Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: Tyb8fltw1FxAl1pz1LSrjH8+ThoEih+br3ocX0A7Aa8=
Subject key identifier: 88:E6:E4:78:9E:01:42:56:EF:F3:CB:5C:E3:53:95:BF:1B:E8:91:98
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019CA9EB01ACAD623A82A4E0F833CE9ED899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:16 +0000
Manifest this update: Sun 01 Mar 2026 15:01:16 +0000
Manifest next update: Mon 02 Mar 2026 15:01:16 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: w3xSo3LFxZoMfjXDMxZ0ozs2J4sjUNQbmWCRMvqQ/Tc=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:01:ac:ad:62:3a:82:a4:e0:f8:33:ce:9e:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Mar 1 15:01:16 2026 GMT
Not After : Mar 2 15:01:16 2026 GMT
Subject: CN=88e6e4789e014256eff3cb5ce35395bf1be89198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:8b:0c:76:26:e4:b5:22:6d:df:33:e1:a6:
16:0a:9f:5b:20:22:b0:df:d0:9c:0f:df:69:79:aa:
17:28:87:4b:b3:cf:c9:46:dd:91:52:4f:2f:f9:2c:
c9:6d:77:9e:ca:71:51:8a:ed:75:8b:c6:8f:85:6f:
19:3f:86:bb:41:91:c2:7e:05:f4:09:0e:cb:fc:94:
c2:19:1b:4c:6e:a1:26:b0:3d:c1:c0:e7:14:9a:18:
f0:0f:d2:b4:71:09:62:7e:82:c7:c3:23:8e:1b:bc:
a2:1d:86:c4:6c:83:4a:6f:2b:18:fe:0c:df:a2:67:
d5:f2:6f:0e:d0:db:7c:1e:c5:f3:10:f9:d7:d0:db:
29:63:e2:48:fd:78:96:dd:2c:3c:3b:56:db:10:f3:
f9:cd:d7:46:eb:0a:60:73:3f:4b:91:0c:5f:87:27:
fe:28:52:f1:09:9e:0a:68:15:1c:82:a7:f4:9e:f8:
d1:b8:32:de:9e:23:73:09:0c:15:ba:15:79:f7:c4:
ad:d4:cb:a5:da:26:56:e7:05:1e:1a:86:6f:52:bf:
21:f9:6f:33:37:e7:29:6e:1f:db:4c:9c:ee:04:42:
ba:17:23:40:1c:2b:3b:df:7a:98:a1:fa:2d:31:73:
66:f1:d1:51:bb:6c:0d:06:54:6a:4d:ee:5b:59:af:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:E4:78:9E:01:42:56:EF:F3:CB:5C:E3:53:95:BF:1B:E8:91:98
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:31:03:e9:7a:79:73:be:f0:2b:d9:0a:71:86:97:d7:41:
93:37:dd:1f:59:e2:b5:f5:02:4f:71:72:bd:ee:1d:80:62:d7:
e4:24:a5:d6:3c:28:44:44:ed:97:80:78:6f:1c:56:1a:45:c6:
f0:ee:36:f3:5f:b1:3a:c0:82:9b:73:16:28:e8:41:87:14:0e:
28:d0:fd:db:3c:b7:ce:01:ca:c5:d0:c4:ce:ee:f3:61:f5:d5:
96:47:e8:33:d2:56:25:11:f0:c9:54:4d:0f:6e:c7:28:17:87:
cb:f9:51:8f:cd:99:45:69:30:08:e7:3a:75:83:84:e6:c4:95:
9c:2d:b2:0f:8b:c5:4d:2d:8e:f9:09:5f:76:2f:bb:55:b4:58:
e1:dd:8d:04:30:f8:83:70:93:64:e8:78:55:fc:97:5a:38:69:
f8:b0:a1:5b:9c:44:49:0c:a3:68:6d:17:4d:74:78:6b:da:1a:
cf:75:a0:72:86:22:78:9f:5a:36:8e:2f:a0:98:f5:ca:62:66:
5d:51:ef:79:c2:ab:21:22:b1:d0:48:d8:b9:a2:3c:b6:6e:9b:
ca:21:f7:b6:be:74:d6:bb:f4:fe:14:49:d6:cf:6b:27:35:f9:
d7:25:20:62:59:7d:b8:9b:76:bb:8b:68:9f:a2:9e:e3:78:82:
3a:b0:74:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:11 2026 by rpki-client