Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: IpGuhK2ANSPzs26B75DBDYiIWSAHS25iRi2/c301U58=
Subject key identifier: FC:AA:3B:BD:DE:CC:90:C7:AF:E5:B5:76:54:AC:2F:DB:46:40:36:12
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019CAB6B5C163F69BFA4BBD45ACCEF89FAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 22:01:05 +0000
Manifest this update: Sun 01 Mar 2026 22:01:05 +0000
Manifest next update: Mon 02 Mar 2026 22:01:05 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: td8AiyrZygjA3vomM7iwVZcCVUG+AtgtMmaskFQObOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5c:16:3f:69:bf:a4:bb:d4:5a:cc:ef:89:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Mar 1 22:01:05 2026 GMT
Not After : Mar 2 22:01:05 2026 GMT
Subject: CN=fcaa3bbddecc90c7afe5b57654ac2fdb46403612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:d2:71:95:75:fb:b7:d5:f8:29:bf:85:07:
0e:dd:03:70:9a:ba:4d:fe:67:10:4d:2a:14:39:cb:
23:9c:22:18:1b:b1:f4:56:41:cf:95:fb:b5:d4:33:
84:a6:d7:d4:9e:90:e4:ef:95:57:b8:63:f2:87:db:
da:b2:15:d7:21:10:6e:0c:6e:cc:d2:8d:af:89:e8:
f6:41:9a:a0:01:a8:17:d5:d9:38:61:a0:ba:08:6c:
0f:2f:a3:ca:61:13:3e:1a:3b:98:2b:b7:25:06:03:
d0:e8:f1:59:f9:ae:78:e0:3b:35:09:fb:5a:02:37:
a4:f5:3d:65:34:13:5b:3b:37:62:b3:d8:4f:11:e9:
c8:d8:25:7c:ff:86:2f:84:0d:95:d9:56:e6:83:09:
48:9c:59:ea:ad:2e:b8:dc:3e:d8:87:0e:37:f7:3e:
a0:22:0d:b6:0a:7a:c3:e1:f5:a2:4d:2f:5e:bd:b6:
c9:c9:ab:00:cd:7c:58:ef:6a:55:db:66:a3:2e:07:
d3:89:1b:a2:94:77:a0:7a:78:07:f5:32:ce:01:2a:
dc:fc:62:fb:3e:3e:70:99:e8:1a:bb:04:b0:5f:00:
26:39:1f:59:c3:fc:29:c2:d7:4b:e1:97:17:ac:77:
16:3b:84:81:41:81:0b:df:98:44:c7:75:3e:87:68:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:3B:BD:DE:CC:90:C7:AF:E5:B5:76:54:AC:2F:DB:46:40:36:12
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:a7:66:e2:ca:ef:21:ef:02:68:c1:7c:15:cb:8f:b9:70:
75:cc:88:1a:38:11:19:37:b8:5a:10:6c:e9:5b:5e:e1:83:ec:
9e:75:b3:72:13:87:93:9d:7f:84:1f:48:69:a6:84:44:97:cf:
3e:53:87:ab:c0:05:45:03:51:5f:50:68:21:e2:c1:b2:5e:7a:
f3:f7:36:0a:5d:71:41:16:60:ff:7c:b8:5d:55:84:a6:f0:3f:
87:fe:f2:6e:87:9f:c9:43:b9:18:35:8b:27:d6:b0:19:49:bc:
a1:c1:69:3e:14:2e:81:cb:1e:2c:10:1d:e5:fc:9e:13:5c:b4:
ab:e3:3d:fe:b3:cb:81:a1:89:9e:82:2a:89:70:3f:28:9d:7a:
20:ad:96:ac:69:9e:79:47:f9:65:9e:6d:49:fc:e3:89:25:06:
0f:a4:01:f1:ea:75:aa:4b:42:43:3d:5b:47:17:f9:70:9a:70:
fd:34:53:a4:a3:ad:d9:42:ee:bc:c9:8d:52:15:84:df:22:58:
14:a5:68:55:87:97:f7:47:e9:ff:5b:ee:ff:2c:e8:33:90:f1:
4d:a1:df:16:f8:d5:c0:e4:cf:62:28:0e:78:b9:47:44:3d:e4:
e6:69:48:da:f6:1b:99:5a:dd:c7:c8:f3:d7:80:02:5c:3f:87:
8c:63:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:33 2026 by rpki-client