Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: IwE3kERBTqqBlcewxhMEZOtHzAh2j6xHXdwJd15xtZo=
Subject key identifier: DA:56:2B:B0:04:92:CB:60:70:B1:93:29:EE:89:21:3C:A0:85:8A:52
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 019CAAC6B5C879EA6CE20F13D1D9A270C593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: jmKBgaX+03jHnqKATfcfhDcCWdejRH5yzfqUViPGuCc=)
2: mjDE2a2XV65rnlTfLw7oWAEHGqM.roa (hash: 86WbIxRaOZz2IzmvB047OshmE/5HOAZmfFRJwBM7Qcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b5:c8:79:ea:6c:e2:0f:13:d1:d9:a2:70:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=da562bb00492cb6070b19329ee89213ca0858a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:e1:71:d5:96:f0:71:c8:59:f5:29:74:9e:
1e:2a:b1:4b:12:60:02:01:38:54:92:05:08:e7:2d:
08:d7:4f:d1:7e:86:05:3c:d1:8a:1a:03:83:42:2f:
5e:31:9c:69:c5:c6:a7:4f:36:a2:eb:d5:c1:bf:c8:
06:ce:09:a7:fc:74:d4:6b:1c:c1:26:2c:b0:0d:49:
fb:56:5f:e3:8d:c3:50:83:98:ac:c6:64:c7:0c:63:
c7:60:8e:47:93:f8:e3:7c:7d:2b:c8:a1:14:a7:6b:
8e:47:bd:66:3a:6d:05:e5:13:72:5a:97:e5:d2:e8:
49:ea:55:26:a2:7b:1a:cc:e7:73:71:03:8d:0b:18:
db:a0:44:0d:ac:cd:7d:92:17:7d:3b:08:d6:f8:cb:
4a:97:6b:a4:d6:ca:a7:21:37:e3:ea:6e:4d:60:f4:
7d:7a:d0:55:44:e7:f0:4d:82:7d:66:45:df:c0:e8:
ef:8f:aa:41:ca:d5:72:3a:91:3c:83:87:18:93:10:
8e:f3:c6:79:66:3f:db:4c:3e:03:37:98:95:18:ef:
cf:84:32:20:da:2b:7f:57:37:7b:d7:63:ac:14:23:
8b:25:1b:57:3d:df:2a:13:7b:1d:a8:9a:d9:80:f7:
d6:dd:34:2d:8a:fe:4f:9e:d1:c1:ba:b8:5b:c8:49:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:2B:B0:04:92:CB:60:70:B1:93:29:EE:89:21:3C:A0:85:8A:52
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a3:b7:22:7f:2a:49:c9:ad:f2:9f:6c:b4:c6:e8:3f:1f:6e:
68:00:51:b4:12:d9:6e:e2:a2:f1:8d:42:96:96:95:31:85:e6:
1b:5d:f2:08:01:99:c2:11:46:63:41:3a:51:26:33:62:9f:2c:
81:4a:57:ba:eb:6f:23:57:05:9f:e9:3f:08:67:06:e1:f0:68:
fb:7c:49:88:6b:1a:76:98:06:23:1d:c4:19:a7:6f:3d:da:7b:
ef:5f:46:18:5b:b0:eb:e5:06:2f:57:d7:6f:25:4b:19:fa:0e:
f5:ec:c8:88:05:f0:a0:28:d1:d5:18:40:70:e5:17:47:68:0a:
ab:aa:ee:f3:1a:51:74:8a:b2:37:82:7f:df:56:d6:e3:03:5a:
fd:97:c4:32:96:68:f3:ca:8d:1e:15:b2:05:06:18:6a:b6:48:
2c:8f:64:54:2d:c2:2c:ae:ab:31:0e:11:93:d9:73:d2:9f:d7:
9d:05:45:c7:9f:16:55:30:fe:06:ed:b0:74:b9:b5:4a:ba:f0:
4f:3d:cc:38:58:69:96:b7:fa:2e:9e:a5:ce:61:50:8f:b3:c2:
a9:65:c7:12:5b:32:3a:8e:ac:77:3a:c1:91:8f:cc:2c:6c:de:
c8:50:03:60:8f:1e:88:cf:4c:41:41:37:be:61:80:04:67:d6:
f7:95:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:34 2026 by rpki-client