Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: sbj5hFvyQPZTkWa34BIe+69x08JPDBj85TZDpezJ+Vk=
Subject key identifier: E2:68:21:F1:71:4D:D2:95:81:4D:7C:94:E4:B8:37:44:FF:1C:C8:1E
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019CAD90C0E8C5CA69CA472D81E1C4D37C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:01:10 +0000
Manifest this update: Mon 02 Mar 2026 08:01:10 +0000
Manifest next update: Tue 03 Mar 2026 08:01:10 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: enGaszEKkIiG70z/GF9hi4bqXo9/7UvfD/mioXgsaj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c0:e8:c5:ca:69:ca:47:2d:81:e1:c4:d3:7c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Mar 2 08:01:10 2026 GMT
Not After : Mar 3 08:01:10 2026 GMT
Subject: CN=e26821f1714dd295814d7c94e4b83744ff1cc81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:3c:39:47:ff:57:00:87:3a:4b:d5:76:ac:
68:92:2f:d4:43:0a:d9:52:24:03:e2:9f:11:bb:7d:
05:25:9d:52:5b:73:50:ac:7c:50:31:18:08:b2:38:
d8:97:cd:59:b3:95:cd:13:24:3c:1a:e8:43:60:03:
75:b8:a4:00:85:7f:04:1b:0d:1b:ca:99:d3:92:2a:
86:b1:9a:8a:1b:20:e8:53:52:ad:90:36:6b:f7:d5:
70:47:44:f8:c3:dd:bc:50:de:99:1f:e3:3d:dd:3e:
b7:6b:9a:d2:05:be:07:33:53:fc:52:4b:92:11:17:
47:86:2d:c5:6f:10:37:46:84:5d:57:9c:6b:d2:a6:
07:aa:6f:de:fe:7e:df:b4:27:f4:d6:e7:24:66:8c:
f0:90:4d:25:49:ff:1a:4e:7c:80:e6:ae:1d:3d:d3:
61:b5:00:29:b7:62:67:cc:62:02:91:bf:0c:35:aa:
84:c7:17:90:e2:79:a8:13:81:76:24:fc:7a:9b:33:
c9:70:9e:65:1c:80:14:da:ba:0c:cc:f4:d7:f2:16:
1f:ad:88:fb:9c:83:a3:c2:78:32:17:8e:8c:0c:12:
d2:80:a9:19:99:69:9f:ea:52:64:e2:32:b8:e9:99:
67:ec:15:ca:bb:56:8b:5a:d8:11:8e:cd:20:15:fb:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:21:F1:71:4D:D2:95:81:4D:7C:94:E4:B8:37:44:FF:1C:C8:1E
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:98:72:61:b9:35:3c:ea:35:22:12:bf:6a:3a:65:f9:1a:
62:63:a2:ce:1a:d9:d8:01:2b:4c:d5:aa:4c:6b:fa:cc:7a:10:
ca:2e:ce:7d:cb:eb:de:92:f3:8e:da:9d:b4:0c:b1:d2:5e:6c:
d4:c3:5e:36:84:8d:d5:a8:96:e2:35:6c:e2:74:dc:c1:7a:7e:
44:a9:59:ad:34:6b:0c:3f:37:86:27:29:00:da:fb:9c:51:54:
3d:4d:8f:e7:cb:8d:94:bb:75:71:b3:1d:e5:09:80:27:d0:3a:
b8:20:26:d6:78:ec:c5:a8:10:3c:80:99:ac:8b:29:b8:54:7a:
26:14:8a:9a:cd:36:fa:72:ee:70:ae:fd:1c:a8:ce:88:e3:44:
a3:40:e6:c5:0e:d2:ef:51:da:d1:59:1c:66:d2:a3:ac:59:8f:
d4:3f:80:fc:dc:93:53:94:ea:b9:57:56:74:fe:26:b4:08:88:
1b:c4:7b:67:f3:dd:26:a3:9a:e1:87:78:b5:9a:31:89:52:7d:
56:13:93:a4:de:13:dc:a7:93:cb:5b:8d:ac:85:e2:21:53:6d:
4e:ef:64:a1:b0:4a:20:8f:b0:90:6a:eb:34:68:c2:99:95:99:
48:41:54:a9:84:56:59:5f:f3:73:7e:9d:27:52:32:5b:3d:d3:
7f:7d:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:24 2026 by rpki-client