Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: n8i9lssSaewhV3y0ZETnsyCCmNE6oNizW9VViKvf2W0=
Subject key identifier: 89:6E:C9:51:CD:11:87:1D:FF:CC:1F:BE:0B:C8:4F:B5:89:40:CB:10
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019CAB33F0148CF7E227495B34E866E98C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: 1q9TTLqyQHhJa2wwmCKAlTicmkfPDqcZjSy5ytcPwMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f0:14:8c:f7:e2:27:49:5b:34:e8:66:e9:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=896ec951cd11871dffcc1fbe0bc84fb58940cb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:2c:ff:df:79:90:5e:bb:00:db:c5:a2:91:
72:9c:98:20:73:54:40:66:4f:cf:de:dc:67:4d:e2:
81:4c:05:60:a7:f5:17:c4:82:9a:3d:7e:83:80:e8:
40:0f:a5:81:fd:2d:ee:c4:4b:f4:3f:b4:ce:d4:7d:
fb:bb:f0:7f:8f:c4:b8:34:38:bc:f2:93:a9:5d:5e:
f1:46:fc:79:ce:a5:71:03:97:0d:3d:ad:65:fc:3b:
7f:19:bc:85:d2:be:6f:26:0d:13:dd:b6:f4:51:71:
f2:4a:43:5d:4c:ea:0b:6d:d3:8c:29:31:2e:8f:96:
ef:6f:5d:f3:15:e9:74:f5:d3:9b:8c:c7:4f:d6:d9:
8f:81:62:48:28:ce:59:30:78:70:10:56:e6:c0:ab:
51:61:88:ab:8f:a7:11:7b:2d:98:c2:8b:d6:10:89:
13:a7:b5:ba:44:5d:c5:4e:7e:04:22:a4:9f:55:d5:
fe:0c:25:3b:88:37:d3:b0:f3:c9:c0:32:70:f1:1e:
cf:a4:1c:1b:2c:80:f6:0b:86:8e:61:c4:af:29:bc:
5e:e1:8b:5a:7c:b4:dd:6d:14:69:11:b0:83:6f:56:
7e:20:9b:b1:95:58:cd:e7:3d:bd:22:28:9e:9e:b0:
94:df:c5:da:5a:46:22:a9:d5:50:76:17:98:61:40:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:C9:51:CD:11:87:1D:FF:CC:1F:BE:0B:C8:4F:B5:89:40:CB:10
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:91:b3:e1:f8:77:b0:96:1d:7a:29:7d:1d:a9:bf:ba:b4:
f3:47:43:b7:74:87:fa:76:20:0e:3b:6f:a4:75:1f:25:e8:7c:
63:fa:7e:f0:31:ae:d2:49:35:0b:64:e6:a7:50:d1:c2:1d:b7:
01:dc:56:39:50:80:6f:8c:21:0a:2d:54:cc:b1:b9:1d:09:2b:
02:74:6a:73:e1:2f:9f:68:a6:64:fe:3c:4d:f3:43:cd:6f:8e:
43:d8:d2:59:42:ba:d3:46:dd:d1:02:92:4e:c2:ea:ef:23:03:
e7:19:93:b5:f4:10:df:4e:f0:3e:8f:90:ed:a4:fc:df:3a:05:
e4:1b:13:30:4a:b1:f9:03:04:ba:2c:d0:1b:e0:bc:de:c1:e3:
a2:62:14:ee:64:14:ad:40:36:37:b1:6e:8c:5d:9d:af:45:a4:
9d:29:34:0e:b8:4a:29:32:c9:bd:06:07:af:c0:dc:f4:49:5c:
a4:87:00:fe:c4:21:00:b2:1d:b1:b2:2e:8d:b0:c3:0c:91:bf:
44:ce:c1:3e:43:98:c5:7f:2e:56:a3:7c:11:25:e8:9c:59:11:
99:07:d1:82:7d:99:ad:6f:87:e1:ab:54:0f:c9:45:57:57:77:
0e:24:8d:ea:17:14:6c:52:aa:a7:61:b1:e3:fe:c0:f9:b1:03:
be:46:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:58 2026 by rpki-client