Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: 97SVja/239C1H9zWvLLdLaLqzItCMSWKyn3T6JQvyJA=
Subject key identifier: 73:9B:D6:C8:F4:87:6D:39:F6:3F:A6:F0:83:DE:28:49:48:3C:33:32
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 019CACEBBF831BFF293470BA3E6CFE2592EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 0A83
Signing time: Mon 02 Mar 2026 05:00:56 +0000
Manifest this update: Mon 02 Mar 2026 05:00:56 +0000
Manifest next update: Tue 03 Mar 2026 05:00:56 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: PFEVX4sHP++IWPSPzeJ0LdkN2ruxyOd7cgSI8+GtLkk=)
2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:bf:83:1b:ff:29:34:70:ba:3e:6c:fe:25:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Mar 2 05:00:56 2026 GMT
Not After : Mar 3 05:00:56 2026 GMT
Subject: CN=739bd6c8f4876d39f63fa6f083de2849483c3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:b2:09:cc:5a:d6:f6:da:5a:0c:78:e9:b6:
ac:7c:5a:08:13:56:65:46:06:69:5e:68:30:44:4c:
f0:a4:1f:ce:fb:7a:a9:7a:95:93:d3:0d:63:95:97:
88:ca:58:0a:c7:d5:76:fe:77:fa:24:18:30:3f:79:
ce:3b:31:e4:23:fd:c5:d2:26:ec:74:a8:4c:a6:9f:
f0:c3:ae:63:1f:54:5e:1f:cc:85:69:d8:8d:a6:23:
3c:12:07:cd:4b:02:ff:64:eb:79:3c:08:7f:e0:33:
d0:0c:86:15:0d:b3:7f:51:5c:10:2d:3c:67:9c:71:
c6:77:ea:70:af:2b:21:86:b7:39:36:f8:71:b8:c7:
88:22:c4:e0:61:b2:33:0c:68:bb:87:db:64:cd:e9:
a8:69:cb:63:55:1a:fc:2c:36:d3:9a:ba:b0:95:b1:
8f:2c:67:34:21:e2:38:ab:b8:0e:6b:95:c1:1f:2e:
fb:37:2e:da:e5:e1:56:e2:14:29:b3:2f:d6:89:85:
f4:28:0e:4a:89:cf:a5:1a:f5:46:ba:38:99:ac:f6:
af:58:c8:91:8e:74:0b:c5:ea:fd:e3:2c:50:7c:d9:
02:32:4b:7d:c3:1b:d5:28:62:ad:83:0d:bb:4e:3a:
2f:a5:cc:0d:19:0b:7f:e0:5a:a4:d4:67:95:ee:28:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:D6:C8:F4:87:6D:39:F6:3F:A6:F0:83:DE:28:49:48:3C:33:32
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:9d:57:c3:2b:86:17:52:53:0c:37:51:f1:ea:95:c1:bb:
bd:b9:83:1a:3f:94:d7:47:4d:e0:c9:ad:3e:05:26:b5:5a:8a:
b5:a9:16:e9:9a:35:30:e8:f1:14:5a:f8:13:e8:b6:ba:06:77:
62:a7:12:ec:e8:9a:f0:d7:cd:e6:e3:12:49:fa:55:df:52:25:
a2:43:1c:6f:22:5c:53:6d:fd:43:27:b4:0a:c4:58:67:27:6e:
70:2a:df:5b:d4:60:98:b4:3a:c8:d3:b1:67:fa:3a:da:af:63:
62:f8:f0:ab:0e:fa:87:aa:cc:05:7f:33:27:b2:08:f9:03:a2:
e1:a5:a9:89:84:c1:e0:80:22:aa:36:05:2d:44:fa:10:23:77:
c4:2d:d0:a4:12:21:2d:5c:64:f9:78:80:89:d9:04:fe:b6:40:
f2:50:d3:54:35:cd:da:8f:5c:36:b3:6d:a4:2a:0b:64:fb:f1:
d5:95:17:d7:ce:38:11:cb:02:30:3d:03:4b:d2:6d:d3:cc:ec:
17:e5:95:8d:4f:99:92:da:52:4b:3f:e6:25:2a:d5:dd:28:4f:
3b:30:e0:84:d6:58:5a:31:19:a2:e7:4a:dd:67:04:e1:01:66:
df:d3:cb:f4:e9:ab:54:a1:57:37:1f:72:39:b6:43:2e:f9:68:
4a:6c:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:40 2026 by rpki-client