Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: mXKx0jqsziGyUsg8C4L2BPNZNXWXK7oVjoganRiU7dY=
Subject key identifier: F8:D9:A4:66:E8:78:1B:4B:E8:40:6A:B3:2D:98:19:B2:ED:21:58:27
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019CAA5899764ADDE48EA9D6BB463828ABA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0C85
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: L2YNBVF/4P56J8G0z8EHlz1oo6DYDkvSX/nuA69w0nA=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:99:76:4a:dd:e4:8e:a9:d6:bb:46:38:28:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=f8d9a466e8781b4be8406ab32d9819b2ed215827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:b4:e0:21:ae:03:de:f8:e2:98:37:8b:5e:
12:8f:db:23:50:62:a4:9c:2f:b7:0a:43:93:6f:4c:
ab:82:d2:32:ed:18:13:ce:3c:b2:40:ac:3f:74:a3:
af:e8:e6:7a:ca:38:ad:ff:25:c8:95:b6:45:fa:61:
81:75:b5:0f:0f:af:2b:73:1c:82:c4:b5:7e:b8:c2:
f5:9d:6d:ca:47:af:da:bc:c0:02:b2:bb:d7:63:08:
1c:1e:f0:ac:95:51:dc:03:d2:13:cd:05:5d:65:24:
43:5b:cc:ec:71:d0:23:ce:4e:23:69:d9:d3:31:7b:
1d:b2:78:d3:2c:9b:56:ca:b3:b7:5b:3e:2b:1c:a9:
59:b0:2e:cb:5b:a8:a5:5c:3e:f8:58:c1:0b:93:32:
c6:da:64:42:36:11:3a:cf:ec:8c:c0:68:fd:eb:f2:
71:79:5b:68:45:ae:48:3c:00:10:b7:84:2f:54:cb:
21:a5:05:97:c0:85:8c:ab:bd:dc:73:83:a4:51:22:
e9:bb:a9:d0:93:bb:4a:e8:d7:96:17:f0:93:6d:2b:
05:d9:e2:87:a3:93:08:98:9c:6b:e5:9e:6f:56:54:
7e:bc:9a:83:a3:e0:03:a2:96:aa:5f:8d:8b:6a:01:
0a:be:0e:6c:9d:11:72:3b:8f:cd:a4:25:12:b5:02:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D9:A4:66:E8:78:1B:4B:E8:40:6A:B3:2D:98:19:B2:ED:21:58:27
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:11:a8:a1:2b:b2:42:68:a3:63:c8:a6:ce:ff:76:fa:ec:
c2:10:98:43:27:7b:07:75:17:78:aa:24:87:d2:e4:6a:0f:fb:
7b:77:de:e8:dd:49:06:85:fd:ab:3f:9c:be:88:1b:70:03:24:
89:1b:d0:68:b5:9b:45:ba:6e:60:ff:a9:47:9a:02:7c:ab:4a:
78:4b:77:b0:40:f9:ee:28:9e:45:7a:4a:77:e5:ce:94:40:70:
1b:23:e9:6c:0b:a9:94:23:51:6d:7a:97:61:87:2e:8b:a8:60:
56:9f:3d:01:53:0d:53:47:d4:df:f0:fe:38:43:c7:9c:9d:f7:
4e:ac:8f:88:41:5c:71:48:b8:0d:49:7a:8b:dd:3d:10:fa:8c:
8d:3f:8c:ff:ff:f3:79:7a:98:52:12:03:a2:6c:af:4d:cb:f6:
5d:e4:65:52:2b:9f:29:81:a8:49:0b:b5:aa:d0:bd:d7:79:f4:
fb:47:04:dd:4d:b0:dd:d5:c5:d9:3e:68:c8:94:d1:6c:cd:61:
52:b1:eb:74:a6:84:62:07:a2:bf:f2:19:98:1d:60:a6:4b:12:
41:ff:87:60:c3:a4:09:68:b8:23:16:e3:1b:e3:66:7f:1c:64:
be:ea:34:d8:3b:bc:47:1f:79:f9:10:95:4c:f7:af:af:e4:8e:
f0:5f:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:24 2026 by rpki-client