Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: Jo+V4xqY7Tgqg0rJH2OXHmPYSXZV9JZEyPK41JhnY1U=
Subject key identifier: 95:74:BC:7A:86:E5:E3:12:06:29:1F:57:91:65:24:22:F6:A2:DC:D4
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019CAAC66B00FEBC0E2404D515628597E449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: tSrOBVOjr5Z+2hZ5tVbNBUOJBu6STW5Sy8a0YGIkBx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6b:00:fe:bc:0e:24:04:d5:15:62:85:97:e4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=9574bc7a86e5e31206291f5791652422f6a2dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:eb:70:69:e7:a7:e2:bd:ad:b1:7b:69:d4:
8e:24:bb:3c:1b:83:72:94:c9:c5:54:14:bf:83:66:
9c:72:f2:fd:81:46:93:f5:66:61:43:bf:4c:80:13:
1b:04:b4:1e:fd:a9:12:60:d1:b3:66:98:27:ce:e7:
ab:12:c2:dc:1a:33:a4:a6:b1:67:50:c8:e0:69:b0:
b2:f5:d7:c4:b1:aa:60:7d:40:36:85:4e:e1:c6:37:
b3:82:4c:a7:a7:c2:0d:2f:a1:a1:3f:f3:79:f1:28:
8f:c9:e4:96:b0:34:45:fa:f6:e4:81:30:5c:84:ea:
a3:ee:d2:b9:84:3b:bc:7c:6a:f4:0a:a7:16:16:8b:
d9:24:a7:02:00:bf:d1:0b:29:17:1c:13:25:a6:a4:
a5:7a:13:b8:71:66:c8:26:72:a0:14:9c:74:8f:cc:
66:01:43:53:73:c0:a5:43:d9:18:97:f5:67:10:f1:
a7:96:fb:c4:c9:89:09:c0:53:f5:1e:61:d1:7d:21:
c3:e5:10:13:02:7b:6c:08:08:e3:ee:65:8b:75:88:
6a:11:cb:a3:5d:86:d2:bb:fb:cf:fd:ee:8b:f1:a4:
41:65:0e:29:8a:3c:1d:91:d9:7b:3f:65:fb:73:f3:
3e:43:67:4a:3b:e8:09:16:99:fc:c7:ad:0e:a1:6f:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:BC:7A:86:E5:E3:12:06:29:1F:57:91:65:24:22:F6:A2:DC:D4
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:26:c5:d4:65:64:8a:18:a9:56:f4:c0:ba:3d:d8:d1:a4:e5:
8f:5d:1d:ce:fd:d4:69:0b:df:bc:4c:b2:8e:2d:84:9e:7c:74:
46:59:a0:84:02:a3:a9:08:b2:fc:3a:ca:f8:c4:b6:bd:74:52:
65:f9:bf:c2:86:c5:bd:a2:0f:7e:ba:ed:25:96:47:be:84:28:
d3:da:6d:e8:a6:f2:2c:8d:04:3e:c8:c1:f7:13:0a:1b:41:d0:
05:95:da:d4:2e:42:4a:a6:13:d7:2f:c2:f7:c6:2d:9e:62:c3:
99:9c:4a:d1:c6:53:c3:db:d4:6a:20:ae:64:98:ca:b0:f6:99:
c8:6c:51:23:a2:6f:60:7a:7f:5f:f7:22:61:48:a6:25:80:8f:
9a:a4:14:4d:18:ee:39:c0:1d:63:7c:37:54:d0:38:24:2e:a2:
eb:1c:9b:8e:ce:a2:c3:d3:c1:b1:db:41:d8:f5:3b:d1:70:cb:
8d:18:e5:27:e3:30:b1:d2:d6:68:33:8c:09:95:fa:16:b2:e0:
28:cb:01:31:0e:36:4d:00:9b:ee:4c:a4:75:4a:4d:09:56:bb:
4d:08:1e:b1:1f:88:4b:5f:7d:19:d9:0d:cf:98:bb:2d:d0:5d:
78:87:ff:9c:91:41:36:12:f7:f3:fd:43:e3:b2:4b:1b:53:59:
3a:e2:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:38 2026 by rpki-client