Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: mrLP1x5Gw6QrCldZ4ULAn0kJJKQYktjDQsYsV1offRY=
Subject key identifier: 55:2B:DB:9D:37:EE:E8:0F:41:52:11:A1:04:BE:E5:31:B5:F5:36:F2
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019CAAC6FE89E2545014F92A904C26BE7ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: wYZVaf+W8P4lKLmQ+c1SSuPcG7poWDY3f+rJ9qcA2oA=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fe:89:e2:54:50:14:f9:2a:90:4c:26:be:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=552bdb9d37eee80f415211a104bee531b5f536f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:ab:89:99:1c:0f:01:3e:4f:73:54:73:8a:
8b:9d:ba:cc:5a:83:49:77:bc:e6:f6:4e:79:08:a0:
c8:f3:f6:0e:90:e7:3e:d4:4e:40:0b:a1:08:27:c4:
36:ff:ea:cf:1f:dc:9a:f0:f0:98:e1:8b:de:dc:63:
bc:e9:d9:06:b8:c4:ff:5b:9a:cd:b7:ca:0b:c4:27:
b4:f2:e6:48:de:95:6f:f3:9d:6b:58:a8:09:37:38:
41:ab:78:27:42:d4:46:0c:f0:43:0a:5d:7e:e6:da:
5f:62:57:08:1f:e2:98:c8:28:57:a6:e4:e0:19:70:
eb:4a:a4:e8:32:a5:6f:25:85:63:bd:e0:ef:11:1b:
5c:b2:06:78:d1:af:03:79:b8:e4:c8:b7:4d:c5:e5:
eb:29:a9:29:76:1e:a3:85:84:42:10:14:c0:5e:dd:
94:f2:b5:5d:5b:9b:65:dd:e5:6d:dd:4d:f7:62:89:
3e:be:92:18:79:50:25:cd:32:48:d6:59:69:71:2c:
8f:b8:57:65:00:87:23:1d:91:bb:d4:62:b7:55:e1:
50:7b:92:ae:7c:db:9d:80:5b:cb:b1:cf:6f:be:b5:
61:cf:77:eb:0a:bc:8d:13:73:08:e2:27:ee:47:66:
b7:99:12:62:15:b5:29:a0:a9:49:0f:d0:3e:d6:e7:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:DB:9D:37:EE:E8:0F:41:52:11:A1:04:BE:E5:31:B5:F5:36:F2
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:eb:a8:28:10:62:bd:f0:93:34:68:f2:9f:d9:81:13:d5:ab:
5a:1b:11:80:21:24:67:34:00:2a:7e:95:d0:9c:4d:56:37:9e:
1f:63:fe:41:f6:33:74:d5:ff:3b:24:b9:a2:dd:0e:9e:97:3e:
38:77:1b:83:21:5e:b0:1c:75:4a:61:16:58:49:7e:04:5b:23:
72:e7:53:b4:19:35:16:bc:30:3c:e6:95:00:05:18:38:fd:a7:
a5:ea:35:5c:49:00:29:89:70:bb:72:5c:49:da:6b:56:a2:0f:
b6:59:76:d5:c2:39:43:ec:fd:9e:2a:b9:8a:73:07:a8:d0:e3:
4d:a8:73:8c:24:d9:ec:fc:90:ab:7e:44:be:f4:c0:5e:9a:23:
bf:7f:6e:b1:cf:07:e0:15:6b:aa:40:59:6c:46:70:c6:88:13:
17:fe:13:9f:13:10:af:43:f8:f2:a4:aa:60:37:7e:e7:cc:95:
72:e6:e7:be:1d:4a:99:b6:b4:22:fc:70:7c:e4:fa:7f:59:bc:
ec:c0:33:01:ce:71:bd:f8:0a:b9:5e:dd:01:76:ba:78:b1:42:
ec:b4:e3:27:4a:df:95:27:7c:cd:96:7b:08:b4:c6:f6:94:ce:
c9:96:ce:77:82:f5:38:9f:30:41:5f:8b:01:aa:a4:e9:77:33:
71:1c:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:50 2026 by rpki-client