Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: g0+beLqwt9WDfdm+yfOB0oahkazIAU5Qo3XPs83pPFA=
Subject key identifier: 45:58:2E:2F:06:BB:7A:D8:D6:99:E3:12:D3:CC:BE:20:98:B0:97:A9
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 019CAAFD334BE6DD148DD92790D221707FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 14F8
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: 0jgMYZjJPpYlPypu6uB5NOU5OhHYj9JJIHhdUKD9jrw=)
2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:33:4b:e6:dd:14:8d:d9:27:90:d2:21:70:7f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=45582e2f06bb7ad8d699e312d3ccbe2098b097a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:af:00:d8:04:65:5f:43:e6:65:e4:28:eb:
8b:8d:47:4f:58:10:7b:99:31:24:6a:3c:08:9e:68:
c3:e5:62:72:2c:93:29:a5:f2:9a:e0:09:03:fb:55:
f7:a3:8a:b8:e0:f5:0d:f9:2e:55:cb:3a:02:a3:86:
6f:94:56:9d:d1:2c:7e:30:ac:ba:6e:6b:9d:74:84:
89:99:06:51:bc:85:a1:59:b1:81:6c:87:08:49:30:
d2:55:12:1d:be:c7:d8:d0:ea:65:cd:fa:2f:f1:97:
ed:49:63:cb:d7:f2:8d:81:0e:d9:32:56:38:59:ed:
62:51:f3:2e:98:76:0c:ce:c3:be:c5:52:23:69:ba:
3a:0b:a1:df:02:24:6e:b5:03:e0:93:18:c2:86:85:
32:c7:59:a9:ab:10:b0:4e:71:5b:bc:ef:7e:65:ca:
fe:f1:fd:f2:37:00:56:c7:ac:6a:70:62:49:a6:af:
05:97:0c:38:4d:e8:2e:ec:20:a2:47:e9:a3:80:ac:
4c:a4:29:34:fa:74:a2:88:0f:c5:a6:54:93:8d:c8:
d2:14:7c:99:db:ef:6c:f3:9b:80:b6:b4:dd:65:a0:
8b:33:0f:9c:38:22:50:97:e1:a3:7e:d0:c8:bb:60:
bd:a4:f0:ca:73:cc:d4:e8:97:f7:b5:52:c5:ea:8e:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:2E:2F:06:BB:7A:D8:D6:99:E3:12:D3:CC:BE:20:98:B0:97:A9
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b1:1f:8a:1a:ce:0f:ad:a1:72:bb:91:74:c7:04:f6:cf:54:
7b:33:fb:13:05:2c:a3:f3:d2:5e:5a:61:20:bf:93:86:46:ba:
43:82:a8:1e:c8:58:89:46:ed:d2:c6:12:45:d1:e2:a9:ed:4a:
e6:f7:20:4a:89:85:51:f1:3e:dc:28:74:8c:88:71:7e:98:1a:
e2:68:a3:ab:23:be:c7:36:5b:fc:2b:c5:76:ad:50:2f:91:f0:
10:37:b5:dd:e9:c8:02:c4:63:67:1c:2e:53:1a:ec:fe:99:1b:
a8:50:11:26:d2:6c:71:ac:3c:8a:c9:64:f8:c6:27:3f:1a:f7:
1b:b6:68:35:bd:9f:d5:b5:e3:0e:0b:08:e2:7b:4c:7e:67:c7:
a5:ba:de:f7:e2:f6:f9:6a:a6:ea:4d:a2:0f:92:25:17:80:8a:
4d:bf:09:68:32:b7:ea:78:5e:87:83:9b:60:33:8c:15:53:41:
7f:df:30:cb:e3:c2:85:62:57:7b:cb:18:a7:02:7b:51:0a:a6:
32:6a:0c:49:c1:7a:ae:86:3a:b7:6d:ae:1d:a5:53:1a:a8:18:
db:11:9e:61:61:48:4f:1b:e9:da:99:cc:fa:ff:d1:e3:85:56:
aa:c8:43:94:eb:5e:53:ce:d9:51:27:58:d7:07:6a:5a:b5:54:
51:3a:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:47 2026 by rpki-client