Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: gO48WtrHoJnDzVQ3M4N3Ns8DXWkTrCxvuvSJHm+WFIg=
Subject key identifier: E8:7D:B4:39:3D:95:D8:DB:11:E1:3B:2A:AA:A5:09:53:4C:3D:15:1C
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019CABD9DFFDECD069666DDE7F0E71D24101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0F81
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: aNQfHfgSPjvAYju1ntsfPQ578NDgkatwy6p9KDqO5Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:df:fd:ec:d0:69:66:6d:de:7f:0e:71:d2:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=e87db4393d95d8db11e13b2aaaa509534c3d151c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:a2:49:23:b7:1e:3a:a0:50:59:18:4d:4e:
3f:a2:65:8c:ea:76:09:21:27:04:98:e3:dc:25:58:
6c:31:81:5e:3c:02:9b:79:29:f8:0a:9f:73:ae:98:
23:5d:c9:41:cc:77:8f:6d:49:30:9f:8f:12:0e:92:
e5:d0:76:4f:3f:26:bc:87:02:54:c4:ba:10:c2:0a:
4d:6c:19:af:0a:16:9c:f9:96:3b:50:e6:72:f2:22:
ce:c1:7a:64:52:8c:44:fe:d0:61:32:9b:ba:fb:4c:
1b:ab:c1:a9:8a:1c:5f:fd:cb:79:cf:f8:b5:d8:3b:
c6:6c:5a:66:ff:bf:c1:34:f9:5e:00:85:5e:21:2d:
78:6e:80:f5:3a:1d:ab:41:9e:0e:40:48:8b:df:20:
d5:e9:ed:73:55:4f:dc:6d:8a:70:11:f0:0f:c7:0e:
9e:77:a4:6e:15:11:b1:10:c3:6d:e6:b5:4c:2f:5e:
9a:e3:b6:3a:e9:0b:c7:8a:85:94:9e:ae:0c:aa:02:
e3:5a:eb:b3:54:b5:48:f2:a1:54:d6:2f:1b:66:e6:
1a:61:9f:d9:34:e1:b1:30:b2:a6:41:00:33:8b:10:
a5:fd:a8:a2:29:a9:f9:84:13:ef:5a:85:a9:c3:f9:
8f:72:ed:69:f4:4d:e8:c6:57:e8:29:34:31:d4:db:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:B4:39:3D:95:D8:DB:11:E1:3B:2A:AA:A5:09:53:4C:3D:15:1C
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:54:13:be:5c:86:97:0b:6b:d5:35:90:25:7d:e4:83:98:37:
97:8f:cb:d1:32:79:a5:03:14:84:d5:4e:a7:bb:b5:5e:77:ee:
40:35:7e:c1:90:a9:05:2a:b9:64:fa:7e:1e:ce:af:1a:e0:68:
e0:fd:6e:d5:3f:c4:49:73:54:be:c4:23:0c:4b:78:61:a6:79:
bf:ee:e4:4b:0d:27:33:fd:2d:4e:6a:f0:32:3a:89:38:db:23:
64:a5:f6:5d:8c:fb:c8:f3:61:8f:82:b8:9f:1d:14:76:57:8c:
b5:5b:1b:e5:f3:3e:4e:c8:ef:c8:3f:a1:2e:7c:75:8e:9e:e5:
a1:16:db:15:c2:aa:85:e0:08:34:06:5e:b8:59:52:f2:69:3d:
38:ef:aa:2c:c1:a9:ad:06:d4:a4:e0:7f:c1:63:f1:49:1a:ac:
8e:b4:9b:8e:55:13:65:d8:49:d1:e1:1c:8b:78:c7:f5:38:a3:
23:ea:ef:a3:63:55:78:65:e2:82:2a:a7:fc:7d:30:28:48:06:
2e:d6:a4:14:6e:9c:24:d0:90:23:83:5e:34:dd:75:c9:99:4d:
c8:35:d9:c8:81:5d:d8:2f:a3:0d:73:be:76:01:00:a9:c5:d1:
23:70:71:61:d4:f7:7f:b1:fc:a1:2c:e9:76:86:d5:85:df:94:
c0:7b:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:42 2026 by rpki-client