Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: D+fHRUG0t97p6Lb7vlJq48Ws1VSyziaxr1VebbZsDHE=
Subject key identifier: EC:B7:17:B0:78:11:13:E5:BB:E2:55:3C:C8:13:FE:78:6B:75:71:76
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019CABA20B97B183655A4CB14728FC863BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: Dwste3XG/TAO0H0SJd6ZpN0WH7+yqHD5SURA0M8TYeA=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0b:97:b1:83:65:5a:4c:b1:47:28:fc:86:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=ecb717b0781113e5bbe2553cc813fe786b757176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:35:3e:16:5d:cb:07:b2:ee:ec:46:56:52:
8b:8c:e1:60:bc:dc:da:2e:d5:dd:c0:3f:69:1a:61:
59:32:09:83:84:44:f4:33:ff:30:b2:fa:10:e2:3f:
81:d5:14:18:4a:20:a1:97:dc:52:5e:79:7f:f5:b1:
15:ce:a2:fa:0d:4f:07:29:e3:cf:1d:f3:d6:6f:09:
40:c7:86:61:7a:ac:ea:c8:48:dd:4b:a7:53:c3:2e:
28:a9:2b:68:03:ed:3d:fd:24:71:a9:93:aa:ce:9e:
2d:a7:72:71:9a:21:be:c4:5e:70:46:55:65:20:9e:
8f:db:4d:0c:17:cd:1e:4d:8c:5f:e6:26:06:2e:7f:
0f:28:75:9b:e5:bf:66:2a:2c:30:d3:8f:23:16:f2:
9d:bb:fa:3e:af:b8:51:c9:8e:c1:de:00:1a:d8:fd:
50:ad:84:90:a1:dc:1e:8b:82:2f:bb:ff:e9:11:aa:
c1:86:95:45:c4:e1:1b:02:d9:21:9b:c2:fe:ba:2f:
ed:42:46:a0:e3:22:c6:fb:47:0d:d8:04:5e:91:f0:
9e:94:96:b8:f8:1a:9a:fa:e1:5e:24:49:26:29:ef:
70:f0:9a:6b:21:a9:2c:e5:81:b7:74:ad:83:8c:47:
ec:ca:f8:1a:f6:5d:d1:62:d0:f9:da:5f:e3:f9:f6:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:17:B0:78:11:13:E5:BB:E2:55:3C:C8:13:FE:78:6B:75:71:76
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:c1:f2:c3:73:07:19:bd:d0:54:b7:24:09:fd:4f:1c:25:
9f:ef:9b:60:0c:01:68:d9:60:5b:dc:0f:eb:a1:6b:b9:03:52:
78:19:b3:71:7a:9c:f1:60:9b:07:c3:a5:4a:0c:a4:80:31:45:
9c:d6:16:c2:f9:21:f5:41:a0:98:21:28:62:95:0b:32:36:a7:
14:45:65:d0:75:1b:58:04:b5:e4:8e:46:97:fb:56:8e:6a:c8:
5a:77:5f:04:83:5c:00:56:36:15:30:4b:b4:cc:3b:51:05:c0:
4d:4a:88:cc:84:d9:dd:53:11:21:e4:97:2e:18:c7:10:38:d7:
dd:38:45:cf:8c:37:22:32:e6:35:cb:55:01:ba:18:fa:8a:61:
d8:01:ee:9b:7b:cb:51:e3:42:cf:7d:48:83:6d:42:8e:ad:ef:
9c:95:f2:1f:b2:af:bf:26:64:a5:9d:d9:e1:40:9c:0c:50:00:
7b:59:a8:cb:40:da:8d:6b:24:c9:f1:40:3d:0b:83:45:b7:e3:
c8:d3:c7:99:6c:0f:6e:bb:61:96:61:96:3b:f7:60:b0:79:0a:
63:6a:a6:23:12:36:75:96:52:5f:f9:35:a0:78:5a:ed:bc:b5:
95:2c:22:26:93:0f:4d:c0:12:01:aa:f1:ba:5e:90:c2:4e:0e:
93:d7:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:54 2026 by rpki-client