Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: 5RJ36NzspjDdkhmSNdEFwCnLbAAY/ShCd9e9GLkLA7A=
Subject key identifier: FF:86:BF:24:84:B3:DC:2F:5E:44:BD:3A:53:42:B5:E2:D0:F0:53:19
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019CAAC70687777D44B45062EB6EEE469D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (hash: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: HNGqLjl0dH4qgLW/R+kzJ8IV7bec34vBC2FFAVFEB+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:06:87:77:7d:44:b4:50:62:eb:6e:ee:46:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=ff86bf2484b3dc2f5e44bd3a5342b5e2d0f05319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:c8:f9:ea:63:38:65:e6:68:29:63:f6:a8:
7c:38:8c:fb:7a:7b:e9:7f:43:d8:eb:eb:26:35:14:
0c:7c:1e:fb:10:31:5f:37:26:4c:b7:f4:1e:33:95:
3b:fe:8d:82:c9:b1:93:7b:c3:74:da:32:ce:05:9c:
52:37:53:43:7a:a6:14:f0:50:86:4f:01:b9:3d:92:
41:63:7a:63:6d:8c:47:3e:1f:e9:25:97:73:f2:59:
d1:79:3b:cf:a2:fe:9a:f5:b6:83:a5:89:d8:3b:32:
45:af:6c:ea:2d:37:39:48:9c:10:c8:e0:ad:3b:6f:
5f:63:26:bd:68:85:df:26:17:25:b8:ac:c0:9d:d0:
c6:40:69:b6:50:b8:02:6a:41:b4:25:b8:fc:28:1a:
b0:84:3e:69:54:12:25:fa:f3:3a:7a:ce:91:bf:2e:
dc:ed:43:45:cb:cd:1e:93:c8:9d:d2:2d:a5:4e:69:
c0:d4:81:ce:5a:d9:2e:37:69:bf:1c:8e:c9:6a:0d:
1d:72:5a:bd:a8:a3:95:0e:6a:46:7f:a9:d1:2f:72:
f5:ef:b4:12:e3:b6:ef:45:ec:c7:81:8c:ac:fd:d4:
ed:5b:15:60:75:ca:29:5e:8b:ee:d2:72:81:52:d9:
ee:6d:4d:89:ac:aa:b5:7f:11:76:4e:0a:85:b8:89:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:BF:24:84:B3:DC:2F:5E:44:BD:3A:53:42:B5:E2:D0:F0:53:19
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:1d:28:a2:7d:97:a1:b6:3e:37:04:11:5b:99:f8:6d:a4:2a:
c0:b0:20:aa:f3:d4:f5:95:b0:2e:89:1f:64:eb:e2:7d:c4:82:
2c:bb:d5:38:70:9a:98:61:cc:e8:c5:f5:0f:f9:bc:71:4f:d3:
bd:59:5f:72:b7:0b:83:14:6a:69:d8:d6:20:66:75:b8:93:23:
ba:e5:f2:d9:75:5e:16:2e:ad:f6:29:e8:22:c2:55:cc:5f:2e:
10:13:6e:3a:73:98:41:59:7a:1c:1d:b5:dd:56:a5:e0:99:32:
89:b0:ae:8e:bf:5a:66:c0:35:00:77:27:fd:a3:65:0e:24:be:
a5:3a:a9:3d:dc:1f:4a:ed:64:09:63:2d:41:9b:f8:10:1b:89:
c0:7c:ed:17:45:48:fc:7f:e2:24:a7:d6:90:60:09:d0:0d:f5:
f3:5b:da:c2:60:c1:9f:20:39:ec:f7:97:9c:f5:40:0c:bc:6d:
ea:90:a2:14:44:60:aa:8a:50:6f:b2:cc:d0:43:30:6e:7f:7f:
5b:6b:29:50:18:71:e5:a8:f9:26:be:85:a3:f2:0d:d5:fb:bc:
2e:58:d0:fc:68:53:8c:8f:19:8f:83:27:a9:c5:76:a4:e6:ab:
cd:38:8d:0a:79:63:94:b5:20:22:2a:2d:0e:9c:09:0e:18:90:
61:f6:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:45 2026 by rpki-client