Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: 05Gfb56/atRpma9z9i1e/SKC6Fv1gswepQykSRfNcRM=
Subject key identifier: 20:79:EB:06:DE:89:A9:44:1B:AB:96:43:FD:20:96:28:4C:91:2A:B3
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019CAA8FCCE23953674FD204C9AC89FEA5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (hash: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: DJfrl2ZQBvuGJdgFz1RmwqaDzIGwaUdpdhB/n/TZ0aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cc:e2:39:53:67:4f:d2:04:c9:ac:89:fe:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=2079eb06de89a9441bab9643fd2096284c912ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:ce:cf:53:92:83:e6:aa:52:1a:fd:fb:5a:
3e:c7:b1:93:bc:0b:6e:d7:55:75:ce:88:a1:15:ca:
af:8f:bf:f4:bb:91:39:95:cd:8e:db:79:8c:07:8e:
21:27:fb:c3:d6:5a:02:03:c7:e1:2b:bb:67:ff:84:
e1:1f:ef:87:cd:cd:fa:ee:2c:10:8d:4f:4f:57:c3:
d3:73:1f:62:ef:cd:53:33:c4:60:fa:38:73:e8:40:
5a:56:4d:56:50:0e:b1:9e:3d:3c:dc:60:02:8f:26:
df:78:53:94:a4:da:7c:a9:0e:3c:ab:49:ae:81:79:
20:42:76:17:0e:49:82:9a:6d:51:f9:cf:5a:cb:1f:
87:a7:ea:21:41:74:90:39:da:e3:85:37:9b:a7:6f:
00:14:96:c4:32:46:4b:d3:aa:0d:9b:35:c5:19:b4:
91:ad:16:cd:53:41:a2:4e:f8:58:71:7c:49:a4:82:
c3:1d:26:a6:bf:d3:9e:b9:00:47:f4:36:e1:0a:e0:
74:4f:21:b4:f9:b5:15:17:aa:68:cd:de:d8:14:d8:
c6:45:f0:cb:72:4d:18:9c:fa:66:a3:97:2f:d8:67:
17:03:d0:00:bd:3e:74:9b:19:c7:55:7d:46:0a:5c:
c0:f9:e6:b6:80:6a:d7:87:ce:74:a6:19:45:44:4d:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:EB:06:DE:89:A9:44:1B:AB:96:43:FD:20:96:28:4C:91:2A:B3
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:66:e1:c3:d2:e9:c4:92:49:cb:c3:0d:e7:dd:e2:b3:61:54:
dd:c1:35:94:4e:d0:4c:0f:e3:4b:ae:7b:48:a3:61:fa:18:15:
0e:f4:8f:ca:67:27:76:68:39:ba:d0:39:6a:d2:15:cb:89:e5:
e3:da:e7:d6:bd:42:9e:d4:e5:fa:3a:9f:46:8a:0e:d0:3b:40:
80:3d:ad:a9:54:36:95:ae:ff:dc:36:bf:7a:50:3a:31:60:b4:
b6:1d:68:86:45:f8:31:54:dc:27:ea:af:af:e9:16:16:9d:eb:
4d:99:0d:74:be:82:70:92:d9:ad:b9:20:ac:f5:56:05:3c:f7:
8a:bd:de:37:db:a5:01:e8:c1:eb:ea:43:21:79:b1:79:cf:48:
c4:10:1e:52:da:bc:12:93:62:17:12:ae:de:13:e6:9f:65:6c:
5c:20:9c:8f:49:68:9d:18:19:ad:48:c5:fe:fb:84:42:2a:f8:
bb:f0:62:f6:ef:e6:92:5d:fd:ea:a4:ed:3f:76:70:a9:9b:bb:
80:ad:51:b5:c1:1c:1c:7f:8a:65:3a:e2:32:68:d3:38:d4:c2:
0d:da:22:10:6d:60:80:6e:b5:8c:62:68:bd:10:36:b5:3c:89:
c7:49:57:27:60:ec:30:7e:94:ed:2c:57:2b:d0:39:94:d0:56:
7d:45:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:02 2026 by rpki-client