Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: Uf7a5Pjj4CxHqtsyITNtzVx3mqkI4bsK2tufzVeS7D8=
Subject key identifier: 01:27:70:BF:9C:7E:19:C4:5C:55:02:86:AA:1E:14:73:8F:8B:9A:22
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019CAC4761F5EEAFBAC460DB5C5D335B95AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: LNhcIMPM8KTFPcpqiIY3QbTCCz3OrpxCC11bI9KPCqg=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:61:f5:ee:af:ba:c4:60:db:5c:5d:33:5b:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=012770bf9c7e19c45c550286aa1e14738f8b9a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:9f:df:98:0f:c8:a5:85:1f:75:9c:47:c4:
a8:64:f5:2b:c6:aa:02:61:05:87:29:08:fc:68:79:
3f:2b:64:54:9f:78:48:57:11:e1:2e:6a:09:ee:d2:
40:a7:0d:11:de:61:75:41:ac:b3:b6:88:98:a3:b1:
cb:79:05:94:aa:43:d3:19:a2:27:ed:00:97:a0:b2:
3e:e5:65:0b:17:e7:84:38:32:55:90:e9:64:4a:f1:
6c:60:3a:3e:7c:8a:12:de:d9:fa:5e:6d:2e:6f:3c:
7b:1e:5a:fe:a1:05:e8:8f:d3:87:fd:06:46:0e:b0:
e2:22:c4:ae:0a:21:3a:29:2d:ff:7b:fb:75:e1:f8:
4b:a4:b2:6b:6f:96:72:cf:fe:7d:f8:02:81:73:cb:
64:cc:81:22:b3:69:cb:0c:a7:ac:64:8b:56:e0:11:
20:03:99:58:26:1e:f2:b0:56:9d:bb:14:57:f1:a6:
47:86:15:2b:0f:6a:00:25:5b:e7:02:65:e9:5f:ce:
f6:39:0a:65:93:8e:58:0e:d1:01:f6:92:36:47:e8:
b2:6b:98:0f:17:cf:fb:a7:48:0d:b9:b4:c8:18:50:
fa:f0:32:a6:38:40:93:cc:ee:45:77:3a:10:7c:31:
43:97:1d:be:c9:d7:a9:2e:e7:10:21:cd:7b:c8:27:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:70:BF:9C:7E:19:C4:5C:55:02:86:AA:1E:14:73:8F:8B:9A:22
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:43:88:b1:c7:69:32:22:8f:a3:be:9e:9e:29:c2:e3:75:41:
6e:38:a6:2c:ee:6f:43:c5:e2:5e:cc:f4:72:69:58:1b:37:1a:
b2:93:8f:3a:d7:12:7c:8e:46:77:19:48:8f:58:cc:e3:db:e2:
24:8a:3d:fd:48:ad:b6:ca:21:4f:ce:03:90:ad:d0:f8:8c:05:
33:a3:f4:d7:73:68:7b:b7:7d:06:fe:ad:2a:91:19:55:81:23:
3b:17:e6:32:8d:20:19:70:0b:06:fd:ad:74:b2:46:40:8f:d4:
d9:6a:7f:c0:9d:91:ec:2f:6a:b4:cb:dd:18:e9:9e:db:9e:13:
a4:cb:e0:08:c3:f6:43:b9:2d:55:60:ba:06:fe:ec:ec:f2:a0:
41:5f:94:be:92:4d:21:11:82:8a:8d:fd:b0:ad:c2:13:45:fa:
bb:bd:3b:31:55:85:08:85:cb:d8:17:49:7f:16:ea:db:c4:16:
19:af:34:1d:86:46:9a:56:74:f1:6c:7a:fd:d9:c1:6b:eb:d5:
03:23:0e:f4:5f:a3:76:ba:9f:9d:d7:6c:5b:64:09:64:48:46:
4b:7a:43:85:c2:9f:50:28:c9:39:79:eb:7a:7d:1c:5a:4e:39:
e0:e7:ba:5c:f3:e7:61:cb:5a:01:eb:24:e1:06:b3:3c:d6:78:
5f:68:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:23 2026 by rpki-client