Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: hF/vnDbLsASFePMeXgcSwggRImy5WnvGm0DSyUu0mjc=
Subject key identifier: BE:19:57:C6:75:B6:AB:0B:70:EF:ED:81:45:0B:92:B6:F3:3C:98:E4
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019CAB6B466FE9BF2272C56FA65560E4D23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 0AA8
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: SfVFyV7OHh4obIaoe2L2a3OP4lJYpuE6OK479GbAX8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:46:6f:e9:bf:22:72:c5:6f:a6:55:60:e4:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=be1957c675b6ab0b70efed81450b92b6f33c98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:e4:14:c8:60:2e:b4:c8:84:0a:c3:6b:f3:
5d:16:b5:84:52:d6:da:3f:cf:ee:4d:a2:a5:3c:15:
2f:2b:e4:48:67:21:d3:5b:ef:0e:57:fd:d5:33:e2:
48:69:ed:4c:27:10:2b:a8:c0:e1:f5:e4:46:b1:ec:
e6:6d:62:75:45:b6:73:e1:06:2d:49:eb:4d:52:af:
f8:61:1d:d0:b1:09:c1:f4:51:2b:c2:1c:01:28:77:
61:30:27:55:16:a9:1a:f2:85:80:32:75:79:d6:0e:
89:94:fd:d2:0d:00:86:91:df:3b:5e:b5:e5:48:20:
74:ed:5a:a3:5b:77:f2:91:ff:9e:7c:1e:da:29:6b:
f5:d2:d9:b9:b3:2d:44:c3:92:d4:40:52:77:a2:ce:
0e:74:62:95:7a:e7:1b:2a:37:01:7a:c3:80:82:59:
73:9f:b9:e1:8c:d3:d2:ea:6f:b7:25:d2:d7:3a:66:
ee:7b:f9:96:dd:c3:ad:7c:c7:f1:a0:25:a1:08:0a:
de:0e:18:8c:dc:52:fe:b6:33:c1:68:05:d9:d6:fb:
7f:79:f2:03:5f:bf:4b:61:5a:c9:1e:5c:c6:19:b7:
c2:66:0f:71:69:4e:46:f7:f2:78:2a:c0:53:94:9a:
21:ca:ae:dc:d9:ab:1d:c2:5b:85:b3:2a:67:fd:17:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:57:C6:75:B6:AB:0B:70:EF:ED:81:45:0B:92:B6:F3:3C:98:E4
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:2b:14:53:89:8f:f1:5c:bd:ea:16:68:b6:ef:ce:53:1a:
90:71:72:23:1e:8d:7f:38:aa:96:81:3c:19:de:77:ac:eb:56:
bf:b6:45:11:6b:6d:72:a9:15:bd:6e:ab:d4:2f:3d:b0:cf:8e:
7e:fe:b0:4b:10:e7:8a:91:5b:c1:79:d6:46:2c:a3:b1:65:08:
ed:fc:1b:42:3b:f1:64:65:ea:ae:42:dc:df:22:7a:1c:a7:36:
dd:2d:aa:bb:16:64:89:99:9e:e7:18:f1:01:1c:a7:55:2a:7d:
4a:44:25:f0:18:2a:b9:ae:c0:f7:fd:9b:1d:0c:2e:cd:8d:dd:
b4:f9:e3:6a:bd:3d:28:b0:66:25:f6:f7:12:0f:78:7c:58:c1:
3a:ab:05:f2:0d:63:8f:ae:00:9f:d7:02:0b:ea:34:ac:d5:cf:
0d:a6:eb:24:96:71:8a:b2:c4:05:43:7d:95:2e:f2:ee:62:ca:
77:02:b1:5b:f7:70:be:0b:9a:39:66:c8:85:0a:11:c7:bf:88:
0a:71:09:14:3c:48:57:7b:74:a8:7e:3f:59:a1:70:56:73:fa:
7b:e9:5f:1a:16:d0:f1:98:5d:22:37:b7:41:7c:0a:ba:03:58:
50:ed:84:d4:0d:68:bd:03:12:ac:64:03:99:33:ef:36:12:fd:
e1:72:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:15 2026 by rpki-client