Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: MP2dxAX0RbXr+iZ16iIZz1rQ4xzOD6nt3OXSmF/BYCI=
Subject key identifier: 94:BF:56:97:37:8C:DD:F7:6A:12:70:61:AF:E6:00:22:2A:77:1C:2B
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019CADFE533DC99479AE7201365B5BE14910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 17F1
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: u1ZSk52MXHFz9ah6hDCx43UD8pZj6rTOUL1ojdyNTwI=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:53:3d:c9:94:79:ae:72:01:36:5b:5b:e1:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=94bf5697378cddf76a127061afe600222a771c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:7d:fd:8d:4d:18:90:8e:5d:d7:c5:df:d9:
60:19:69:4a:70:38:ab:83:77:b6:d0:e3:34:bd:d8:
64:d3:e7:ed:5f:f5:af:ca:18:e7:cd:72:17:15:f0:
0a:69:78:9d:a6:e6:02:7d:d7:9f:65:d8:fc:e6:4f:
d2:57:38:b3:6b:74:13:9d:5e:d4:f5:48:e7:32:cf:
89:ea:bb:d5:17:1c:89:e2:a3:05:ec:7c:04:c8:8b:
c9:fc:d4:c0:8a:92:df:34:32:a0:54:67:57:f8:42:
9f:b0:46:01:01:3f:d4:da:6b:2f:9d:98:f8:c3:2d:
d8:e3:ff:69:e7:86:96:d8:1b:60:4e:14:e5:0c:c3:
4a:15:8c:6c:e2:42:3f:92:7d:a4:ce:54:b6:5a:20:
d7:0b:d0:6a:b4:47:9c:c7:42:58:c9:e2:94:c2:2c:
d7:8c:0d:87:3f:dd:84:c3:68:c9:02:c3:49:4d:c2:
da:39:33:59:1d:d8:07:a2:c8:5c:20:aa:60:15:01:
2c:75:28:ab:9a:2d:ed:ee:75:7d:99:e5:82:87:df:
03:7f:85:7e:ad:5c:34:bb:ca:b9:13:a9:1a:cd:b7:
2e:94:a9:af:74:96:6a:6e:0a:df:72:94:84:d8:2f:
34:62:ab:67:66:e8:1b:56:c1:4e:49:07:e8:70:8c:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:56:97:37:8C:DD:F7:6A:12:70:61:AF:E6:00:22:2A:77:1C:2B
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:7b:1b:af:0b:7b:50:cf:78:72:80:83:6d:62:54:72:38:
2a:77:fa:c1:00:64:1c:38:d1:78:a4:60:f2:0c:b8:af:36:8a:
99:a3:32:d9:c6:c1:5d:c3:45:16:8c:66:85:aa:f9:df:a9:89:
0a:9a:6d:fa:73:19:60:20:f8:92:96:78:de:ce:47:db:2a:16:
fe:96:35:e0:b3:9c:db:b0:6d:83:cf:36:ea:c2:07:9e:9b:b4:
de:87:23:b4:f0:c9:76:58:5e:22:16:f1:e7:c8:b8:20:4b:03:
63:7d:3e:d8:57:e0:61:77:55:0c:26:27:3f:68:37:d9:ac:00:
85:af:36:60:79:4f:cd:d4:84:72:e5:cb:a0:dc:c6:ea:21:ac:
3e:34:28:ec:a9:76:ab:88:64:89:07:d1:53:e8:33:c9:6b:a7:
49:65:4b:50:44:88:cc:4c:a0:dd:1e:6f:cb:dd:f4:ad:de:1c:
3b:dd:1d:00:b2:b5:62:89:30:f9:31:05:24:16:fc:3a:d7:8d:
54:f4:7f:9f:d7:7b:f5:cf:bc:70:f7:f0:76:3d:53:52:0a:07:
68:a9:31:28:f1:e4:0e:66:be:67:6c:ca:f4:0d:68:8f:81:d3:
23:60:8d:c5:1f:f1:1f:0d:8e:56:7e:bb:f5:d1:1c:29:33:8e:
e3:87:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:00 2026 by rpki-client