Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: SOFy8Dha3bMKuLFu/5jMXqJ82irftRlmoOGVUXM1bx0=
Subject key identifier: 9E:BC:EF:88:87:44:FA:BF:CC:3B:EF:44:A8:06:C4:00:22:26:24:3A
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019CAAFD49C7F2A99A25DF4434416B534223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: rmYBxkqmAgTCMRILdo+QDPG2rF2iIn6zg0T9vzXSnEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:49:c7:f2:a9:9a:25:df:44:34:41:6b:53:42:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=9ebcef888744fabfcc3bef44a806c4002226243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:7a:c5:22:a4:58:9e:9b:12:73:4c:b6:1e:
db:d9:ef:d3:64:93:49:42:5e:31:9d:a9:8a:14:80:
d7:f0:5a:ab:4d:50:bd:2a:d7:14:bb:7b:c4:6c:bd:
a8:e5:fc:1a:5c:09:49:d4:1d:0b:38:ba:76:05:f8:
64:5c:f1:f4:92:d1:94:98:b6:6e:0a:fe:94:13:37:
6d:6d:7a:8a:b6:ac:8e:07:4e:0c:2b:dc:0a:f5:47:
d5:1f:6a:e4:3d:04:df:23:1d:0d:cf:22:cb:8d:25:
d3:69:5f:cf:7e:67:6f:81:e3:46:2e:e2:fa:3a:1c:
08:65:0e:8b:92:fb:5b:17:5b:03:dc:12:51:c2:de:
c1:c7:ea:ea:4a:c3:cf:f8:48:ed:e3:5f:52:49:56:
78:e2:16:45:c3:ab:03:ab:3a:10:04:08:9c:74:63:
1c:e2:14:06:14:70:8c:b2:89:6c:4a:73:fd:ca:47:
ff:7c:12:26:f5:48:0f:9c:2d:18:cc:b5:fc:b4:d3:
4f:10:3f:85:9d:d0:21:53:3b:7f:75:0c:3d:bd:36:
4c:3a:cc:68:a1:ca:e9:39:6a:27:99:b1:cb:a7:30:
d7:5d:09:d7:74:18:76:2a:ec:64:9d:f6:89:79:3d:
70:bd:f8:01:8e:5b:4c:fd:9d:f0:bb:79:cb:28:71:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:EF:88:87:44:FA:BF:CC:3B:EF:44:A8:06:C4:00:22:26:24:3A
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:51:17:b0:9c:bb:b5:87:39:70:ff:24:f0:22:bd:04:af:61:
20:22:c7:18:30:35:28:28:4e:e7:de:ec:2b:4a:bb:2e:8b:4b:
9c:19:c7:37:14:f1:7b:e3:ec:d9:49:bb:5c:75:eb:c6:ac:17:
66:bc:9e:20:85:67:f6:d7:f4:e2:d6:f1:bf:a5:95:b6:c3:0d:
70:7d:fb:dd:85:97:95:4a:1c:16:d7:f0:41:f8:a7:d6:f7:7f:
54:74:b2:11:84:ac:20:7e:be:5d:5a:17:af:41:f7:3a:3a:1d:
58:68:c6:16:ce:78:ee:92:a1:2a:3f:1b:8f:e5:9b:d1:9d:ac:
5b:23:85:81:4c:59:5e:c7:32:2b:3c:76:74:a9:be:07:8d:58:
63:9a:28:46:57:32:d4:cd:8e:93:fc:03:a1:a7:33:85:72:d5:
eb:61:99:6a:8c:b9:63:ee:10:5e:4a:b2:2d:ee:cf:48:2c:66:
62:59:95:45:cf:32:4d:0d:c4:9c:ee:ce:35:46:3d:ba:a5:ac:
48:61:0e:8c:02:41:51:90:17:12:5a:ad:b2:80:d7:7c:22:df:
48:aa:bf:07:00:51:18:fa:5b:9e:42:4a:bd:f8:34:0e:8a:aa:
34:97:44:71:f2:b0:33:8b:46:5e:75:72:5d:70:08:5c:2d:42:
6c:ae:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:25 2026 by rpki-client