Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier: 9/VG7RkD3BRhihauIR8eRsyFvpF4dz41fRRNlnvXnBk=
Subject key identifier: A8:49:B8:D7:46:99:7C:BA:54:1A:29:C7:6B:41:D3:4F:13:DB:19:EA
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial: 019CADC7D16640CCA4A423AF6A1019F59A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number: 09BD
Signing time: Mon 02 Mar 2026 09:01:19 +0000
Manifest this update: Mon 02 Mar 2026 09:01:19 +0000
Manifest next update: Tue 03 Mar 2026 09:01:19 +0000
Files and hashes: 1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: 66Mf7xYhRHwft/ZjX8Cj6nUxRtq6GcLRCzC0qg7Cnak=)
2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=)
3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=)
4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d1:66:40:cc:a4:a4:23:af:6a:10:19:f5:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Validity
Not Before: Mar 2 09:01:19 2026 GMT
Not After : Mar 3 09:01:19 2026 GMT
Subject: CN=a849b8d746997cba541a29c76b41d34f13db19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:0f:bf:55:11:e9:66:25:4b:bf:4c:ef:68:
43:12:7d:16:84:f6:11:bc:f7:b2:0e:4e:1c:32:57:
e0:d0:1c:f6:64:fa:fa:a9:9c:58:6c:33:b7:3f:07:
f2:fb:73:34:fe:8c:b6:59:ab:63:7f:ee:49:46:d0:
27:62:6d:a7:bb:22:5c:62:3d:68:24:af:87:20:52:
2e:db:6d:b3:2d:85:c3:95:93:5d:a5:78:d9:a6:3a:
32:29:19:40:eb:26:ac:13:aa:cc:58:d1:ab:9c:31:
d0:2d:06:47:d0:e6:3d:a9:d8:ae:b0:38:c8:46:81:
ad:ef:e7:5b:32:ac:b3:c6:40:20:1d:9f:30:dd:12:
6a:7f:64:6f:67:8b:54:92:0c:f0:99:72:cc:50:0e:
04:4b:d4:8a:3e:0f:87:ba:65:77:33:17:e8:31:7b:
72:9e:a1:00:82:b8:af:22:5d:2c:2e:5d:dd:ea:b8:
18:11:fb:45:54:26:2b:8e:ee:6b:67:a7:e4:4a:2f:
dc:ee:2d:10:85:b7:3d:1c:96:ab:88:6a:b8:48:35:
35:2e:80:8b:9a:fe:7e:d3:d8:28:f8:4c:93:11:d2:
f8:ba:ce:1a:fe:04:14:96:c5:13:27:b0:f9:40:7a:
86:e2:f1:53:ed:5e:89:4f:93:81:35:7d:be:2a:b5:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:B8:D7:46:99:7C:BA:54:1A:29:C7:6B:41:D3:4F:13:DB:19:EA
X509v3 Authority Key Identifier:
keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:ed:c6:ea:ee:07:1b:82:10:52:84:0b:6f:8e:53:6e:fd:
24:e1:18:9d:b1:f1:79:61:96:e0:bd:5d:38:fa:d6:0e:4f:3f:
cb:bd:4c:1c:5e:c1:5e:be:ab:3e:4e:9e:f9:ff:68:b2:d9:ed:
a1:ed:10:9d:33:2d:79:a6:da:85:09:92:4d:55:9e:fa:9f:7f:
47:a5:a1:f8:06:70:ba:ac:33:07:6d:16:67:7e:66:71:a3:db:
d8:7f:57:f8:f4:74:70:bd:37:44:2c:21:c8:32:fd:5a:0a:5a:
00:d3:8b:73:f8:8c:0a:06:4c:b1:40:d8:03:d3:7f:1d:14:90:
5d:23:55:33:21:47:d2:63:b4:08:0c:3f:79:f8:c0:89:ee:da:
9f:ac:08:6b:53:09:b6:4d:5f:32:02:69:b0:07:11:70:c8:da:
a5:b9:07:ce:9a:eb:85:be:ae:19:e5:9a:02:48:88:4a:0b:26:
ab:c8:17:c0:89:32:5e:8f:3a:b3:81:35:33:ee:5b:4c:3c:dc:
fe:d9:66:aa:2d:23:43:d8:39:c5:2e:a2:07:ef:54:26:2a:fd:
a0:93:cf:00:a4:93:34:c4:8e:0e:8f:29:95:bf:bb:78:92:e5:
df:57:60:f6:cb:bc:9c:49:e6:b7:74:64:95:87:b9:27:1b:9e:
c1:b4:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:10 2026 by rpki-client