Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: 6Q8d7TN5+b5qWuArjukJ5wBenh2W0wIBucCHuwyz/Rs=
Subject key identifier: 5F:01:43:1F:8E:D1:D4:CE:8A:7B:96:5C:3A:27:55:BB:96:9B:EA:2C
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 019CAA58A12DFBE9B7D1A430946F2D99B7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: PYjTIMo/CylNE8TZhlYwxcWSMEm3SKsEI0nSZul19wA=)
3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a1:2d:fb:e9:b7:d1:a4:30:94:6f:2d:99:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=5f01431f8ed1d4ce8a7b965c3a2755bb969bea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:25:ee:b2:7a:f1:94:f0:de:aa:ea:cb:d5:
3b:38:75:25:00:09:8e:79:0b:b7:62:e5:24:7d:a8:
39:ab:ac:91:e9:61:63:f2:6d:7e:16:53:a0:bd:a1:
45:fd:c9:37:ae:0e:f1:0d:51:97:82:96:30:3b:c2:
0d:f9:d7:50:a3:f9:51:30:05:28:98:c9:9f:bf:33:
70:19:15:08:26:34:ff:53:02:93:1f:e5:c9:13:0d:
0f:16:45:62:b7:bd:d7:c7:fd:54:74:42:95:7c:2f:
c1:05:1c:8d:ab:fd:26:33:c9:5f:ec:cb:f9:ff:53:
95:04:d1:bc:7b:52:b9:75:a4:0d:d4:32:96:50:cb:
d2:49:81:0f:cd:cb:6b:f7:52:37:49:6d:a7:dd:84:
f7:e3:50:df:b2:25:d9:62:95:2b:f5:80:20:6f:13:
91:0c:05:ea:ac:aa:b1:64:ea:2e:b2:2b:02:2b:71:
63:f2:0f:a8:6e:78:70:89:ba:49:5a:1c:10:d8:64:
86:01:16:49:f1:4c:6f:e4:bb:50:c4:76:f6:04:8d:
f9:87:6b:fa:37:7a:b8:5b:2d:e0:9c:49:bc:7c:23:
38:44:86:b5:9f:5c:45:3c:63:dd:54:42:29:60:cb:
8b:eb:bc:f1:79:ec:98:7c:76:00:4c:cc:70:dd:15:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:43:1F:8E:D1:D4:CE:8A:7B:96:5C:3A:27:55:BB:96:9B:EA:2C
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:f5:64:a9:49:a8:e0:62:8c:34:ee:4b:78:f2:db:77:7f:
52:32:ed:88:0b:fe:8f:fe:d0:03:52:b0:86:6e:79:b1:b2:66:
1a:70:66:21:ab:be:7f:26:2e:68:22:f8:07:6a:72:a1:d3:b2:
b7:48:98:a4:68:c4:4f:6d:90:13:de:23:6d:02:32:69:c0:f2:
38:50:69:1f:ba:df:05:d5:5b:21:7d:04:70:7c:1b:27:5a:30:
f7:b8:95:6f:85:db:e8:8a:f8:94:8c:f2:a8:9a:10:2c:56:d2:
f5:43:e2:10:12:6a:c5:a1:aa:71:a4:b8:e3:3e:41:25:cc:08:
41:43:84:d7:ff:7d:69:0c:b7:1d:fc:8b:b8:c1:8a:db:fe:21:
97:fc:e5:eb:31:a8:3a:4a:bd:17:3d:97:f8:ca:8a:df:3f:fa:
e8:e3:88:36:29:c0:31:76:6f:cf:45:f3:87:8e:61:19:29:98:
35:de:c6:31:5d:b1:02:8e:73:3f:5d:34:6b:3a:8d:0b:7d:7d:
82:1d:df:b2:e4:14:7a:bc:e5:09:92:b9:01:0f:e5:b9:83:e3:
e7:3e:9e:64:0c:31:e2:c3:90:71:d1:7d:fe:b6:c2:da:a6:c8:
f1:8c:1a:46:32:8b:97:79:8b:22:f5:a3:49:f0:25:18:84:59:
92:22:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:49 2026 by rpki-client