Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: soMa3VjURfv9ynuAq41GznK/wSjbKeLmiXvNSHe6R90=
Subject key identifier: 47:30:1C:BC:F9:B5:65:92:D7:7A:AE:28:3B:D2:5E:0E:14:C8:6E:0C
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019CAE6C839D5084A54A904F92DE1F5F2CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 12:01:12 +0000
Manifest this update: Mon 02 Mar 2026 12:01:12 +0000
Manifest next update: Tue 03 Mar 2026 12:01:12 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: u2lzKWgptKpyQ2sZ1ma86d5z/+M1iwFbN6mJ9ZhhCao=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:83:9d:50:84:a5:4a:90:4f:92:de:1f:5f:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Mar 2 12:01:12 2026 GMT
Not After : Mar 3 12:01:12 2026 GMT
Subject: CN=47301cbcf9b56592d77aae283bd25e0e14c86e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:1d:47:84:cd:52:a0:5f:d9:62:fb:70:33:
5b:39:8a:6b:8b:0e:06:26:6e:5d:a7:51:5c:4d:66:
51:79:6d:3c:13:e0:b4:86:0b:cc:bd:c9:87:a2:d6:
54:73:5d:95:ed:d0:5d:6e:2b:23:70:cc:74:3b:4c:
29:23:28:bf:a3:84:c5:1b:29:b8:9f:0b:fb:b1:25:
e6:3a:e0:ff:7d:36:07:35:60:7c:24:dd:c8:b1:27:
3c:0c:ba:69:fb:27:25:e9:b3:32:69:a2:94:bf:cf:
0f:6c:17:b0:0b:37:00:d9:c0:a6:90:b1:1d:21:22:
76:78:e0:a1:d1:a8:f8:1e:e8:6c:c1:8d:94:4f:b3:
11:36:43:04:7e:4b:ca:9f:ce:8b:04:c4:9d:7f:14:
d2:21:8e:55:3b:a4:de:23:9f:4e:20:23:b3:28:a2:
8d:46:c5:40:2b:41:5c:6e:d3:c0:11:1e:30:08:d7:
1f:ff:9f:a5:52:ee:3f:98:43:0a:c1:bd:54:8c:2f:
5b:6b:d9:c8:af:f4:6c:76:5a:13:a7:bd:85:1b:d2:
4b:fe:d7:c4:a2:78:b7:61:4b:43:e0:cd:b4:a3:6c:
e4:77:78:04:de:ab:15:ae:43:cf:c1:74:5c:ea:a6:
a8:e6:b7:19:60:a8:c9:ee:a6:62:b3:b6:3a:c3:e3:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:1C:BC:F9:B5:65:92:D7:7A:AE:28:3B:D2:5E:0E:14:C8:6E:0C
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:ab:76:19:c6:d4:a6:4a:d6:50:88:10:e3:43:58:c3:6a:
c6:25:64:4b:05:22:b3:15:33:a1:83:cd:99:89:52:fb:96:e7:
cd:c5:8f:48:be:8d:bd:a6:11:8f:46:47:66:ea:13:c9:9c:78:
b6:d8:1d:9a:45:fc:df:72:14:e8:73:bd:75:a6:3f:ef:9c:03:
85:e0:7f:cf:b2:0f:26:46:87:10:b7:9e:49:d9:0a:66:e8:9e:
a1:1a:84:cf:5d:ff:53:61:30:ee:b5:d9:f2:85:78:09:00:a0:
23:c9:03:9e:ee:06:7a:f3:67:f3:cf:d7:ff:ae:de:85:5f:08:
6f:4b:d6:d4:e1:72:b9:7d:96:65:ee:4b:12:cc:f7:a0:5a:23:
77:91:3c:f8:c0:11:eb:43:64:85:a7:45:3e:ce:3c:f3:72:80:
fd:42:64:e3:9c:f6:8b:f4:8e:a2:ab:44:86:c9:31:89:3b:4c:
fc:62:91:5e:99:fb:95:94:17:95:65:07:b0:17:da:9c:cc:64:
b4:9e:34:50:46:b6:93:87:e2:c0:53:cc:41:dd:96:12:f5:36:
7d:be:5e:4b:c5:35:6b:90:03:b6:cf:8d:f4:e4:b2:4e:91:05:
5d:ef:89:b7:00:e4:b1:4f:a9:f2:8e:db:11:a3:89:4f:aa:13:
84:7b:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:32 2026 by rpki-client