Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier: GsMs1bfwi8mXX03Drr3/2YK3VX9zQlBs7fgoVDW9A+c=
Subject key identifier: 21:F5:01:40:77:AF:35:E0:97:03:77:65:0B:CC:BA:41:BA:93:D2:21
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019CA8D7F8B2305BB7FED9D33D04C3D5B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number: 185F
Signing time: Sun 01 Mar 2026 10:00:52 +0000
Manifest this update: Sun 01 Mar 2026 10:00:52 +0000
Manifest next update: Mon 02 Mar 2026 10:00:52 +0000
Files and hashes: 1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: IK1j3rFmmuerapATjnGfjjEjxmw7qqbA/KEZZfV1pqk=)
8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:f8:b2:30:5b:b7:fe:d9:d3:3d:04:c3:d5:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Mar 1 10:00:52 2026 GMT
Not After : Mar 2 10:00:52 2026 GMT
Subject: CN=21f5014077af35e0970377650bccba41ba93d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:f9:22:33:c2:41:d1:02:90:2d:5e:93:3d:
aa:10:24:f2:cd:7a:cd:19:dd:3d:11:23:88:4f:54:
a3:67:3d:6e:1e:68:30:da:b1:6e:c1:26:93:50:5d:
3a:e7:bc:96:ee:e0:d9:34:03:3c:82:a2:11:cb:3c:
1e:39:0f:22:e7:6e:f4:0e:c1:a2:20:99:7c:39:39:
c9:33:5d:90:9e:76:b5:f5:62:5b:e9:31:a7:c4:33:
e8:46:38:fc:67:c3:a6:6e:49:14:fc:72:ee:83:5a:
d2:db:d2:10:fc:8d:ad:e0:f2:45:9b:0a:58:5d:54:
14:2c:b0:b6:a0:56:8b:04:24:6f:5a:b4:de:c2:8c:
04:63:07:e9:f2:d3:5e:aa:7c:0c:c9:17:ee:6a:de:
cd:78:c8:bd:cc:83:68:29:c9:89:88:ac:e0:f9:68:
b1:0b:09:2c:8a:4e:82:10:9b:cc:1b:43:fc:38:24:
d4:f3:aa:4c:8f:50:7d:72:40:65:e9:46:2e:d1:3f:
7d:c2:98:b0:00:de:66:6c:3a:75:dc:c3:92:eb:63:
5d:cc:d2:0b:21:58:6f:4c:28:be:35:29:09:37:0a:
91:b0:c0:fc:f4:c8:1b:a6:24:ec:98:1e:af:1c:ff:
ca:79:1e:87:53:f8:92:9d:a0:6c:10:0d:f4:22:75:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:01:40:77:AF:35:E0:97:03:77:65:0B:CC:BA:41:BA:93:D2:21
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e5:c7:dd:3e:d6:37:7d:f5:22:3d:79:36:48:5d:dd:35:d6:
13:ac:16:c9:f1:ba:fe:f4:17:18:95:6c:83:5e:18:93:83:33:
ac:b6:49:bc:05:35:a1:2d:4f:ce:b2:e3:fb:a1:fb:bb:fe:37:
d3:aa:ed:55:ec:a5:90:1f:10:77:ec:88:62:12:5c:79:b6:ec:
ff:35:ed:79:d3:40:9a:6e:ec:8b:5e:a5:22:d1:8f:68:c7:0a:
a0:a7:f1:7a:95:6b:6e:bb:1d:0c:78:0e:ba:5e:7e:d4:45:66:
94:6d:18:fb:13:2f:fe:18:ba:fc:85:e1:d4:c6:6a:fe:f7:b6:
0f:b5:95:b3:89:f3:a7:87:d8:3e:3a:61:e6:8f:62:57:22:45:
b3:28:a7:0a:92:93:10:d0:3f:a3:9b:11:d7:61:38:cf:88:86:
4d:ab:7b:f5:d4:3f:9c:c6:38:34:6d:8d:ba:70:23:f9:7f:bd:
7a:5e:41:57:8f:88:3d:16:61:19:18:9e:43:2b:d5:66:6f:b9:
81:d6:9f:13:79:d6:8d:09:a8:17:6d:bf:8d:44:fc:fe:36:d6:
9f:1a:b6:37:35:5b:9b:93:c1:be:6d:a5:9c:ee:74:3a:e2:82:
02:4e:a1:f0:d8:9d:8e:49:9f:1c:44:3c:e0:71:71:24:be:15:
6e:2a:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:46 2026 by rpki-client