Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: k8RSgl7SIRweP4iuv41hy+XIR6gwe+CJb2SMHqCFwNQ=
Subject key identifier: 44:04:70:85:B4:75:48:C7:2B:05:76:DE:7F:04:79:80:95:46:D2:52
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019CAF1172F6AA2A847EAD97134138ACC79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 019E
Signing time: Mon 02 Mar 2026 15:01:22 +0000
Manifest this update: Mon 02 Mar 2026 15:01:22 +0000
Manifest next update: Tue 03 Mar 2026 15:01:22 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: wyDLJ+lWxnQinl6ht6PCWtTGIY2OGkKurz9faE0gD4A=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:72:f6:aa:2a:84:7e:ad:97:13:41:38:ac:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Mar 2 15:01:22 2026 GMT
Not After : Mar 3 15:01:22 2026 GMT
Subject: CN=44047085b47548c72b0576de7f0479809546d252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:5b:15:89:81:bb:ec:e5:a1:3d:9f:ec:d6:
22:c6:37:6f:50:ef:3f:89:07:4b:9b:a7:c8:ba:3b:
8d:29:c4:0a:72:97:5e:32:d1:6e:49:97:54:92:5e:
2b:a5:f3:02:18:c7:10:0d:1b:db:69:95:7b:c6:9a:
bb:5e:85:21:07:36:30:48:ba:ba:a9:0a:83:e7:24:
bf:e9:ca:44:4a:4d:e7:ac:9c:d2:35:e5:c8:97:21:
51:25:cc:1b:ed:ff:9b:8e:46:77:c1:98:fc:20:1b:
d7:fa:20:5d:e5:65:3b:a8:d5:69:38:fa:b9:e9:94:
cb:60:3c:2a:e3:2a:74:0c:2c:93:af:09:7a:56:9a:
bc:2f:33:b5:3e:a5:f1:3a:9e:83:46:2f:39:eb:c3:
9b:3d:d1:be:47:0b:11:8f:00:91:cc:64:55:77:4e:
e2:4a:60:74:61:d0:59:e3:66:c4:3d:01:da:3d:24:
fa:96:03:df:02:b7:60:b1:3d:78:2f:2d:b1:21:a3:
7d:e4:e9:7c:7c:1b:91:f4:78:5b:a7:88:41:ce:43:
ea:3a:03:70:dd:32:1f:1b:15:57:0c:04:12:89:71:
bd:d8:d6:2c:d3:76:6e:6c:e1:58:36:a2:05:ec:ee:
f1:21:38:37:cf:49:8e:f0:32:fe:43:3f:c2:47:bc:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:70:85:B4:75:48:C7:2B:05:76:DE:7F:04:79:80:95:46:D2:52
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:84:13:b3:6e:da:33:f5:bd:d1:eb:18:06:88:71:f0:c3:
e6:2b:d4:55:9b:18:ce:15:66:f2:63:ef:9f:6e:0e:b4:cf:2f:
85:26:99:6e:c1:c4:83:66:fc:52:89:74:e4:c8:4a:95:1d:e5:
7e:2b:c4:f7:91:8e:bb:03:75:dd:75:71:d1:98:84:93:8d:40:
28:fe:c0:6c:33:9f:fc:1f:d3:82:17:68:67:f2:cf:50:b8:8c:
e3:6d:b6:64:d7:34:bd:59:26:7c:1e:49:16:97:d3:15:a9:48:
e9:c8:f9:12:be:b8:82:28:f7:9d:ec:72:9c:0b:95:0d:27:59:
3d:fe:71:4b:87:c0:50:92:2c:52:96:3c:fd:73:74:4e:f6:5e:
79:a2:93:c0:e2:1b:e4:69:bc:0b:ec:00:61:23:cb:92:8e:ca:
5b:9e:ba:5c:63:19:b3:ee:14:1d:70:b0:4e:4a:64:04:2c:b6:
8f:c4:ca:c5:86:d3:98:39:22:21:fa:dd:33:b8:52:79:83:44:
83:26:fc:79:ac:67:33:44:12:54:33:56:c1:42:49:5a:f1:e2:
d9:82:6d:8b:eb:96:e2:60:10:c7:2c:2b:0b:33:f2:43:12:87:
26:d9:ac:cc:3e:be:a1:42:7c:9e:1e:c3:1b:09:9b:23:c3:ea:
85:95:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:38 2026 by rpki-client