Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: WG3CPvy96thYDgfkmEuuH2A6/Jsi420/XwPApMjfrJw=
Subject key identifier: A4:6D:D0:35:00:0D:8D:92:A3:15:C2:B5:20:3E:2D:2D:A6:7B:87:BF
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 019CAB6AE21A501C6C6D90F01E3D8F22C9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: Li424scPpB3/iRJacJtDOnHY92WUpQdcMgZ6wMX9BwQ=)
2: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (hash: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY=)
3: bo4jTmLbavInVB1_Xe56jT6duFc.roa (hash: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ=)
4: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (hash: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e2:1a:50:1c:6c:6d:90:f0:1e:3d:8f:22:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=a46dd035000d8d92a315c2b5203e2d2da67b87bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:24:1d:8a:d4:d9:52:d1:76:90:05:a4:92:
96:1e:31:d8:69:52:d7:3a:d0:72:90:7d:5a:6a:80:
da:ef:9f:ee:94:1b:1d:6c:e6:2e:db:63:5a:d1:25:
74:f3:ce:d6:99:93:57:2e:00:82:37:c9:a8:51:2e:
64:75:8f:8d:0d:44:83:78:2b:69:4a:52:54:62:c0:
53:fd:32:8b:ed:90:7f:5a:4a:71:33:28:e6:37:39:
d0:f6:14:1a:01:90:bd:27:83:1e:42:eb:d3:cc:ea:
43:8d:20:9d:b0:50:a6:e1:4d:3c:c3:7a:9f:ba:69:
72:a5:21:ee:be:e4:71:cf:db:56:d0:0c:9e:e8:40:
e7:e0:c0:3d:f5:2a:56:7b:c6:09:04:72:2c:90:ba:
f3:4d:a4:5a:bd:4f:2a:de:be:a9:6c:03:18:63:3f:
d6:e1:91:70:ed:ba:ee:3a:0f:a9:26:c3:5b:97:b1:
0f:04:3b:fe:25:07:ed:ad:33:d1:12:d6:df:35:fa:
87:db:ff:f0:d1:0a:df:1c:f9:22:05:e6:25:37:48:
02:ce:b0:de:5b:86:05:db:52:0a:cf:92:00:b9:b8:
08:bd:24:5e:39:1b:04:ec:68:8d:5d:f9:07:9a:8b:
59:ec:df:e3:63:c0:ca:a2:89:f6:4a:ce:ae:f6:60:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:D0:35:00:0D:8D:92:A3:15:C2:B5:20:3E:2D:2D:A6:7B:87:BF
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:19:f9:59:30:d0:98:1a:70:9d:dd:cf:4e:12:69:29:d2:
92:06:5c:7a:5f:28:50:94:d7:a3:c9:f8:41:fe:c4:69:02:3e:
fe:6c:4c:5c:9c:ee:08:d0:c2:ce:20:83:62:7d:88:5a:bf:de:
e7:27:ef:fa:d5:69:10:b5:4a:f6:79:87:4f:74:76:4e:f9:49:
63:1e:16:e9:bc:16:bb:ae:2a:03:70:3c:30:c4:5b:0c:5a:81:
f3:02:1e:03:3f:9a:63:5e:4d:7d:88:19:0e:ef:4f:10:60:f4:
53:2b:7b:ef:db:2f:5d:aa:61:c3:7c:57:62:f4:eb:93:da:cc:
f5:34:3d:d9:17:dc:cb:b0:7a:6c:2c:c3:50:a7:91:f3:3b:55:
6c:75:3f:69:e1:1b:22:b8:c5:96:37:ab:9a:dc:82:d1:3b:6a:
20:0b:25:35:e5:df:62:ac:32:7c:08:0d:0c:d3:d4:62:b7:02:
e9:7a:73:e7:92:d3:f0:b2:49:43:a7:3e:99:40:e5:85:da:24:
4f:ef:62:30:21:72:fa:a3:d5:ec:25:2a:14:18:ca:e5:a9:6e:
cb:7a:fc:e0:8e:81:3b:a2:78:7e:e1:61:49:09:15:97:13:3b:
7a:5c:e4:31:31:dd:0c:6a:22:5e:52:8f:61:cc:ca:9d:5d:61:
ed:37:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:46 2026 by rpki-client