Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: I5U67Tmg675yUMuyHzHznqKPJGNRixV1UmugdFzyKR8=
Subject key identifier: BD:34:F5:0A:C0:35:D4:3C:20:5F:FE:D4:BF:ED:82:09:38:89:D2:A5
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 019CAB347CE43E3D911874BC2F1663CE794A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: NmmcVUfgK3TWQwUhMMatVOxVYB4.roa (hash: 9DQYkjCMrtUdnqAskr29sPlJq2qt06fWYtuUEIlYHZc=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: eJBoindwp7TvVJljKVvL9VQpJfSwEIlNf5J2/YApC88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7c:e4:3e:3d:91:18:74:bc:2f:16:63:ce:79:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=bd34f50ac035d43c205ffed4bfed82093889d2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:c6:46:5a:19:11:3f:96:a9:dd:39:70:5d:
6e:62:97:73:b2:de:d1:db:aa:f8:a4:66:46:77:18:
8f:7f:22:e0:61:6e:60:84:63:c4:10:bd:d1:46:fb:
59:db:60:0e:47:a9:c0:ac:1c:90:cd:dc:c9:0b:b3:
0a:38:be:57:b3:1d:4a:64:84:0d:e2:b0:46:e3:51:
48:ba:4a:39:c1:b0:cb:e9:3a:e1:0a:83:ee:7b:df:
82:36:e0:18:92:48:22:03:93:09:0e:94:51:83:76:
3a:6e:40:9a:2d:7f:8a:3a:98:97:83:2b:a0:60:fb:
68:54:46:ea:aa:b4:3d:80:86:45:d9:9f:61:d2:9f:
c1:55:11:1c:49:50:11:7e:75:34:65:15:31:91:06:
af:60:c8:e0:02:fc:95:f3:b8:6f:6b:f5:0c:91:b4:
17:fb:b1:de:9c:42:cb:09:69:01:74:49:1c:14:36:
31:4d:a6:6f:c3:4f:d4:b9:d1:99:b9:4c:bc:d9:1b:
1d:83:ba:7e:79:98:d8:52:7a:0b:26:59:38:eb:4c:
ec:02:dd:27:20:12:b2:87:d4:64:82:77:a0:ae:53:
d1:87:89:e7:24:ba:46:f6:ba:56:12:f7:f2:c7:86:
72:29:48:a6:d4:bd:bf:eb:c3:a0:aa:2e:39:ef:25:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:F5:0A:C0:35:D4:3C:20:5F:FE:D4:BF:ED:82:09:38:89:D2:A5
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:43:85:fb:5f:d4:fc:58:c1:1b:fb:bc:d1:7e:57:65:40:39:
dd:4d:bf:03:82:17:97:54:8b:6f:a2:aa:b3:ca:85:ba:aa:92:
84:c5:15:55:f7:40:d9:db:91:b7:75:91:0b:17:78:df:dc:64:
b8:cb:1a:36:d0:71:a1:7c:c7:cb:71:b6:0f:8f:6c:95:85:52:
b5:66:a3:ed:e7:00:8f:37:71:7e:f9:f8:c9:44:6c:01:01:a7:
bb:3f:bf:2c:e1:b4:c3:ec:2b:a9:56:db:38:da:8f:58:b0:bb:
17:08:a5:eb:c8:05:00:56:4e:c7:e2:4e:cc:d2:b9:78:61:df:
94:b7:05:dc:f9:da:e4:dd:a3:56:d6:3b:e7:1a:d9:99:38:44:
92:46:37:89:af:f6:98:0f:9c:42:eb:b3:42:cb:2c:b1:d5:6f:
7b:02:6f:ec:7b:fc:6e:e4:66:24:b1:cc:a4:60:a3:98:63:44:
b6:de:d0:bd:83:4c:38:37:38:e0:96:24:7d:f8:92:93:64:bc:
4d:e1:15:f0:1b:b7:30:7b:4c:c1:72:8f:71:59:33:04:59:af:
06:86:e7:90:24:5d:1b:75:d0:3c:2d:4d:e5:37:c3:56:a9:6a:
f4:43:1e:1a:34:31:25:e5:05:bf:5a:5b:1b:b3:4a:11:57:44:
db:cf:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:56 2026 by rpki-client