Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File: p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier: QCTtm7KewkYYGQjtEhEde7QKrghPZp7xgc1eq7oiO3M=
Subject key identifier: 42:58:CE:20:78:8A:FE:C5:66:1C:71:18:6A:EF:0E:6B:5A:F9:7E:D3
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial: 019CAA8F9A254019EBF54917693F3E6B67E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number: 12C8
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: L5BGhmd0saN8xecQNe9wiYjTs78.roa (hash: SbX44mvpZzphunBDxZ1gsi9c+uRL89kA1JQ3kMK3eJg=)
2: cgfGejDrVLaUqLSIzCYonqY6EL8.roa (hash: Mq/JUvCV9dSTx3b4h/eSywAPXcHk8+Plfex5qUmVasE=)
3: jhWbeo3zbogtegwkjldlY2v1Cmo.roa (hash: jMRPW06nsrBs6eYuP8nzo2cpYTotCTqzqowlQklFSC0=)
4: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: mYFXwZV9KljIKQGaTUfJ4C71ztyRGVIQCeYx7uma7UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9a:25:40:19:eb:f5:49:17:69:3f:3e:6b:67:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=4258ce20788afec5661c71186aef0e6b5af97ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:d7:8a:40:b7:ee:fa:12:59:a6:80:44:8c:
14:d3:8b:2c:a4:fa:7a:f6:30:51:88:b2:cd:94:70:
6b:ff:d8:9a:d5:d9:aa:54:08:f9:65:cd:b8:cf:e7:
4b:ed:7d:9e:f8:ee:24:3f:36:21:75:3c:cc:2c:60:
81:44:70:ed:60:39:19:33:50:c6:20:1a:2d:f7:ba:
02:e6:65:64:50:25:52:e5:dc:8e:08:2c:ed:3e:17:
b5:71:b2:50:87:a4:0a:1f:48:da:28:52:9f:77:d2:
da:2f:8e:b0:90:87:09:cb:da:7c:20:72:14:4c:a0:
a5:cb:6d:3a:cb:65:e4:5d:06:47:24:75:af:43:5f:
ac:ed:09:7c:cd:c3:07:ac:68:b2:76:21:3d:fc:f8:
f2:f9:b9:c8:7e:6d:ea:de:0d:0d:f0:aa:39:77:2d:
25:1d:80:09:d8:7c:d3:37:4c:4b:91:a3:d6:62:b7:
ea:ea:c8:a5:52:c5:87:c7:5a:dc:f9:03:c9:17:61:
15:79:1b:dd:22:54:7f:c9:6c:51:2e:2d:9e:c0:a7:
00:70:8a:86:1c:ed:e5:d9:45:28:99:10:cc:57:2c:
0b:73:5b:ab:e0:3c:5a:19:2d:ca:3f:b2:6b:23:4b:
01:11:de:09:04:95:93:91:a6:b0:07:09:8a:b4:3d:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:CE:20:78:8A:FE:C5:66:1C:71:18:6A:EF:0E:6B:5A:F9:7E:D3
X509v3 Authority Key Identifier:
keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2d:03:cc:89:e8:47:35:56:5b:c6:05:f8:ba:1c:f5:a3:e2:
4e:15:4d:59:d6:be:d3:89:f6:8f:61:51:92:3e:41:a0:5d:c0:
dd:bf:4c:f3:9b:2c:d2:92:3f:a1:97:e2:8d:26:10:88:f0:a1:
da:24:49:2d:36:eb:84:80:d2:b7:e7:b8:17:b6:c8:39:51:39:
7c:3f:86:50:4c:c1:54:42:2c:da:11:16:d8:d1:c0:ef:bd:1a:
c3:c1:94:ae:84:26:27:2d:95:b6:1d:86:0a:fb:fc:d4:93:1a:
35:16:df:bb:a3:80:92:db:3a:34:b6:45:88:28:aa:40:9d:c2:
1b:39:23:42:39:df:be:79:8a:f7:d1:47:91:e5:b9:0c:95:5a:
ae:5e:10:3a:16:9c:bf:33:aa:71:44:ff:2b:d0:a7:8d:1b:9a:
83:8e:33:89:fc:55:31:ef:c4:98:32:e2:ee:b9:00:b0:22:0f:
8d:fa:61:6c:ff:84:3b:1f:cb:ad:65:6d:a2:cc:77:66:97:90:
1f:e7:61:4b:82:71:43:68:ea:b9:01:16:83:83:be:61:d0:de:
e5:fc:be:32:2a:69:12:cf:3a:8d:7d:1a:37:f4:1b:1e:d5:60:
e5:5e:29:e0:70:9a:96:16:e2:e4:36:db:4e:a8:e3:e0:1a:d8:
48:3f:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:53 2026 by rpki-client