Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: M2oe+B3B+KQAQD4rXEraFjjv93kwS5UpwvmGvpYPrHc=
Subject key identifier: 8C:99:48:A6:A6:FA:B7:43:15:98:1C:CB:19:EA:97:EA:91:AD:94:F6
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019CAFB5A9B8C4EF78851FDFDF0C46D7177E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 18:00:44 +0000
Manifest this update: Mon 02 Mar 2026 18:00:44 +0000
Manifest next update: Tue 03 Mar 2026 18:00:44 +0000
Files and hashes: 1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: LWw087B/4maYpk4W6m9Snuz2F8IGQTk0Aa7uQF9zJQM=)
4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:a9:b8:c4:ef:78:85:1f:df:df:0c:46:d7:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Mar 2 18:00:44 2026 GMT
Not After : Mar 3 18:00:44 2026 GMT
Subject: CN=8c9948a6a6fab74315981ccb19ea97ea91ad94f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:c1:9a:60:2b:75:e4:2d:c8:2d:ce:7d:ae:
b2:9e:11:94:16:4d:5a:49:f9:a3:28:72:f3:1c:cb:
55:81:a2:db:06:db:87:20:79:33:be:07:c8:dd:51:
19:48:86:b2:6b:77:e4:7e:2d:fe:ed:6c:0d:4d:b4:
e8:16:a6:59:5f:4f:b4:1b:c8:52:c0:1e:24:b4:eb:
84:18:1c:61:06:e8:62:b4:57:29:61:03:6b:22:a5:
c5:07:1a:39:9b:d2:8b:50:ef:dd:ad:51:5f:66:0b:
d9:e5:9d:81:3a:fb:52:8a:0f:78:a0:82:05:4c:23:
eb:6d:61:86:06:7b:ca:97:a3:a7:74:52:78:e7:78:
aa:0d:54:bc:3d:41:c6:fa:f8:ab:75:80:18:16:3c:
7a:22:c0:03:af:ba:4d:af:22:c2:55:dd:10:5e:37:
5c:92:28:69:b4:76:09:cf:06:9c:7d:15:e5:fa:b1:
23:c7:51:7a:b8:3a:68:96:29:bc:81:70:a9:e7:22:
7c:34:1b:36:9f:c8:30:49:68:9d:95:f3:02:3d:45:
8f:05:13:47:e3:df:50:1b:c4:58:e9:8a:ed:e5:53:
02:b2:4c:c6:5f:6b:6d:aa:be:81:00:94:e0:30:04:
0d:ed:27:76:09:33:12:0a:cb:88:a1:ab:b6:94:9c:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:48:A6:A6:FA:B7:43:15:98:1C:CB:19:EA:97:EA:91:AD:94:F6
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:95:c6:e0:8c:1a:c1:65:62:30:3a:77:bd:ac:10:9c:0c:
54:79:22:f7:42:b9:56:8b:e1:f3:3a:53:e2:a8:4c:cb:e9:dd:
9e:67:40:70:e9:00:16:fd:7b:be:d9:19:91:ca:eb:6e:4a:eb:
8e:67:cc:98:c6:94:ed:ea:52:c5:6b:c1:99:42:96:e1:8f:af:
00:1b:a1:45:0a:ef:37:1a:25:de:9e:b8:72:11:b8:50:96:73:
a3:ad:d9:e0:f4:ee:f1:47:8d:aa:43:b8:ba:23:92:ff:66:8e:
0d:f6:c9:4f:5b:bf:d2:59:6a:2d:fa:7c:87:53:d3:3a:93:f8:
4f:68:e7:85:95:98:fd:77:18:79:a2:d5:d5:ae:69:cd:57:6a:
37:61:56:22:a3:b2:b1:49:e9:46:bb:17:90:ff:c3:e1:cd:ba:
19:3b:e8:62:5b:38:0e:ee:4a:c0:ab:03:4f:b5:2a:c8:e4:05:
f0:66:4c:83:53:48:68:10:e9:94:13:03:c7:12:a0:cb:b8:d0:
0d:32:a4:e3:af:a4:46:1e:38:76:09:19:7d:a0:cb:0b:e6:8f:
d5:cc:ed:6f:5e:d5:7f:9a:26:30:94:85:6f:63:aa:e1:28:0c:
c4:59:2b:3d:10:65:b8:64:68:3f:d3:51:ac:5d:fa:d3:d2:bb:
27:37:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:45 2026 by rpki-client