Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: IA+njOPQCUCqSelzM2C9yLUDYcfwOW44g/X+YHK5GUE=
Subject key identifier: 10:C6:43:76:0F:00:33:87:B1:A2:76:DD:D9:4D:E4:21:5A:B1:76:AA
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 019CACB4EA02EBC3A6ED5BDBA3533EAF0B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: 1QjvKCsvTR0ccDdXAfoDfJPSyJE.roa (hash: qPTH0R4OHCDFXj8DShsOufuFq2W68jfp5X6XHwRILiE=)
2: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: PA0RHiG3c5W5MxU1jzywghZtHVcchr7DAzhf3rypoV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ea:02:eb:c3:a6:ed:5b:db:a3:53:3e:af:0b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=10c643760f003387b1a276ddd94de4215ab176aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:00:31:f5:d2:45:a1:ae:ec:9b:31:e0:09:
a1:62:d9:ab:cd:f3:65:a4:04:52:b6:dc:8b:85:e1:
63:97:b9:f3:81:ed:5e:bf:d2:2f:52:4c:fa:9c:2f:
e8:8f:8f:ce:b8:2e:a4:26:c3:bb:01:02:b9:b4:60:
82:3c:74:3c:d8:e3:a1:9a:35:5d:a8:c0:83:6b:0f:
55:cc:31:47:8d:73:58:4c:a3:74:fe:35:d8:5f:bc:
40:e9:40:35:11:c6:66:36:10:05:cb:31:7b:9a:33:
54:96:27:26:87:fe:74:8f:fe:ad:13:87:93:b9:2b:
90:02:87:88:4d:bc:8e:8e:a0:9f:c8:8b:b5:4c:f4:
81:16:99:7e:78:9f:84:69:5f:7b:50:b2:7c:93:ba:
9d:e1:f6:bd:25:bf:e1:80:89:ef:9c:4e:5b:c9:0a:
43:1a:7e:e3:30:ce:83:cb:15:b5:65:f7:14:2f:74:
67:5c:d1:08:cc:4a:3a:9a:26:3f:8f:6c:61:08:fd:
15:0d:e6:47:7c:18:32:13:5b:e9:e3:99:ac:0b:ee:
c9:7e:24:08:4c:aa:64:b7:bf:02:84:a9:5b:10:fd:
60:64:13:8a:10:30:e2:7f:d6:04:7b:77:fc:e5:77:
b4:df:84:fb:36:68:a6:c5:51:12:60:9b:24:25:91:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C6:43:76:0F:00:33:87:B1:A2:76:DD:D9:4D:E4:21:5A:B1:76:AA
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:c8:07:3f:41:2e:cf:eb:e0:09:d0:aa:ab:c3:b5:19:28:
d4:95:83:17:6c:5e:e8:04:b4:0d:f8:0b:0e:d2:c5:e4:4a:0d:
e4:e9:35:93:86:f6:e8:cd:fa:df:9e:04:4b:ff:49:8e:23:5e:
31:db:ba:24:d8:d3:a9:c3:75:3c:84:87:f6:f9:14:d2:56:17:
9c:6b:a5:73:39:d7:8a:d7:36:ed:36:b7:5c:3f:bd:49:9b:86:
51:00:4a:e5:cb:23:64:20:c6:1d:3a:8d:71:7f:9c:45:49:8f:
19:b1:6f:dc:81:93:0d:30:a4:4b:1d:03:1d:93:7c:7c:ea:79:
da:66:1d:07:92:5e:25:60:25:fe:38:a0:9b:8b:6a:97:58:ad:
4d:25:39:82:2f:8c:ea:5b:05:86:28:fa:db:cc:91:95:47:eb:
16:06:ce:9c:d4:60:e0:67:d8:a0:f4:e0:7d:d0:05:6c:6a:e7:
4c:79:76:86:9b:6e:0f:38:0d:41:19:ff:e5:43:c8:16:40:a2:
47:c0:97:c9:08:43:46:3b:69:bc:75:ea:12:ff:a6:72:4a:f3:
0d:5a:70:f0:87:f0:ad:fc:e3:91:ba:e0:9f:f3:f3:65:12:e1:
18:7b:2e:3c:79:19:c8:e8:e4:0e:06:20:36:0f:bb:61:ac:b7:
3e:fd:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:16 2026 by rpki-client