Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: RFhLc9/eA+vEYjCPtBLzkPpNmU+HeT7O85niK6MMyyQ=
Subject key identifier: FE:59:ED:40:D7:E9:FB:7A:69:DB:D2:CE:45:9D:FF:AC:0C:C3:DC:E1
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019CADFDF541CE309F5B4B6E92A7384D1AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0CA6
Signing time: Mon 02 Mar 2026 10:00:27 +0000
Manifest this update: Mon 02 Mar 2026 10:00:27 +0000
Manifest next update: Tue 03 Mar 2026 10:00:27 +0000
Files and hashes: 1: puIyv7NHFmCYG4FzBMGCiSPBMAI.roa (hash: i1Aa75xsqKrbXHK4auY98NNg+6xdfgvwz966P5kACS4=)
2: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: 1aIeu1JchoD0AZ20PF6OrAp6L33UGfZMk0PQtDI7gtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f5:41:ce:30:9f:5b:4b:6e:92:a7:38:4d:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Mar 2 10:00:27 2026 GMT
Not After : Mar 3 10:00:27 2026 GMT
Subject: CN=fe59ed40d7e9fb7a69dbd2ce459dffac0cc3dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:7a:e7:a0:79:9a:d6:68:07:03:df:e5:75:
56:c9:7d:4e:4d:7b:22:bf:3f:64:2c:d4:b7:b6:e5:
d9:54:cd:08:6c:f3:72:08:f9:12:03:bd:35:83:df:
23:c0:53:c3:10:ec:9e:3b:69:2b:7b:2b:70:0d:c7:
1d:76:48:33:89:65:da:e8:fa:49:f0:98:94:9a:c8:
04:10:1b:a9:50:2e:ff:e4:7c:ed:b9:bb:9c:3d:ee:
cc:67:12:b7:70:1f:bc:97:60:36:8b:b8:17:54:04:
b2:cc:3c:0a:7f:27:44:1e:e1:b5:f7:d7:f6:ca:a5:
97:d0:5f:d7:88:a2:28:d0:c7:87:8e:03:ad:4e:49:
cd:f3:78:4d:a5:f3:68:5f:61:a1:ca:14:80:da:f7:
0d:68:f1:04:c5:2f:0b:0d:c2:17:28:09:cb:27:c7:
83:14:7a:9c:6c:14:92:0b:64:2f:4f:ad:61:c9:f7:
65:34:02:74:5e:39:64:32:53:52:59:92:d8:e2:76:
56:24:f9:24:e0:42:1b:c1:d1:17:71:aa:9e:09:87:
fc:8b:e7:ab:b2:c3:3b:d5:3a:0f:69:33:94:05:fb:
d7:13:5b:fb:06:d2:6c:73:08:3f:78:40:c1:64:9b:
42:b9:0f:04:63:8d:27:1f:da:be:d2:c7:1b:52:7d:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:ED:40:D7:E9:FB:7A:69:DB:D2:CE:45:9D:FF:AC:0C:C3:DC:E1
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ed:08:ba:21:47:e4:df:dc:b0:88:27:f1:5e:0c:69:2e:c9:
8e:6b:f3:7c:89:f3:2c:5f:c9:9a:cd:cf:f8:19:7f:30:79:a5:
67:7b:3b:90:8a:21:5d:45:69:7a:03:0f:c1:2a:e9:5b:90:b2:
cd:c2:1b:1a:7b:c0:1f:4d:9a:66:b6:c5:ba:ac:45:92:ea:a7:
42:77:72:70:75:5b:89:2a:dc:26:e3:2c:6d:e2:91:86:4b:b5:
29:01:a0:d8:d3:f6:18:63:98:c3:68:6d:42:34:2d:f3:b7:42:
1c:42:e8:7b:74:80:c9:bf:d0:2b:9c:31:88:4a:49:3b:1b:9d:
07:4d:d3:84:43:40:3b:74:5a:27:84:03:22:a3:cd:91:5e:b6:
89:46:c6:6c:92:be:65:25:1a:e1:05:f5:7e:b4:23:1d:24:88:
64:97:d9:57:43:ac:ed:c6:9f:7f:12:6a:28:1c:bc:09:6d:31:
33:35:f3:06:76:4a:bf:d8:79:68:ca:b7:43:be:87:20:4a:ab:
e4:7b:f6:0c:24:f9:82:09:8f:41:1c:a0:0e:26:59:ac:62:37:
6a:75:0b:f1:be:49:52:1f:f6:bc:89:6c:76:4e:0c:1d:95:0a:
63:80:c7:40:8b:e1:29:74:35:56:13:9b:a7:59:3d:a9:d8:d8:
e4:91:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:54 2026 by rpki-client