Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File: iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier: KNgGpVBgXm7L4f3CDUnhfjK2tQ+Ah3GZdIfVy4SFTjY=
Subject key identifier: 2F:E2:23:F8:1F:1F:C1:0C:15:0F:29:7E:CB:BF:6D:8F:B3:AC:55:B7
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 019CAC1042BFEA46AD76684BE72E6C452304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: AjtEoktOSuBDBX_1V0FjXtFV21E.roa (hash: FD8hrHR+KRU8ianiGjkPHddLvgxoDCtLslx9ho1BrsI=)
2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: M2KSxqQhVXgiM4ByypbgW+dIGaZlDZn9KSf3K/BJqnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:42:bf:ea:46:ad:76:68:4b:e7:2e:6c:45:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=2fe223f81f1fc10c150f297ecbbf6d8fb3ac55b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:c1:0d:26:40:0f:12:59:9a:9e:6b:5c:ea:
9b:fe:7f:b7:32:0a:62:07:ba:ac:84:a6:ed:2b:d9:
72:87:31:b6:8a:81:1a:12:da:fa:a9:88:ed:d0:e3:
10:2a:38:8a:75:d8:f0:43:1a:92:27:7e:31:77:12:
3a:a8:26:fd:60:dc:8e:26:57:b6:79:70:34:f5:72:
ea:ef:f2:b0:ff:9f:17:b7:d4:33:34:ce:69:a9:ef:
b8:44:ff:2a:9c:06:6f:e5:a1:f4:13:d2:6f:3d:84:
5e:ba:4a:c4:a1:fd:dd:04:67:1b:1c:a4:a8:20:c8:
96:45:d1:d2:fa:c3:78:06:8b:03:a2:a1:56:1e:49:
96:1b:e7:1d:81:75:60:43:cb:89:35:df:1f:5c:d2:
7c:c7:9c:ad:27:be:46:9b:8d:42:19:20:2d:4b:06:
13:89:0e:58:4b:27:93:73:a7:3b:dd:11:69:e3:4d:
80:99:a8:6b:34:ac:ea:06:da:7b:a0:f7:11:1f:65:
cd:9c:0b:2f:75:4b:cc:05:79:f5:7b:9c:d7:5f:e4:
95:cb:ee:8b:60:e9:2f:a2:28:f9:18:5f:f3:ea:88:
6a:fe:61:89:69:28:6f:2e:61:e3:5c:9c:38:fa:be:
23:95:9e:f4:87:48:82:fa:83:f0:9c:b2:27:80:9f:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:23:F8:1F:1F:C1:0C:15:0F:29:7E:CB:BF:6D:8F:B3:AC:55:B7
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9a:ce:5d:9a:1a:ea:04:5e:c9:9a:46:26:7a:b1:71:ea:f6:
70:14:2f:82:ab:4f:74:3a:d2:62:f8:71:05:3e:29:52:a1:f6:
ef:6e:fa:99:60:08:32:b3:71:f6:ca:f6:d9:13:db:55:24:c2:
eb:2b:a2:da:9b:c1:5a:a3:58:10:50:bf:b2:2a:df:b6:39:7c:
73:4d:c6:be:92:6c:ef:34:0a:f3:ff:c1:40:e1:40:c9:7d:2c:
8b:75:86:9d:16:bd:34:c4:fc:8e:06:df:be:84:78:ca:dc:af:
bb:5f:d4:5d:dc:58:5f:a7:95:73:bd:5b:53:c4:9f:6c:8c:71:
63:96:b2:c9:05:04:10:6d:33:4f:40:67:8f:b0:1d:c8:97:68:
f8:2a:ea:c3:cf:02:64:87:26:06:ef:46:32:aa:1e:7f:16:d5:
c0:60:0b:df:77:a1:ff:6c:2f:99:ad:f7:81:eb:43:64:39:63:
2c:f6:5a:87:d0:cc:70:9d:ec:b6:64:68:7e:74:ff:6e:86:67:
c1:a6:7c:0b:ee:90:13:64:c8:a6:62:7f:1d:f8:4f:aa:bf:7f:
9d:50:09:db:bd:1c:ac:a9:3d:42:c4:7a:d7:92:60:b6:d7:cd:
89:9f:d5:7a:de:17:d3:50:05:96:1a:15:46:db:cc:94:05:cb:
e6:03:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:22 2026 by rpki-client