Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: 7Wzh6bpZUfyjxdU69cMFxoHTtKtafxzUJb6BmdCcZ1Q=
Subject key identifier: 7F:C4:30:07:99:AD:A1:0F:58:35:81:D7:19:69:1E:12:03:32:C0:00
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019CACB4ECA262B29D03D3E102520AAFE3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0848
Signing time: Mon 02 Mar 2026 04:01:04 +0000
Manifest this update: Mon 02 Mar 2026 04:01:04 +0000
Manifest next update: Tue 03 Mar 2026 04:01:04 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: AFisQGLWqVOWMgpLxvaYserCexAf+CSRqhxM8uSmgXs=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ec:a2:62:b2:9d:03:d3:e1:02:52:0a:af:e3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Mar 2 04:01:04 2026 GMT
Not After : Mar 3 04:01:04 2026 GMT
Subject: CN=7fc4300799ada10f583581d719691e120332c000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:46:3d:83:fd:67:83:c1:fa:a9:22:2a:f6:
32:ad:58:6a:5c:dd:f4:0d:54:c4:6d:4b:34:e6:9a:
5e:c7:28:85:bf:65:ae:16:93:dc:18:0a:df:b3:d9:
0c:4c:10:e3:25:9a:6f:87:0f:dc:5c:3d:1a:13:37:
69:26:b7:46:70:eb:2a:55:74:d7:4a:eb:da:e9:6c:
ff:92:d5:d8:02:c9:a5:d8:08:d2:4e:ea:91:03:c2:
51:ac:2b:8e:22:27:5f:e4:30:04:97:cf:24:5a:e0:
ff:bb:01:76:8b:a6:9e:e9:da:a9:f9:76:1b:9b:c6:
7e:11:05:5b:b7:ff:b5:f3:03:86:51:e4:63:1a:aa:
06:b2:e7:c3:10:42:76:2d:06:e5:57:d9:84:fe:4d:
e2:02:e8:d2:d1:77:44:4d:86:1e:10:1c:4c:fe:ba:
e0:58:20:a9:4f:dc:f1:64:68:05:9c:c9:98:03:f2:
83:4f:62:c6:d1:10:ad:41:94:0b:9b:57:3f:0e:ba:
61:08:8f:37:b5:3c:5a:fc:74:e2:ea:2e:e7:b6:39:
e0:eb:ba:28:d0:7e:1e:cc:85:e0:5f:56:e7:70:5f:
98:8d:02:c5:ff:af:b2:75:21:bb:37:e3:6e:1d:6d:
20:88:aa:6a:4c:25:09:c4:68:86:4b:e8:a4:ec:32:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:30:07:99:AD:A1:0F:58:35:81:D7:19:69:1E:12:03:32:C0:00
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:00:2b:50:25:35:46:a0:d0:fe:0d:56:03:f6:17:66:0e:
aa:48:70:67:ee:88:af:45:f2:fc:69:f6:27:2b:1f:8e:cf:c5:
94:28:0c:3d:61:46:3b:bd:39:7d:28:31:6a:44:a6:ad:5c:28:
c0:64:8f:b7:55:0d:c0:02:c2:81:ed:bd:c5:9a:e8:dc:46:09:
27:4d:96:84:11:c1:9e:da:dd:82:dc:4b:62:c2:ce:db:20:d9:
90:cb:e3:77:23:e4:f5:a5:8e:a9:45:85:49:42:21:f4:c7:ed:
8f:7d:e0:4a:06:18:82:aa:9d:0c:82:79:4c:33:2c:86:34:d1:
19:ec:8f:cf:91:ba:bb:7f:5a:67:89:46:65:f5:67:48:65:98:
3d:1e:34:0a:61:88:6e:00:c5:cd:d8:5b:66:6f:3c:1c:ec:53:
7d:64:5e:38:23:e6:8b:cb:8e:b0:c2:d5:2c:67:1c:10:38:da:
0a:b3:8a:79:73:13:82:43:e8:da:6d:cf:df:43:8a:97:46:c8:
b1:ea:ef:b6:5f:b7:b1:20:08:10:a6:71:f4:fd:71:8e:44:00:
79:91:35:ac:b0:42:f8:c4:de:52:70:84:6d:de:ef:97:88:ea:
bb:e6:d0:1c:2c:ae:2d:82:f4:b2:ab:3a:0e:3d:cd:bf:fc:4b:
cf:a2:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:20 2026 by rpki-client