Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: t17qp3SAYOpvBW81L5b90xYGP4D6a8xurcLwctPsJ/M=
Subject key identifier: 8A:47:35:F0:DA:47:A6:5C:73:6A:AB:E2:00:A9:10:C1:EE:96:29:E6
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019CAB33FBC2CB0A5E6AB63416ACA7FC9BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0BF3
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: +wS9i7PSw9oSsgxLsG9fZnF51kq+lgITT7uRad7FJNk=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fb:c2:cb:0a:5e:6a:b6:34:16:ac:a7:fc:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=8a4735f0da47a65c736aabe200a910c1ee9629e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:52:09:5e:ec:56:15:a7:73:f1:33:c5:33:
8f:75:00:be:91:89:76:4a:25:d1:e2:2b:1b:2e:90:
c4:fe:9b:b1:e0:55:c7:c0:02:13:b1:02:88:7e:2b:
35:d5:4f:ad:73:f7:91:f0:1a:27:c4:a2:31:97:ae:
b3:b1:9c:0a:52:15:93:5e:e5:ca:ec:8f:70:80:37:
4f:ec:ee:5b:2d:e1:47:93:b1:e1:eb:6e:79:7a:2b:
e6:11:af:b8:15:9c:fe:7a:06:5a:0e:b5:99:b6:f0:
83:d5:fe:9a:c1:45:cd:9a:ff:dc:76:3d:d5:fb:d1:
b2:ed:45:71:33:29:9f:6b:33:45:fd:a6:d3:3d:b4:
8a:9a:6b:35:c4:90:f2:7b:41:6f:b6:d0:3a:f2:18:
3a:a3:4c:38:23:42:36:1f:84:84:1e:2e:16:19:dc:
2c:e0:c5:77:12:89:c5:4e:c6:a6:7c:5d:0a:bb:88:
ea:ca:c1:1d:27:f3:a0:3e:d0:d0:e5:e2:8a:93:f7:
27:89:29:f2:ba:52:b2:52:24:5b:55:fa:de:c3:3c:
19:1a:9b:60:57:53:5f:87:0f:71:40:20:9c:e4:5b:
0c:2a:01:f8:01:d0:61:2b:86:4b:45:ca:05:b9:e5:
dc:83:3d:bd:b6:e5:1f:94:60:83:c7:88:8e:4c:a5:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:35:F0:DA:47:A6:5C:73:6A:AB:E2:00:A9:10:C1:EE:96:29:E6
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1e:75:7f:e6:25:63:04:64:37:e3:ac:5b:d1:2d:8d:64:1f:
ed:5b:96:12:ce:ea:2d:77:fa:0b:a1:75:70:57:69:00:f6:d5:
2f:b1:45:3b:0b:af:82:67:34:4b:7a:e3:c8:82:f5:ff:4a:c6:
e3:b1:8b:4a:00:61:ab:08:2f:bf:62:1e:1d:d8:a4:cc:14:20:
19:5b:da:cf:a0:b3:68:39:93:3a:51:45:d5:d7:a2:b9:8c:4f:
64:69:48:51:70:a1:45:7a:17:e1:75:2d:e4:c4:90:47:a3:93:
49:03:fb:d5:dd:20:14:48:51:9d:84:da:c3:3e:06:e5:c4:a4:
40:91:13:bd:86:9a:0b:47:02:45:68:d3:01:a8:1b:95:2f:d9:
fe:7d:ff:d8:c6:08:e9:81:c0:21:6d:bd:62:2f:26:b2:f6:cc:
34:d5:73:a6:a5:91:a0:54:0c:9a:dc:28:b3:9f:b0:4b:41:2d:
e0:78:38:75:85:16:14:1d:3f:bc:51:8e:d1:3c:2e:f4:4e:a4:
49:22:63:98:c1:35:aa:8e:6d:4c:1a:55:b7:57:ce:ff:31:67:
28:65:93:b7:4b:a2:f4:e5:9d:f1:36:73:3a:01:4e:d2:c4:a7:
d4:30:18:8d:08:b9:ff:72:87:f3:44:89:5a:4c:06:ad:f8:26:
65:c0:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:09 2026 by rpki-client