Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: 3tVke1IUM8B/7I9lj/qhbTsEVS609ladvo7Dc4S3qgY=
Subject key identifier: 33:8D:D8:0F:A4:66:EC:74:51:51:E7:42:C3:17:A4:DC:0E:7C:FE:59
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019CAA21C2B8A517499E6F06F8D52F678A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: M5qVt7ae34kVphAk4iYjA_sXTVA.roa (hash: DNenw0maSTGL31Gai50q1uXUB6YmtJsec2G1+61e/LM=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: xpLaa6cPuYv8PmLJyWiy94Hbhg+/+KCXoHzUEY5lz8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c2:b8:a5:17:49:9e:6f:06:f8:d5:2f:67:8a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=338dd80fa466ec745151e742c317a4dc0e7cfe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:bb:65:da:61:ab:9a:83:be:bb:71:19:ac:
bb:72:1e:3f:bb:ec:d0:4a:ba:ba:61:5f:67:bd:c3:
46:d2:a0:95:48:34:26:44:90:db:7b:c0:c1:f5:88:
f9:c1:84:82:c6:6f:51:46:c7:d6:ec:06:dd:27:84:
a9:fa:ec:74:f5:78:37:58:e3:c2:5f:58:26:c3:58:
77:ee:40:05:30:2f:73:79:30:a2:ed:4b:8c:3d:52:
ce:94:79:5c:59:a9:44:ea:9b:77:1d:74:52:67:72:
a9:49:7d:33:7b:9b:f7:ae:97:65:20:e1:a6:b0:00:
c1:7b:1a:81:b6:4f:1c:e0:ff:f8:ca:db:2e:67:38:
71:1f:a3:08:2f:78:7b:19:21:cf:e6:a4:f4:a1:1a:
15:ba:6a:ae:db:fe:c1:34:2a:33:c1:43:98:64:fb:
fc:09:75:3b:7a:82:33:5f:7e:52:b4:f5:99:54:5b:
bb:06:37:85:d5:87:32:87:50:1d:a4:3f:af:93:93:
23:6f:ac:00:6c:fe:51:19:3f:7b:c0:09:7a:5d:fd:
41:f0:c6:34:3a:53:67:5c:4c:44:33:9c:37:3a:c4:
86:9f:32:8f:e4:62:cb:15:e1:66:53:4e:24:50:6e:
e7:f8:f4:7a:18:41:81:6f:26:17:62:7a:c9:25:ae:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:D8:0F:A4:66:EC:74:51:51:E7:42:C3:17:A4:DC:0E:7C:FE:59
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:a1:14:0e:d1:50:05:97:15:63:a0:7b:e4:a0:b6:f5:7e:
0d:86:b9:6d:c0:11:13:dc:6e:4b:dd:48:10:71:73:44:46:46:
c6:2d:ec:27:f5:03:5f:d3:8b:65:42:b0:a7:ce:ca:ea:a5:84:
ed:c8:1c:d9:66:05:f4:83:b4:68:43:48:78:15:8d:95:d8:70:
05:23:d7:14:fe:04:6e:d5:76:c0:3c:cf:da:36:dc:8e:cc:1c:
dd:fc:8b:a9:fb:76:52:b0:79:6d:c0:c1:36:bd:d9:6d:52:96:
24:6a:7a:3d:ef:6b:23:0c:9f:40:1a:cf:c2:f2:28:17:af:23:
56:44:49:2c:6f:c0:b9:44:fe:62:3d:ac:79:6d:9d:d9:d9:df:
c2:40:28:78:12:ae:49:ce:a9:2f:8a:1a:a3:e7:a6:5f:13:6c:
76:a2:c3:9f:92:d5:60:36:9c:e8:5f:70:6c:52:ec:a0:14:09:
b3:61:a4:e5:95:55:54:a5:4b:1c:f5:df:22:9d:bd:18:58:c3:
3a:b4:6b:40:29:c2:90:ea:69:8e:bc:12:6c:87:39:ae:2a:02:
a3:5d:2c:66:cd:56:68:06:da:05:b6:7d:80:c0:91:6f:0f:4d:
a4:db:ab:01:59:2e:f9:ea:e6:5a:ce:c3:6a:4f:29:f5:9f:f0:
dc:09:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:24 2026 by rpki-client