Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: b/T+BWGrMmndbs/gONJqQVSpFzeRvxf0+yBZQuqnwF0=
Subject key identifier: C6:08:4B:D6:03:74:56:BA:EA:58:5F:4E:EA:75:DE:47:0E:C7:34:6C
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 019CABA203569C338805B793C6F1538FAAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: KDMI8Qta3KayMKYJeZiyrxuE6HZ7b1e0tJyA8MKe5L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:56:9c:33:88:05:b7:93:c6:f1:53:8f:aa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=c6084bd6037456baea585f4eea75de470ec7346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:98:c9:de:c7:ac:4b:d2:56:11:0d:94:db:
82:d2:f7:b1:84:31:fd:7c:32:b2:6a:0a:36:ac:7e:
29:9e:4c:75:9e:08:b9:9f:04:55:24:84:23:b0:24:
e9:22:c8:74:d1:85:0d:da:fd:99:cb:f4:fe:26:ad:
c8:fa:48:d7:e7:03:4c:66:79:f6:21:de:62:97:2a:
dc:5c:eb:19:49:70:45:67:fe:ed:9b:f7:5e:4f:80:
da:fe:e1:07:00:1b:24:5b:be:57:d6:a4:76:f2:63:
d2:c8:5b:37:42:8f:11:b2:af:c6:c3:ea:2b:cb:ef:
f8:d3:92:45:12:82:f5:31:c1:0a:ff:4e:46:56:b8:
c9:40:13:9f:95:fe:16:96:de:78:48:fe:6b:f5:2b:
f7:7c:22:a9:e9:a3:37:6e:a2:7f:94:5d:39:52:0a:
f6:dc:ac:5a:c7:e6:e3:79:19:58:f8:8b:50:2f:a1:
bf:79:94:bf:87:97:6c:9b:b4:3d:03:cf:6c:15:8f:
86:89:69:f0:91:13:75:0d:1f:9b:aa:4b:7c:95:bb:
a8:3b:5e:70:e4:1e:57:db:81:e7:e3:aa:cb:bd:84:
fb:6a:23:68:be:d4:f5:5f:b2:e9:39:c5:e2:ba:2b:
f1:54:11:a5:85:4c:f0:58:9a:6c:73:b3:46:82:99:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:4B:D6:03:74:56:BA:EA:58:5F:4E:EA:75:DE:47:0E:C7:34:6C
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3d:08:e3:37:87:3d:6d:ff:8b:cf:f7:bd:59:3d:41:92:c1:
8e:28:14:b0:08:9b:7c:b7:7b:e2:db:67:b6:cc:37:80:67:3a:
b4:86:91:b9:11:e8:1c:65:a0:df:fa:c9:7b:31:2e:f1:05:89:
43:a7:d8:b2:74:10:4e:b0:6f:80:4e:c2:0d:53:48:bc:48:32:
35:3a:75:78:63:b0:39:b2:59:cc:c5:d6:1e:51:c1:d4:ca:69:
fd:53:ce:82:c3:ea:3a:3b:34:9d:30:ea:50:ef:31:c2:3b:18:
bb:0a:15:62:08:c3:3e:34:00:b2:41:ca:31:e9:3d:29:60:a2:
0a:9e:0b:6b:75:85:b8:e9:56:ad:ef:4f:2a:d4:0f:7c:0b:ee:
ce:39:9b:f4:70:07:b2:3a:3a:b4:77:d4:b5:04:60:18:fb:b5:
7b:cc:6d:95:8e:ae:5d:33:3c:fe:18:ab:4e:3c:6e:9c:84:b0:
3d:19:17:2b:49:99:4f:93:b9:ce:2a:5d:8f:75:1e:7b:68:22:
5f:d1:0c:1b:f3:3a:73:1a:de:40:9c:e9:54:eb:d0:2a:0e:84:
b1:76:33:29:ea:29:40:65:60:94:2c:ef:f5:ec:d0:44:13:8b:
f4:a0:d5:2d:c0:b3:e4:48:df:e2:18:29:7b:32:73:ec:94:1d:
5a:f9:8d:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogNWnDOIBbeTxvFTj6r5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi
OGQzZmUwHhcNMjYwMzAxMjMwMDQ3WhcNMjYwMzAyMjMwMDQ3WjAzMTEwLwYDVQQD
EyhjNjA4NGJkNjAzNzQ1NmJhZWE1ODVmNGVlYTc1ZGU0NzBlYzczNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY2Yyd7HrEvSVhENlNuC0vexhDH9
fDKyago2rH4pnkx1ngi5nwRVJIQjsCTpIsh00YUN2v2Zy/T+Jq3I+kjX5wNMZnn2
Id5ilyrcXOsZSXBFZ/7tm/deT4Da/uEHABskW75X1qR28mPSyFs3Qo8Rsq/Gw+or
y+/405JFEoL1McEK/05GVrjJQBOflf4Wlt54SP5r9Sv3fCKp6aM3bqJ/lF05Ugr2
3Kxax+bjeRlY+ItQL6G/eZS/h5dsm7Q9A89sFY+GiWnwkRN1DR+bqkt8lbuoO15w
5B5X24Hn46rLvYT7aiNovtT1X7LpOcXiuivxVBGlhUzwWJpsc7NGgpnEdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYIS9YDdFa66lhfTup13kcOxzRsMB8GA1UdIwQY
MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt
MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm
LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuD0I4zeH
PW3/i8/3vVk9QZLBjigUsAibfLd74ttntsw3gGc6tIaRuRHoHGWg3/rJezEu8QWJ
Q6fYsnQQTrBvgE7CDVNIvEgyNTp1eGOwObJZzMXWHlHB1Mpp/VPOgsPqOjs0nTDq
UO8xwjsYuwoVYgjDPjQAskHKMek9KWCiCp4La3WFuOlWre9PKtQPfAvuzjmb9HAH
sjo6tHfUtQRgGPu1e8xtlY6uXTM8/hirTjxunISwPRkXK0mZT5O5zipdj3Uee2gi
X9EMG/M6cxreQJzpVOvQKg6EsXYzKeopQGVglCzv9ezQRBOL9KDVLcCz5Ejf4hgp
ezJz7JQdWvmNcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:52 2026 by rpki-client