Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: ZzblMUagwT+YlaV06T8foHPpxFioKakEiObJDrJwkO0=
Subject key identifier: 02:CE:8F:18:EB:17:2E:6C:EB:87:F9:D3:B4:64:2F:50:AD:4A:0D:30
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019CA9B3DA94E95A634E1A488941511254AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 1294
Signing time: Sun 01 Mar 2026 14:01:02 +0000
Manifest this update: Sun 01 Mar 2026 14:01:02 +0000
Manifest next update: Mon 02 Mar 2026 14:01:02 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: vcnvkHq/71vFUJXK8/j+ZXjyAG/zDumHAPjGlYyWrhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:da:94:e9:5a:63:4e:1a:48:89:41:51:12:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Mar 1 14:01:02 2026 GMT
Not After : Mar 2 14:01:02 2026 GMT
Subject: CN=02ce8f18eb172e6ceb87f9d3b4642f50ad4a0d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:b4:52:c0:7a:9e:cb:e7:7c:9c:cc:14:a1:
4e:99:1f:bd:b2:d5:56:a7:d6:2f:01:4b:c6:02:2a:
f7:73:37:3f:75:99:5c:0f:cd:ec:50:4c:80:68:23:
2f:9e:33:24:cc:6b:89:4a:0c:6b:11:50:9e:17:b8:
3e:50:24:e4:49:3d:a1:f2:2c:b3:ee:7c:bc:26:68:
bb:f7:1c:8e:6d:62:01:79:63:4a:0b:d6:de:cc:d5:
90:b7:ef:59:52:4a:3a:24:74:aa:78:9a:f4:f2:bd:
c6:d8:be:60:e1:e1:09:d8:c7:09:61:5a:07:1a:52:
db:a9:8f:df:75:f9:e1:1f:f9:03:7b:cb:13:f6:5b:
6f:c3:74:20:4b:9d:f2:15:96:1c:24:5d:5f:77:df:
69:fa:7d:c0:15:9b:6c:7f:cf:77:c4:4d:27:2d:2f:
67:ff:6a:48:13:9e:06:07:42:a6:f0:2c:62:b3:b4:
d7:5c:8b:63:49:6f:89:71:bd:a3:4f:d5:4a:38:89:
58:10:d5:b2:79:88:52:08:58:52:ef:90:88:d1:c6:
24:f3:0a:54:9d:0b:22:e8:89:db:5e:a3:b5:6b:e9:
75:c7:b5:7f:2d:52:4b:3a:8d:af:3b:b8:3e:64:84:
43:f2:ba:34:91:91:80:f0:fb:da:73:80:4f:d1:45:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:8F:18:EB:17:2E:6C:EB:87:F9:D3:B4:64:2F:50:AD:4A:0D:30
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8e:a3:1b:52:dc:99:5d:e3:70:28:53:6f:a9:27:6c:44:c1:
4c:71:50:03:c7:96:c3:cd:ec:7b:a1:ff:ac:82:d0:88:d9:07:
3b:a0:72:5f:b0:fa:10:64:81:4f:ed:25:67:4e:38:3c:18:df:
21:d3:e0:de:33:63:31:02:c9:8e:ba:a2:e2:cb:4a:4b:b7:64:
cf:cd:d7:e4:c3:a1:ef:08:0c:8f:6d:ef:b0:3e:d6:97:3a:9e:
b0:41:d9:04:39:ec:89:ea:69:33:2c:ae:ab:42:e2:5c:97:68:
24:42:64:cc:c3:af:89:f5:cc:c5:77:8d:87:28:76:f5:de:96:
ca:5a:b4:ed:50:6d:ab:9e:a8:ad:75:a9:d8:b1:62:00:41:fb:
71:fb:d7:d9:79:36:41:40:57:c6:bc:6c:cc:c1:90:c6:6a:01:
40:a3:2b:fd:9e:8e:4d:84:b7:6c:5e:20:7b:ce:03:8c:e0:39:
87:66:2d:eb:b0:ec:05:2c:7b:7c:b8:ba:be:a0:d0:06:34:26:
6a:28:80:27:d8:b9:ca:35:e8:c9:c1:0f:94:20:55:bd:f1:2a:
76:7f:a6:da:4d:7b:e4:00:9a:28:c1:f4:ee:9b:f3:b8:a7:28:
3b:0f:0c:18:78:3b:10:f9:de:fd:21:f7:25:5b:77:82:1e:4e:
3c:ae:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:47 2026 by rpki-client