D3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0B39
Signing time: Mon 02 Mar 2026 02:00:26 +0000
Manifest this update: Mon 02 Mar 2026 02:00:26 +0000
Manifest next update: Tue 03 Mar 2026 02:00:26 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: ucWvu8UtNVcpDT8S1Z/vROU/7lr3KEhTg9C6XUSi21w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:7e:6b:c1:ac:79:f1:4c:7e:ed:7b:6f:b2:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Mar 2 02:00:26 2026 GMT
Not After : Mar 3 02:00:26 2026 GMT
Subject: CN=895c8dd65df4e8dd29a48e374a2654ab462ff94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:0d:22:bc:ff:c8:e3:d6:09:4f:8a:93:cb:
ea:7b:e0:c9:ae:a8:14:00:12:e7:6d:2b:20:08:7e:
be:51:2e:6d:c1:1f:07:f4:bb:18:74:22:3b:3c:cf:
29:04:46:72:f1:99:af:d1:0c:af:c3:14:7e:ea:42:
f3:92:4a:a6:da:5f:e7:fe:b1:87:60:f2:10:b7:c9:
9e:89:68:1e:32:83:dd:fd:99:25:ca:b2:7b:c5:78:
68:7e:52:4d:fb:88:ed:8c:4a:1f:c3:a0:d6:a3:f4:
61:af:88:ac:a1:89:0a:56:c0:79:93:c7:9b:c0:58:
3e:e5:e9:ca:b1:c0:bc:8d:a5:45:cb:6a:60:08:cf:
84:29:a9:ff:f0:e9:8e:55:19:28:9b:5d:fc:cc:44:
de:cb:e2:c5:66:07:cd:23:96:76:55:5f:aa:68:1f:
57:38:a7:c3:6e:f9:f4:b6:66:02:84:4b:65:5b:ea:
e0:74:5e:4f:41:f5:b9:4b:64:14:94:54:42:ab:5b:
f9:4b:bd:10:fd:10:74:60:a8:0b:ab:9d:0d:32:a0:
69:0b:23:c6:47:15:2b:28:c4:5c:1b:05:20:e7:9a:
05:9a:e1:f2:0d:fc:b8:97:38:55:4a:5d:7e:02:ec:
eb:f6:7c:f7:4f:83:f3:df:82:a1:79:ef:a7:bf:98:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:8D:D6:5D:F4:E8:DD:29:A4:8E:37:4A:26:54:AB:46:2F:F9:4E
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:51:b6:7f:ea:bd:97:47:f8:90:88:ba:83:8e:86:9f:29:4c:
06:24:59:b9:99:f1:c4:08:50:83:f4:6b:8a:5d:d5:f0:27:63:
6c:b6:12:0c:4f:b2:ab:3b:1c:29:b5:91:3e:7f:f6:6b:d4:e3:
d0:33:7b:34:0f:6c:24:86:ec:21:6a:28:68:28:c8:98:80:7b:
59:e0:83:fc:7d:b1:e2:97:13:cb:38:73:0f:ea:a7:1b:98:b7:
5c:b6:56:16:f9:17:89:2d:84:94:58:fc:9d:dd:e8:a6:6a:46:
5b:0a:fc:9a:95:86:e0:58:bf:2c:d6:38:a3:10:08:53:47:02:
bb:6b:0f:22:20:90:89:17:5b:40:98:5e:3c:e6:06:8d:05:13:
c1:74:df:dc:de:5b:fe:20:dd:f4:05:02:74:5e:b4:bd:ba:1b:
1b:9f:f5:e3:ec:66:94:0f:04:e7:16:df:e7:0c:1d:ba:e8:54:
fb:1d:fd:4a:8b:ca:3d:f9:09:f4:db:f1:68:51:c1:f9:0e:81:
1c:e7:ba:45:38:03:c4:f3:d9:73:62:1f:83:bf:53:ac:d6:74:
20:94:d5:78:a9:0e:93:ba:42:d5:4b:17:6b:d5:ff:4c:bb:80:
f0:82:69:58:1a:2f:6f:89:ae:59:aa:32:9e:4a:16:d5:6f:13:
3a:f8:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:08 2026 by rpki-client