Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: GmA6R7KrCWNuRrAX6uODbngiwjM2CyBDGhftNtCGe+8=
Subject key identifier: 9B:A4:2C:3B:73:C2:EA:D0:51:E1:A8:1B:05:27:AA:EA:84:0A:8B:35
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 019CAB34A463F38D6A897F684573524EC33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: S1duhzLYVWCPzWLAVIN0U9O31sE.roa (hash: iGd5/M7wFo+vh2tNkFU7YoI/hPvzSVi7SBf4jj6Qs9I=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: meAzPUZdrRWWJ8aX4cN4VhkUCzHnEOL8tjIHHT/JS/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a4:63:f3:8d:6a:89:7f:68:45:73:52:4e:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=9ba42c3b73c2ead051e1a81b0527aaea840a8b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:86:0d:13:86:7d:c0:1a:32:a7:63:3d:4a:
c3:c4:8b:ad:cd:c8:29:0b:f1:c5:d8:03:fc:75:a6:
f9:df:28:d8:cc:8f:21:9f:f7:7e:e3:03:34:95:fc:
c6:68:35:5b:d7:95:c6:9e:6d:20:d8:20:b6:92:8c:
b8:95:ef:9c:9f:f1:cf:92:e8:73:ee:9b:87:4c:e3:
79:4f:d4:41:36:14:76:31:72:b7:1d:74:8d:de:c9:
30:33:f9:f1:67:22:7d:85:be:f0:37:58:48:25:44:
3e:b5:80:bd:73:7b:7c:d5:91:f0:f8:9b:72:1b:89:
ec:eb:a9:8a:0e:b1:d4:5a:dd:71:b7:b0:76:b5:d6:
ce:9d:63:39:67:59:f0:c0:21:1c:a2:5a:f9:d0:cd:
3d:7a:89:27:97:a2:6e:c3:f7:5d:c4:cd:32:32:e9:
32:f7:eb:2d:dd:79:8a:b6:14:00:19:7d:de:ef:6f:
42:ae:3d:2f:83:6b:06:9e:eb:50:f3:9c:23:16:c2:
57:a7:77:72:94:76:f6:87:75:8d:12:5b:5d:78:d4:
10:fc:2f:eb:b3:04:e2:11:96:cc:e7:dd:bc:ae:9a:
ba:5d:22:41:31:91:48:ab:6a:d9:74:44:1e:5b:06:
97:77:3b:fb:c5:0a:86:99:61:1b:48:97:ac:7f:9f:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:2C:3B:73:C2:EA:D0:51:E1:A8:1B:05:27:AA:EA:84:0A:8B:35
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:f7:c7:b9:99:22:7f:68:86:27:a1:32:3b:37:31:31:09:
25:10:fe:b7:63:b4:70:d3:20:5a:d0:27:d0:31:76:0e:62:01:
a1:84:d3:3a:fe:a8:ad:31:a9:55:89:ed:07:6c:4c:33:20:c1:
4b:99:1e:19:e4:19:34:06:5a:44:47:f8:d8:80:81:7e:d7:5e:
94:70:15:6b:ae:c1:07:5f:b7:80:18:41:65:aa:86:7c:45:24:
45:25:cf:ac:78:df:de:6d:99:49:39:bb:fe:27:17:aa:c6:f3:
60:c4:74:79:8d:ba:ae:20:78:d4:24:10:11:95:f0:1e:14:0b:
57:29:af:46:04:18:58:92:09:3a:48:04:cd:c6:d2:e2:6d:b9:
02:e8:3b:dd:ef:9e:60:a4:8f:27:ef:85:fa:c3:bf:85:27:c1:
b0:da:2b:45:fc:d5:41:b9:8c:d1:74:73:16:92:e4:a2:81:f0:
fb:17:2f:33:c1:5a:4b:5d:63:63:8f:54:38:56:a1:ba:4a:e7:
d6:24:a3:cf:bf:88:03:48:cd:a8:b4:af:53:46:7f:39:9d:76:
e9:7c:14:88:65:e4:54:a1:19:13:5e:86:fb:c7:23:dd:91:11:
68:f5:af:ac:9b:51:ff:dd:c1:0a:db:fb:74:19:94:5e:a0:15:
fd:c1:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:19 2026 by rpki-client