Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: edY1OgAMF6QfvnzvuF9X+IGXmzPUxxXujS/ggyDsmrw=
Subject key identifier: B9:3D:49:B2:F8:64:C5:EC:FE:EA:2A:F7:7E:26:8B:81:76:F3:8D:4C
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019CABDA00B19260FF8C30571CE342403DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: ICqj8B3ghM13/8KlS50VtArSJzb9ltUW3iqgh0CKiAE=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:00:b1:92:60:ff:8c:30:57:1c:e3:42:40:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=b93d49b2f864c5ecfeea2af77e268b8176f38d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:9e:2d:c6:4d:d9:46:be:f3:db:3f:2a:a3:
1f:dc:27:eb:da:8a:a1:6b:29:ba:dd:31:34:40:d1:
b1:bd:34:4e:93:12:83:9d:28:63:50:ac:05:09:69:
eb:c0:57:7b:68:0e:89:7c:d9:c0:a7:f2:fc:a4:f9:
80:0e:2e:5b:65:0d:b4:02:b8:85:33:be:59:19:c4:
c5:97:9e:19:fd:5e:b1:df:08:55:c3:e5:f6:8b:8e:
00:13:78:85:2c:00:91:3e:e9:49:5f:d6:a9:72:c7:
43:87:1c:51:ed:3a:7a:a5:7f:7d:ef:0c:ea:ec:1a:
01:1a:8b:71:e3:82:70:2d:a8:20:ab:22:44:74:8a:
af:fb:3d:32:d1:d2:06:c3:b8:a4:d1:30:aa:6d:92:
35:9c:84:c9:26:a7:a3:bf:92:38:06:25:d6:78:b4:
81:51:1f:91:7c:6a:e6:f9:ee:fe:44:04:f0:f2:ed:
39:bb:f8:f5:bc:32:26:72:99:42:81:58:db:af:2a:
e9:20:1c:ad:08:8a:e0:59:31:15:e0:bc:5f:7a:95:
9b:4f:71:ee:ed:06:9f:cf:89:6a:09:6a:86:55:38:
89:83:15:ee:ea:66:f4:0b:a0:1f:46:79:fd:ed:aa:
c5:98:1f:4a:81:21:c1:18:ee:a7:f7:17:b1:cd:28:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:49:B2:F8:64:C5:EC:FE:EA:2A:F7:7E:26:8B:81:76:F3:8D:4C
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:8a:da:24:b2:20:3a:ce:fa:5c:5c:2c:9c:74:8c:53:59:
f7:bf:f3:83:a0:99:67:86:a8:70:06:04:08:5d:90:1e:c5:3d:
60:46:00:68:f6:13:52:4a:0a:11:c4:4a:f1:07:1d:a6:28:60:
12:95:c4:92:98:1a:08:c9:69:42:29:2d:73:3f:67:d6:f5:66:
72:8b:75:88:72:98:e8:a5:ca:53:a9:61:e3:a3:b7:97:ea:4b:
08:a0:b5:d9:fb:1b:c4:19:a6:ac:3e:2d:72:2f:bc:f2:ff:81:
a4:ff:c4:65:79:95:22:04:16:60:5b:fc:af:a3:21:c0:9f:94:
cc:54:bc:d9:a7:fd:43:97:c9:ab:04:27:a4:a9:77:81:a0:ec:
8c:e6:be:9a:bb:e6:76:09:d0:d0:4f:e7:9a:83:0c:55:9c:da:
ee:63:7e:2d:e9:f3:03:a1:ae:b0:4a:1c:a6:fa:f7:26:ff:b3:
ee:2c:2c:97:19:15:98:ac:e1:62:d2:f5:ab:25:dc:a4:c0:a0:
3f:db:51:5f:12:c2:36:62:03:de:0e:c0:69:c7:5f:63:8d:15:
e1:54:7f:b9:e0:48:77:0b:cd:7f:f9:47:39:75:0f:39:d8:6a:
cd:99:57:65:fb:37:f6:dd:d9:a5:00:67:6a:41:58:d8:57:c5:
47:e1:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:08 2026 by rpki-client