Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: P9FJj8xFyjiEQaZ2+qFcLpLum4mBYBJlE2LPRne0NnQ=
Subject key identifier: AA:1F:5A:6E:41:96:23:F0:DA:4E:1B:F9:A1:F1:28:87:C1:A6:D5:DA
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019CABD9BB2BC1F3B200CEFF32A45BB962B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:38 +0000
Manifest this update: Mon 02 Mar 2026 00:01:38 +0000
Manifest next update: Tue 03 Mar 2026 00:01:38 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: 5ioI+aU6AiZSaO+s0pYW0lG3f5ch43uABxenJKt7rbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bb:2b:c1:f3:b2:00:ce:ff:32:a4:5b:b9:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Mar 2 00:01:38 2026 GMT
Not After : Mar 3 00:01:38 2026 GMT
Subject: CN=aa1f5a6e419623f0da4e1bf9a1f12887c1a6d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:63:6f:7d:f7:82:b4:fa:02:8a:67:d2:11:
7c:ed:56:4f:f0:c4:88:32:81:06:16:7a:aa:8f:23:
a9:63:56:4c:e8:b6:7e:f7:c7:68:c6:19:f5:ac:50:
62:ea:e9:9d:55:98:5a:9e:de:20:a5:9c:06:3a:72:
32:93:cc:75:44:42:59:27:00:e6:1a:a7:96:db:8c:
a5:27:98:03:60:a1:2a:85:2b:38:31:6d:8b:a2:ef:
5c:75:83:52:52:37:64:73:25:a9:91:d3:63:09:a8:
82:ab:ad:67:12:02:75:91:9f:e7:7e:67:63:47:c8:
a9:ed:f3:2e:41:ad:a1:4e:d9:6a:21:ad:82:47:78:
3f:30:9f:78:e5:6f:7b:e4:55:dc:cd:34:7b:77:d8:
93:f3:3e:d5:4f:44:d1:51:3c:56:31:9d:54:7e:58:
cb:5c:b5:98:8b:67:63:19:d0:08:2a:72:81:16:80:
76:c2:b4:8a:f6:7f:97:09:1b:9d:45:09:eb:b7:f0:
79:7d:57:94:ab:ad:72:41:8c:47:ec:6b:0a:18:58:
c0:59:32:13:d1:0c:48:21:63:f3:54:c7:9b:04:bc:
da:f4:db:34:fc:95:fe:0a:fc:5f:93:5f:6c:c4:4e:
be:b7:14:18:ae:d5:d9:e9:e0:36:4e:10:67:f4:66:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:5A:6E:41:96:23:F0:DA:4E:1B:F9:A1:F1:28:87:C1:A6:D5:DA
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:d9:0d:d4:ed:5d:fb:8a:14:06:50:7a:7f:76:0d:f1:a1:
ec:ab:9c:ee:ca:e5:31:c2:19:89:d7:ff:57:87:52:a3:94:05:
b9:da:68:49:77:4e:29:c3:09:a7:11:13:ac:08:4a:73:0c:ad:
f9:eb:d3:3f:13:5e:90:3f:9a:65:6f:75:51:64:49:2c:79:a1:
32:56:19:31:d7:df:b1:cc:b3:e7:b4:1d:50:60:3a:34:a7:c6:
45:77:3a:dd:18:ed:0f:ad:60:87:94:27:be:71:bb:9f:b8:78:
4a:79:4a:3f:3c:03:80:d6:11:47:04:df:52:be:03:85:8e:c8:
cb:bb:1b:72:bc:23:8f:07:bb:33:9f:a5:f0:b1:f6:f2:21:8f:
99:65:85:b1:bb:ff:95:e5:6b:ba:6b:20:cb:31:3b:67:65:a5:
6f:35:55:5c:47:d2:9f:72:04:2d:26:32:52:a3:37:a4:e0:f2:
d3:fb:a4:96:2d:a1:67:83:3b:cf:20:2d:4e:07:f0:7e:f6:6a:
2f:fd:f3:ad:2d:ed:98:5d:8b:5c:04:1f:50:c1:fa:1c:3e:a9:
51:89:73:47:4e:ae:7a:65:07:55:bc:63:0a:89:ad:c0:3e:10:
5b:cc:9f:fe:19:88:f1:f3:8f:3c:67:47:28:e7:6b:1f:58:6d:
66:57:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:55 2026 by rpki-client