Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: YSNn8MYup4/LMcI50g84Wukii9BcsaEZJCGfSRzWmSs=
Subject key identifier: 7D:42:2C:B7:8E:0D:ED:4F:0C:FF:2A:2B:70:35:1B:94:AC:CF:6D:33
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 019CAA21D3667D7E7572CDA1F1703283327F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 185A
Signing time: Sun 01 Mar 2026 16:01:09 +0000
Manifest this update: Sun 01 Mar 2026 16:01:09 +0000
Manifest next update: Mon 02 Mar 2026 16:01:09 +0000
Files and hashes: 1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: 3NFmi9ForF07kZM1wiH21z3bfMpzeAk8xpBi8NvkHJw=)
4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d3:66:7d:7e:75:72:cd:a1:f1:70:32:83:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Mar 1 16:01:09 2026 GMT
Not After : Mar 2 16:01:09 2026 GMT
Subject: CN=7d422cb78e0ded4f0cff2a2b70351b94accf6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:e5:ff:97:50:88:1a:ca:bf:f5:d7:9a:41:
9d:38:d3:c8:00:e1:fc:8a:9e:05:84:aa:16:74:c8:
95:c4:ff:49:bf:02:bd:00:6d:7f:76:24:59:78:20:
c6:4e:00:ca:ec:ef:dd:35:20:99:d2:db:97:2a:88:
05:6c:19:7a:e6:7c:19:e1:61:1d:d0:63:d8:fb:0c:
2b:79:1c:71:03:60:19:c2:ce:8e:99:12:a3:f6:96:
d1:3d:6e:fd:5b:3f:63:8d:33:66:86:3f:89:cb:da:
f9:c4:cd:db:1a:78:63:7e:cf:8d:69:fd:31:cd:8d:
d9:7c:89:57:75:8a:a6:19:7d:af:40:d7:fe:ec:ff:
f4:d0:c2:2b:f0:bf:67:99:f9:3f:03:06:24:ea:1c:
dd:92:e4:8e:2a:ab:03:59:9a:2d:cb:7a:d5:63:58:
d5:ae:3f:57:31:0a:b0:2e:62:01:0c:88:9c:cd:85:
ad:86:37:c9:d7:4a:1c:13:e9:21:44:f4:e0:f2:e4:
28:85:b9:1a:a2:1e:20:61:91:4c:72:e0:0f:e4:f5:
95:fd:37:33:c7:e4:35:9c:99:e9:9d:a0:49:c2:b9:
5a:98:30:c7:95:a5:71:29:32:aa:6f:52:c3:0e:7a:
35:ea:55:8a:d8:08:03:64:c4:4d:3e:7e:4e:22:d7:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:2C:B7:8E:0D:ED:4F:0C:FF:2A:2B:70:35:1B:94:AC:CF:6D:33
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:25:b0:4e:16:30:4a:00:0e:b6:1e:90:ab:ca:32:ea:42:e1:
85:10:c1:e9:16:6f:f4:5f:e6:3e:0f:68:83:02:19:ac:a9:8a:
ef:a7:44:ad:47:07:95:93:c5:ea:b7:48:2d:bc:e4:8b:c3:41:
82:b8:54:40:45:28:b7:2c:e3:e1:53:ee:f9:f6:47:4f:7d:01:
a9:30:90:eb:5d:0c:40:b2:8a:10:2b:1a:d8:2f:93:a9:af:13:
b4:50:2f:d0:db:b6:f4:1b:99:47:1b:4b:70:ff:2f:88:dd:c5:
04:7c:8a:15:f2:fe:52:ec:3e:90:b7:af:41:b0:c7:d5:40:23:
c2:27:7a:0a:32:9b:51:b3:7b:15:4d:d3:f8:ae:aa:20:5f:31:
84:72:07:70:e5:38:94:b5:fe:b9:0d:23:30:c2:54:9f:c8:94:
2d:06:bc:f8:58:69:04:c4:9e:06:44:4a:ca:ef:33:a1:ad:1a:
97:a9:04:c4:a0:94:32:47:8d:bb:9f:bc:fb:cd:16:e0:b8:5d:
34:fa:c5:b9:e6:3c:7e:b1:48:e0:06:02:c7:28:46:f1:cc:a2:
9e:68:c1:24:6a:56:90:45:a4:10:88:61:a3:eb:05:94:48:f4:
5a:0c:46:30:ae:87:ae:43:f1:b8:33:51:ab:b5:77:82:9c:4e:
b3:d8:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:07 2026 by rpki-client