Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: bZKQk8yhQJXN75/XhUU2NhB5nub5qtjipo00dusrCOY=
Subject key identifier: 6A:8D:74:72:57:04:FF:45:66:F4:D1:1F:7D:37:AA:19:FA:F8:6D:36
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 019CAC1040C4B9C5CC44118BE4C1D4E3EA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: CjZ4vflTcV/s5n1sOvXMkdBhwseZYSsQC1N48X55MGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:40:c4:b9:c5:cc:44:11:8b:e4:c1:d4:e3:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=6a8d74725704ff4566f4d11f7d37aa19faf86d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:e1:42:c7:8f:6f:d1:b6:8b:ae:59:33:ac:
5d:33:fb:a4:f5:33:63:63:10:70:9a:c8:51:c1:a6:
d5:48:94:ff:ed:27:c9:a8:4f:c8:f9:56:e4:c0:e9:
94:c6:52:7e:27:5b:17:c3:2a:c7:ca:99:54:cf:25:
47:e9:0a:30:35:53:b4:9f:4e:4e:b2:ca:14:4f:99:
5a:d6:bc:a3:96:d8:d2:dc:6d:15:5c:d4:b4:6f:8c:
f6:0b:ff:c2:90:d7:87:9a:e7:52:c0:a8:1b:9b:c1:
13:7d:ad:d0:95:90:40:c3:dc:fe:5a:8d:87:9d:ba:
8d:6e:2d:75:24:0a:57:15:93:b9:29:cb:59:dc:6c:
72:4a:06:34:fa:41:94:67:9e:6a:fc:7b:0a:e3:6f:
b9:cb:83:27:ec:97:40:25:72:34:e6:69:eb:6d:50:
4e:cc:bd:18:92:9c:94:2d:26:5d:4c:86:92:06:4f:
71:e8:25:8b:4d:4c:ab:4e:eb:af:56:40:0c:20:96:
22:27:fe:6d:d9:ba:bc:c6:54:16:96:77:f5:39:c8:
17:53:53:b9:b9:69:f0:68:b9:96:7a:d8:b3:de:12:
40:61:6c:fd:b2:31:25:46:e6:18:89:bb:93:b3:de:
86:40:b9:11:96:38:c1:87:67:51:d1:40:2e:e1:12:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:74:72:57:04:FF:45:66:F4:D1:1F:7D:37:AA:19:FA:F8:6D:36
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:62:1f:5d:13:06:db:f5:f9:08:5e:c9:8e:6f:73:0c:eb:a5:
3a:a9:75:a1:0b:89:08:7f:6a:90:1b:fd:5d:11:63:73:b6:3e:
08:5b:34:53:1b:a0:f3:0e:6f:3a:4c:3a:43:3c:7d:c4:e7:65:
13:7f:a8:5d:58:eb:b7:6f:9f:32:66:a8:9a:8a:c2:f7:11:9d:
69:d2:c3:5c:fb:90:cb:32:7e:ea:a7:7b:b7:f6:dc:3e:79:fd:
c3:2f:8e:4b:e1:37:71:a0:49:96:5d:43:07:74:22:2e:f5:72:
f8:98:cf:51:94:72:aa:fc:0f:7b:ef:5f:eb:2e:b4:c1:a7:6f:
47:3d:e7:04:8f:8e:0b:56:46:5b:3d:1a:5e:15:85:91:7b:9f:
77:b6:24:fe:c6:d2:61:cb:8d:9c:ea:33:ab:49:43:23:72:eb:
96:74:1e:91:b1:71:b4:14:d5:08:b5:1c:cd:b6:5b:8c:90:ee:
b1:e8:a0:c1:25:2f:95:e8:8b:d2:63:9f:e4:a6:a3:a2:d5:27:
4d:d6:53:ea:54:47:3b:7f:76:6e:4d:be:a4:09:a1:b3:ae:4d:
75:c2:9f:50:01:2d:29:88:96:e0:57:83:bf:79:cf:3e:aa:fd:
9d:eb:95:ad:5f:d5:14:29:67:86:a8:24:fa:e4:23:44:a8:d3:
0d:db:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:43 2026 by rpki-client