Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: 4VrRhfEedpOgDeKmPNRc3Cw+DhQsMjgteiNSLQc+pp0=
Subject key identifier: C1:83:AE:30:20:15:B7:DE:4B:55:86:66:B8:96:E0:7E:69:89:56:44
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019CAB6BA4BB510882A61075BADDB2FE3860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: DjXpEa2HnZFPOfHeHFhwP5HloWzWVeEEx86uWkVmSyU=)
2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a4:bb:51:08:82:a6:10:75:ba:dd:b2:fe:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=c183ae302015b7de4b558666b896e07e69895644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:e7:3e:2d:97:23:38:38:81:11:a4:0f:73:
3a:99:7f:f6:67:01:9b:7e:c4:21:7a:34:65:c5:d7:
e6:07:5e:fc:d7:5d:bd:46:ad:b0:50:cf:c9:64:1a:
ef:15:27:b5:dd:7b:fe:34:43:48:46:92:9a:0b:a1:
07:ac:7e:54:53:5f:db:2f:f9:af:9a:fb:27:a0:7a:
f3:60:36:fc:af:58:22:27:d3:13:77:20:d0:91:68:
d4:df:ee:dc:3f:83:32:1a:16:ac:9f:7c:73:ac:61:
12:ed:b4:13:ce:81:e3:6d:1e:8b:67:c3:a5:20:c2:
02:a7:25:8e:6f:67:37:50:38:67:b9:3c:c9:cd:36:
24:75:8e:f7:8b:16:36:11:d1:b4:63:ea:06:ec:09:
19:1e:9c:cf:5a:fc:59:5d:26:98:66:34:61:df:0e:
ef:9a:94:55:f4:e6:9e:9a:c3:b0:76:5e:a2:23:0b:
35:96:ff:98:09:9f:3b:26:66:ce:a3:8f:f1:87:32:
2f:1a:26:0e:dc:ce:67:e2:b3:8d:b2:20:00:93:7e:
9b:08:aa:d1:54:9c:4d:ef:c3:e2:58:f8:30:cf:dd:
b0:24:c2:df:ee:1a:e2:6c:c4:2d:e8:18:5a:56:88:
c9:50:38:19:b9:d3:4f:6c:b7:2b:be:bb:d1:4b:29:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:AE:30:20:15:B7:DE:4B:55:86:66:B8:96:E0:7E:69:89:56:44
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:d7:8a:8c:0d:4b:b3:b7:db:3e:2b:70:6c:cd:6f:18:85:
6e:75:c9:7a:e8:cc:18:36:d0:fd:93:7b:d9:41:67:1b:8a:d5:
39:ef:a4:e8:9f:9d:4a:21:fd:66:fd:70:70:de:15:41:17:83:
b6:0e:ce:7a:ec:3e:ca:9c:6d:cb:dd:04:59:e0:48:d4:9f:0e:
d1:32:63:a6:c6:e2:c9:ff:ac:95:31:06:fa:8e:e5:0e:cc:85:
4f:37:b0:bf:6b:40:7f:56:b6:35:69:0e:a6:44:b6:68:7f:d1:
c7:08:0e:06:bd:da:fd:60:3d:74:81:fb:48:75:18:75:ab:31:
9a:93:f8:25:a9:7d:9f:6a:7a:0e:dc:74:d0:81:db:cb:f5:8f:
16:a1:00:cd:56:3d:fc:0f:50:8a:3d:38:0b:87:63:e8:e3:6f:
6b:60:26:c9:6f:07:81:5a:14:ed:a2:48:64:ec:82:46:27:5b:
f3:d2:ed:60:bd:3f:71:30:38:cf:33:15:77:a4:f9:12:28:1b:
ad:31:1b:b4:97:c6:e1:39:a2:fc:d2:c5:35:33:27:33:05:eb:
02:71:9e:f8:c8:9a:bf:8c:29:d3:14:6a:02:a2:48:bb:1b:80:
3a:1a:d7:5d:e4:17:74:f5:6a:2d:0c:82:2e:5b:ef:f4:ef:73:
49:c3:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:34 2026 by rpki-client