Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: T9a1flqu+iPnmsxlBv7LkTNBsT1NVAPua3VS35G+8dU=
Subject key identifier: D5:04:A8:36:84:97:7C:A2:CC:C4:FD:FF:88:5E:76:9C:D6:66:EA:E4
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 019CAD905052E126DACA763F8277B3A942E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: Q9i-FCkC-t1j39X8T_DbrADXSgI.roa (hash: hTcLuq6cpKXAgg3YJq/YAMv0+iDnhPDuX0a1jXYwiP8=)
2: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: cT4A2e5Iu+GQ32HX2uOhjvm2EMrRVCzY5m3cXAYghw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:50:52:e1:26:da:ca:76:3f:82:77:b3:a9:42:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=d504a83684977ca2ccc4fdff885e769cd666eae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:5d:68:33:e0:06:c5:a5:d7:bc:9d:56:c8:
1b:bb:f8:45:23:9b:a6:83:b5:2e:3f:a9:55:df:d3:
51:f9:f3:75:da:aa:aa:68:f2:08:bb:1d:55:51:e0:
86:cf:07:95:9a:7b:25:19:76:3e:b1:0d:90:04:6c:
30:da:e1:4d:37:11:8e:36:67:45:8f:b3:83:92:c8:
8a:ce:8e:a2:be:3b:19:dd:41:9b:0c:f8:5b:f3:21:
f5:1f:f4:99:e8:3a:60:de:05:41:0b:86:eb:fe:93:
e4:d1:cb:f6:e4:a1:1d:b0:46:f6:cc:e8:12:e3:19:
67:18:68:d1:a5:8b:84:b0:8a:5e:89:9d:f9:61:ad:
1b:7f:99:72:59:39:ae:62:9f:9d:40:d1:01:7c:a5:
c8:f0:6d:38:c1:e1:9c:97:36:51:ab:59:0a:81:c8:
b8:67:27:4b:7e:06:f7:4a:72:f1:f3:9d:f4:71:37:
2b:e7:ba:29:75:4c:8e:88:f5:09:ba:e9:4b:69:f1:
13:30:e0:d3:06:38:c0:67:12:7d:7c:9a:1f:58:b3:
44:0d:8b:fc:36:49:13:45:0e:6d:b3:8c:03:4e:97:
14:86:43:a3:3f:c5:92:50:54:23:a6:a5:5a:97:87:
35:1f:5a:0c:0f:fb:d0:8f:49:4d:91:06:61:ac:3a:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:A8:36:84:97:7C:A2:CC:C4:FD:FF:88:5E:76:9C:D6:66:EA:E4
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:58:ff:74:98:83:db:86:b6:b6:dc:d4:1a:cc:74:d5:b2:
0b:95:8f:b1:57:d7:5c:37:46:d5:3c:74:8b:0f:18:45:58:c3:
81:51:60:e1:a0:b7:3b:52:b7:b0:7e:0e:08:0d:65:db:5d:0b:
cf:0a:81:4f:26:d9:f3:d3:1a:22:81:5b:28:f9:78:27:f1:4c:
67:dc:88:c1:e6:70:b9:51:c7:b8:60:b1:9a:29:54:8a:36:ff:
f6:20:01:28:63:a2:d6:46:b9:27:17:68:3f:03:37:8b:d4:5e:
85:57:0e:06:f9:5a:c9:33:c6:f4:0f:26:4f:9b:23:45:c0:ae:
8a:bf:cd:da:7e:3c:77:96:d8:a9:cb:10:87:a6:93:d0:3f:a4:
33:ef:4b:43:6e:9c:38:8d:c2:c9:cf:27:e5:91:f0:69:d2:bc:
58:6a:7f:f8:62:68:70:86:11:ed:fe:8d:cf:af:e5:73:ac:ef:
65:90:34:bf:e8:7e:1b:86:e7:60:4e:aa:3f:0a:36:e7:9e:46:
84:b0:72:52:87:22:9a:1b:78:e7:fc:62:48:4f:72:4a:dc:c6:
c3:12:05:65:ad:39:cf:bf:ad:6c:df:56:1b:a4:51:07:d8:a2:
63:f8:1e:8b:0a:ec:42:19:a1:ca:ca:cb:10:7c:66:35:8d:df:
b5:ef:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:14 2026 by rpki-client