Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: UUa4+mh1SN9hCer9ERlF7tyIBgffXtMsrm9uTBvtPLQ=
Subject key identifier: 88:E8:02:E0:64:B5:BB:4F:61:90:0E:C5:5E:7B:88:1A:69:7D:DB:24
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019CABD9CC227760BAFB3D0C0417DA74D0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: L3dsNuCYesjLEdd7H6z3I5lgNfQ.roa (hash: FRWxg7BGWCOKTf1SDbrBIvnqHEUQOUcCZw9myXVs5sQ=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: U2tYKppHTWJx5dF/Om0ltR7L9SzED0Lm4rzAsxkoz34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cc:22:77:60:ba:fb:3d:0c:04:17:da:74:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=88e802e064b5bb4f61900ec55e7b881a697ddb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:f1:12:b0:2d:ed:74:23:65:5d:bd:25:e2:
9a:f9:7f:2a:7e:9f:98:21:2e:fb:88:00:02:db:c3:
18:7a:b1:1a:14:86:a6:08:c7:84:04:a0:75:17:f8:
86:96:d9:b2:e3:3b:b8:83:43:db:46:a3:cd:10:34:
ab:ec:8d:d6:2c:67:fa:40:e6:97:c3:b2:78:db:70:
bb:78:ba:cf:e0:24:cb:be:2c:b2:15:ae:c9:15:e8:
0d:1e:19:1d:51:f4:ab:43:ac:d8:88:37:9c:3e:d0:
28:af:b3:cb:00:02:9a:64:2d:85:4a:17:5d:4b:ce:
e1:12:16:18:3e:06:cc:1a:2b:39:3c:66:90:c5:48:
cb:d8:5e:5c:18:a8:57:dc:48:53:b3:f1:87:2c:00:
40:83:3a:62:18:75:85:a0:8c:01:58:71:a4:e5:87:
6d:e6:ae:9b:b4:84:25:68:5c:5f:50:e8:83:23:b3:
7f:6a:5c:30:fd:28:4f:80:47:72:8a:b4:4e:db:33:
bb:2e:c9:75:4b:bf:5d:f7:75:74:70:50:da:fc:ca:
83:39:3c:4b:84:0b:f6:b5:c9:3f:4c:f4:dc:bb:36:
35:9d:c4:78:dd:d8:85:25:99:80:cb:05:ef:29:ed:
f3:a6:86:15:15:64:93:64:92:16:b5:9a:ec:61:80:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:02:E0:64:B5:BB:4F:61:90:0E:C5:5E:7B:88:1A:69:7D:DB:24
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:93:cc:b6:89:a5:d0:c5:25:9d:09:bb:22:ea:8a:e6:0a:
32:59:94:46:9b:f9:4d:2a:95:50:26:12:0a:50:5c:77:ee:51:
e7:1d:8f:7e:60:ad:db:06:d0:c8:d1:e6:d8:f2:3e:27:25:90:
89:a9:e6:8e:ab:e5:76:c4:a4:07:3a:46:17:79:23:e8:2b:ca:
5d:48:08:8a:45:20:1c:31:88:05:ba:23:8f:5f:02:0b:d4:32:
a2:18:d4:6c:c2:c5:b2:b0:4d:12:3b:83:1c:4d:7a:6c:aa:54:
6d:19:8e:37:11:8c:e3:b9:55:66:86:6e:23:78:fe:b7:01:b4:
60:2a:8f:17:9c:a9:b8:39:7f:e7:b6:b7:e6:26:b3:44:5d:ac:
42:ea:dd:45:44:0f:85:28:05:19:1a:be:3e:17:74:69:68:33:
ae:96:a7:49:56:c6:bd:be:d4:f7:03:71:06:3a:e7:8c:ec:a6:
65:5a:47:4c:e6:3d:f6:3c:60:bc:05:3c:04:aa:8a:eb:a6:32:
03:ba:cf:dc:0c:46:d5:37:9f:dc:a9:1f:f1:e7:f0:35:b9:a9:
7f:8e:b5:f9:eb:ec:33:3f:af:f5:aa:64:36:b7:f9:b3:13:ff:
4c:2e:56:99:1a:a5:ab:76:5a:2b:0f:78:77:28:76:d4:bc:d1:
2c:8b:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:48 2026 by rpki-client