Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: RVtP7DJQ9rzA8DECrLN2vbyifW6+80b2A7nF2ce6XZs=
Subject key identifier: F8:3B:09:92:48:6E:1E:34:EE:58:71:C0:32:98:B6:FE:9E:C0:EB:67
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019CAD90907988C24279F9C0D9AE281D69AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1742
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: uzsKOJ/VGm6ssGpff4fhUu0okSfRqSKjQLaGEITtQ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:90:79:88:c2:42:79:f9:c0:d9:ae:28:1d:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=f83b0992486e1e34ee5871c03298b6fe9ec0eb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:32:e5:a1:6a:e5:39:2e:d8:25:cc:dc:55:
5c:2b:6b:3c:f6:ae:dd:bb:29:cc:dd:aa:c1:23:9b:
2f:8c:17:53:59:36:60:77:89:0c:38:1f:f8:4e:35:
72:87:7b:20:4d:9b:e4:2f:7d:14:d3:b4:73:fb:0b:
c1:3d:fa:b4:cf:78:e4:05:35:01:f7:47:fb:9d:b5:
59:3b:ef:21:27:9b:11:83:7f:38:8a:45:bc:ae:87:
64:af:5d:54:f3:26:56:82:4f:95:c8:64:19:a9:54:
82:7f:f4:59:df:a7:c2:e0:87:c4:65:c4:22:16:31:
de:4c:a1:60:ac:88:f6:ba:40:9a:f7:c5:6e:2f:53:
6c:29:31:03:9b:a2:fa:73:8c:80:0f:6c:fb:27:32:
41:e6:52:d1:75:5f:d7:be:83:5f:6c:4e:de:71:59:
00:8c:45:d8:0a:aa:e3:3c:75:f5:e1:38:11:a1:b1:
94:5d:59:cf:26:0b:0b:4e:92:0e:69:8b:6b:e4:38:
9d:e9:e3:9b:c8:6a:b2:50:59:d3:f3:76:fb:c2:6d:
9f:6f:c9:d5:5a:2f:d4:10:2b:b6:9d:54:16:f7:d2:
1a:2d:9d:d7:c2:1a:cd:78:37:2b:5e:1d:5b:43:03:
2c:62:e1:d9:26:92:ec:1f:96:23:68:5e:72:8c:bd:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:09:92:48:6E:1E:34:EE:58:71:C0:32:98:B6:FE:9E:C0:EB:67
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4b:f0:ee:a2:60:ed:a2:30:1b:5d:ba:1d:9b:b6:b4:44:cb:
f9:ef:cc:83:6c:54:11:85:34:a6:4c:b9:a9:98:82:82:6c:0d:
b6:04:3b:e2:6c:d6:50:f1:aa:00:0d:2a:a8:67:03:26:af:91:
0f:74:13:a0:2e:76:6d:8b:f5:77:6f:71:40:0a:e1:e7:94:44:
e0:bb:ad:77:e7:47:b1:81:23:e0:4a:dd:20:c7:23:4d:f2:e1:
92:62:19:f6:2e:27:24:20:b3:6e:7a:54:61:ca:33:62:d6:1d:
e5:61:44:93:30:ae:51:13:fb:1c:a2:80:a1:85:de:31:e5:b5:
49:61:05:97:5c:50:ef:f9:43:05:95:ae:35:32:de:95:0d:69:
ab:77:b0:19:20:f3:75:80:79:dd:3b:22:48:ee:e2:11:c6:1d:
df:99:e5:fc:23:55:5b:0f:0b:35:75:f9:21:60:31:e7:8e:92:
0a:fd:fb:fa:a6:d9:d2:21:71:a7:8c:88:5a:62:79:fa:35:17:
4d:63:31:b4:77:ea:fd:dd:ca:70:73:9f:73:c5:f1:ae:da:c2:
71:cd:da:c3:6c:6e:25:73:9e:d1:6b:34:77:7c:42:c0:4f:32:
c5:6b:09:6b:22:8c:c3:2c:74:71:d9:b8:92:02:25:8d:6c:c5:
23:83:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:23 2026 by rpki-client