Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: PRSyfYCAssII9gDZQTfKA6wlVb4YTTbPuTDPqtKBfZY=
Subject key identifier: 4A:66:85:30:42:CC:C4:1E:4F:0E:96:03:0E:E2:3C:67:53:69:0D:2A
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019CAC7E01E8126F5AA8C873ABFF893086A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 1808
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 94ElBQAhNKoKoTPGZNNcA6SwEEgfmHqlD1kpCUOb+6o=)
2: nAtKKEo6Mzv-candAEifxL69_bo.roa (hash: R8Il+SRs/b8Guq3ex4Y5aLHHglnfMg1tmovCHKBdtmE=)
3: xgLWD5Den1Vtir_enPdc8NWaykY.roa (hash: 4jXsKVFiJh5GbUk/Fg7oyDg5JPS53CqBKNMj2FoIAHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:01:e8:12:6f:5a:a8:c8:73:ab:ff:89:30:86:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=4a66853042ccc41e4f0e96030ee23c6753690d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:99:69:66:d3:87:f1:f1:59:bd:17:30:2e:
1e:3e:1a:45:bb:07:b9:a3:04:31:91:87:c6:46:9b:
95:7b:c7:d7:38:56:f3:b5:8b:ca:46:58:b8:a5:39:
b3:28:75:c2:1a:88:05:cc:e9:0c:e2:1c:1a:c3:47:
a5:34:8e:24:24:13:e6:c8:ad:50:d2:23:e5:1d:84:
a3:4a:cd:19:4a:52:94:42:b8:b4:d0:c5:27:13:14:
6e:b4:3a:e6:2f:38:72:11:37:d1:fc:a6:b3:d4:55:
06:bd:74:c2:54:94:c8:5d:67:7b:c4:fb:d2:0d:1f:
25:20:17:a3:28:05:51:e4:f4:07:1e:a9:80:8a:b4:
28:13:0c:64:d2:a3:39:e5:85:0e:56:c1:48:38:e2:
6e:42:d9:06:7b:03:6e:10:05:53:52:39:91:bf:1d:
4a:b4:55:5d:20:08:ac:8f:87:26:20:b5:47:f7:98:
ec:19:f2:f7:fe:43:28:d0:45:24:b1:65:3f:02:75:
d7:54:eb:89:28:62:0f:c0:be:bc:98:a9:33:1b:bf:
ca:96:66:2a:28:ac:89:5c:59:2b:a6:59:2f:1d:56:
6f:49:06:22:72:3e:b6:41:54:26:3d:e8:dd:c9:79:
c8:bb:e5:b0:3c:d9:09:9a:bf:9d:e4:59:ec:c4:2d:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:85:30:42:CC:C4:1E:4F:0E:96:03:0E:E2:3C:67:53:69:0D:2A
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:c6:4f:19:f0:fd:bd:23:7c:73:08:32:54:c2:28:96:8c:
23:8e:04:4e:ca:aa:d8:b0:d1:64:bd:83:ea:5a:96:be:a0:e9:
47:c9:31:60:f7:4c:95:08:91:29:15:96:61:22:0b:3e:f4:eb:
27:36:8b:9d:20:3e:aa:7e:ca:a0:c5:aa:d6:0e:c3:43:e2:35:
c6:5b:5e:44:c9:b5:61:c0:24:be:27:e9:d7:d1:6a:b2:9c:d4:
a1:ed:0e:84:c9:c9:f1:47:09:d1:8e:5e:90:3f:27:51:94:0c:
cb:35:2b:4e:8b:e5:9c:5e:0d:9c:b2:69:42:54:ba:2c:9a:be:
03:5f:44:9f:fc:e2:fd:2d:78:6b:82:77:a0:28:83:a8:ed:9d:
9a:d5:42:06:d4:1b:69:3f:8a:63:aa:ea:aa:6a:fc:a8:0a:57:
76:85:f9:d9:0f:1d:f6:e9:f6:f1:c2:f0:c3:14:1e:c9:2f:73:
76:e3:ec:06:35:f2:82:5d:de:79:27:4e:60:24:3b:af:a3:30:
c1:eb:58:c4:e0:5c:53:c9:c1:f8:a0:ba:d9:39:c3:d6:90:b8:
f2:06:17:c2:c4:62:48:28:59:b6:47:5e:fd:27:16:ab:00:2b:
ae:c6:bb:74:3c:28:31:b3:24:8a:73:ec:5c:2c:a6:7d:bd:f5:
55:ed:c7:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgHoEm9aqMhzq/+JMIaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjYwMzAyMDMwMTA0WhcNMjYwMzAzMDMwMTA0WjAzMTEwLwYDVQQD
Eyg0YTY2ODUzMDQyY2NjNDFlNGYwZTk2MDMwZWUyM2M2NzUzNjkwZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s+ZaWbTh/HxWb0XMC4ePhpFuwe5
owQxkYfGRpuVe8fXOFbztYvKRli4pTmzKHXCGogFzOkM4hwaw0elNI4kJBPmyK1Q
0iPlHYSjSs0ZSlKUQri00MUnExRutDrmLzhyETfR/Kaz1FUGvXTCVJTIXWd7xPvS
DR8lIBejKAVR5PQHHqmAirQoEwxk0qM55YUOVsFIOOJuQtkGewNuEAVTUjmRvx1K
tFVdIAisj4cmILVH95jsGfL3/kMo0EUksWU/AnXXVOuJKGIPwL68mKkzG7/KlmYq
KKyJXFkrplkvHVZvSQYicj62QVQmPejdyXnIu+WwPNkJmr+d5FnsxC1V3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpmhTBCzMQeTw6WAw7iPGdTaQ0qMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecXGTxnw
/b0jfHMIMlTCKJaMI44ETsqq2LDRZL2D6lqWvqDpR8kxYPdMlQiRKRWWYSILPvTr
JzaLnSA+qn7KoMWq1g7DQ+I1xlteRMm1YcAkvifp19FqspzUoe0OhMnJ8UcJ0Y5e
kD8nUZQMyzUrTovlnF4NnLJpQlS6LJq+A19En/zi/S14a4J3oCiDqO2dmtVCBtQb
aT+KY6rqqmr8qApXdoX52Q8d9un28cLwwxQeyS9zduPsBjXygl3eeSdOYCQ7r6Mw
wetYxOBcU8nB+KC62TnD1pC48gYXwsRiSChZtkde/ScWqwArrsa7dDwoMbMkinPs
XCymfb31Ve3HwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:05 2026 by rpki-client