Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: wBsy7u0fDEUmjSeuud8k8zWQ9RcHFJFkE+1gvz3dZ7k=
Subject key identifier: A8:F9:C7:83:78:A3:CC:B9:2A:01:E9:3A:A4:2F:55:C7:28:55:FE:B8
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 019CAAFD45045932A07A64696BD88964AF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 14FD
Signing time: Sun 01 Mar 2026 20:00:50 +0000
Manifest this update: Sun 01 Mar 2026 20:00:50 +0000
Manifest next update: Mon 02 Mar 2026 20:00:50 +0000
Files and hashes: 1: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (hash: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: 7ig8eU7e8lpOZ0J0Z8L8/6ILrpQHAMfJVZO2axGAJmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:45:04:59:32:a0:7a:64:69:6b:d8:89:64:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Mar 1 20:00:50 2026 GMT
Not After : Mar 2 20:00:50 2026 GMT
Subject: CN=a8f9c78378a3ccb92a01e93aa42f55c72855feb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:3c:4c:38:48:59:ff:8a:19:ed:8e:a9:de:
aa:32:23:11:cd:a2:9e:d8:c3:87:9e:db:1c:52:d9:
73:b5:34:b7:dd:fe:6f:f8:a8:64:31:b6:f9:c3:4c:
a5:92:61:5b:38:be:5f:c2:50:98:87:1d:2c:1d:9e:
89:ee:d0:08:cb:cf:78:fc:3a:82:e6:2b:61:7e:59:
91:ec:63:c9:70:12:75:f8:65:24:78:08:a8:d1:04:
13:a7:f9:10:31:1f:c7:c6:1d:a5:56:7e:0b:86:0f:
5e:3c:cc:78:58:e0:0c:80:8e:df:84:67:cc:a5:c4:
30:ae:0c:1b:af:3d:4b:6a:f0:5e:ae:93:33:ed:16:
d8:32:69:e1:a0:2e:c2:0e:20:b6:23:7d:19:77:3d:
35:b9:4a:af:31:0c:3e:28:40:dc:0c:50:b5:9a:10:
04:3c:6c:fa:7e:68:75:f5:61:01:88:36:69:03:4a:
6d:40:04:07:1a:37:8e:09:94:f8:21:12:7d:f2:ce:
b8:bc:4d:01:74:59:4b:31:09:a6:bc:eb:1e:06:03:
cd:89:12:29:af:03:9c:8b:70:15:5a:51:04:6e:d0:
a2:9b:da:e3:c8:d4:8f:96:a6:75:47:44:85:4c:01:
b5:c6:8c:ba:75:37:47:d3:4c:2f:cc:a0:0a:40:3a:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:C7:83:78:A3:CC:B9:2A:01:E9:3A:A4:2F:55:C7:28:55:FE:B8
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:0c:05:f0:00:aa:fc:34:51:e3:57:a9:51:8f:06:4d:85:
16:78:58:74:47:fd:ce:5c:bb:a4:1e:12:6a:c3:0c:78:a9:53:
4c:53:81:23:68:8c:cc:cc:e5:53:de:74:87:31:a2:d1:f8:8c:
a0:87:98:6c:4b:82:e3:dd:54:b7:45:2f:67:be:04:e7:48:bd:
06:c4:f2:8f:20:c4:48:28:22:9f:fd:30:0c:64:14:94:41:8e:
c6:e2:06:40:0a:48:5e:a7:d3:2b:f8:4b:15:dc:39:0f:bc:75:
79:a8:a5:3c:a8:68:3c:41:fc:e0:81:2d:df:8b:7a:1a:57:37:
57:40:88:ce:58:35:2c:53:43:9e:39:59:c7:c6:44:ed:21:79:
c9:d4:e8:81:cd:e1:32:5d:e2:00:11:48:c3:ee:70:00:c1:bb:
46:13:3d:b0:86:20:2d:64:63:01:80:2a:53:7c:82:d9:40:9d:
98:db:b9:07:42:23:19:50:c2:14:de:18:c4:01:94:a9:bd:19:
d1:96:99:51:00:88:09:52:ab:c0:f8:bc:cb:34:e2:88:16:2a:
b7:3b:6d:d6:1d:06:66:1e:6e:19:23:0a:12:15:67:6d:a1:61:
58:6a:13:0e:01:97:16:85:8a:a0:ae:e0:f8:29:6d:6a:30:a8:
ea:0f:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:47 2026 by rpki-client