Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: /e6i+9o+kjW7xB2kkWJCQUxETWsjsu227qxJzwY4CBk=
Subject key identifier: 20:6F:B5:40:00:80:90:47:6F:0F:FF:22:83:EA:7E:35:D8:98:15:60
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019CAA8FC1C0AF54C68E701130481254F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: 877Ch9+Cz5oXsCEasAuu1h3IDkVkzz3cADCVVk7rCbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c1:c0:af:54:c6:8e:70:11:30:48:12:54:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=206fb540008090476f0fff2283ea7e35d8981560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:fe:58:26:fe:bb:8b:b7:ee:4e:ef:cf:95:
5e:df:eb:6a:03:96:47:bb:cb:1c:2e:74:6f:a2:78:
2b:36:c7:b5:ee:1c:77:19:71:fe:0f:06:19:6b:c9:
e5:d2:4e:f9:f6:8f:91:95:c3:65:6d:a9:2d:a3:cd:
d5:a1:50:ce:1b:bf:33:7d:8f:17:93:30:81:9a:9f:
b4:e9:77:c9:31:aa:2a:8e:41:f6:69:c3:21:78:08:
69:36:f9:98:73:67:13:11:08:7a:9b:24:9c:5a:bd:
e8:5a:f5:dc:f0:68:74:bd:95:e6:9a:55:25:6d:b6:
13:0f:59:31:6f:52:04:2e:48:db:f9:c2:79:e0:9f:
14:84:6a:4b:6a:e5:b3:c4:f8:94:2e:b5:3a:64:68:
f7:e9:25:12:40:35:8e:da:e2:f7:f1:dc:d8:ec:55:
b1:7a:46:b1:01:00:a0:e9:da:1c:55:72:f4:e7:8f:
86:de:1d:af:c0:16:b6:fe:43:b1:10:28:6d:19:82:
e5:c9:33:61:99:48:8b:86:f5:c6:c7:7e:51:92:57:
93:97:c6:4b:66:fb:b3:e0:13:15:5a:76:86:d1:82:
e3:ae:e4:3f:f4:a2:e7:cc:ef:7d:df:8b:99:af:42:
09:73:c2:58:75:e6:f8:89:14:8e:86:d2:46:d8:61:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:B5:40:00:80:90:47:6F:0F:FF:22:83:EA:7E:35:D8:98:15:60
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:6c:ce:87:fa:e5:c8:d2:89:e8:57:83:95:58:96:8a:8b:
30:91:b0:15:30:5d:bc:c9:45:70:24:6a:94:ac:86:fc:19:ef:
e0:81:d8:22:cd:e6:c1:10:a7:cc:c0:3b:c9:75:30:82:1c:76:
2f:34:ce:35:56:7b:b9:17:10:c3:49:7b:7c:33:35:df:9b:4a:
93:fb:e3:90:f7:d6:55:81:db:ae:0a:df:af:64:92:76:39:65:
26:d7:a8:7f:22:c9:d1:c3:af:fe:23:18:0b:b8:1d:af:b4:d5:
a0:fb:c4:c8:5f:0a:c3:3f:94:d9:a3:1f:d9:80:37:2d:13:ec:
06:dd:66:9a:ec:47:1d:88:22:ae:fb:2a:fb:d2:a1:9f:cd:39:
e5:d6:50:80:ad:42:90:5e:33:d1:ec:5a:1b:ed:df:d4:88:fe:
f2:30:83:d1:e5:a4:3a:9d:65:e2:40:9e:86:e4:3e:a0:3f:5a:
04:fe:04:13:5d:80:a0:1f:42:be:34:68:d3:0a:dc:b6:1b:85:
33:1e:85:2f:cc:2b:ab:f3:23:6e:2e:55:54:6e:ed:5a:f5:7f:
27:f1:f7:f8:ea:c9:00:8f:bd:9a:2b:fd:9a:ed:8b:30:17:bb:
6e:0e:c6:84:f5:87:ef:41:38:5c:d3:29:b0:f7:40:14:59:4a:
2c:62:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:29 2026 by rpki-client