Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: +gSPy7LitNJ88bB1rACHL4W97yuDWOUC1iwvO3IRYYU=
Subject key identifier: F2:14:E0:74:C2:3A:FA:22:7D:8D:D3:DB:59:FA:C9:F4:2F:D3:65:59
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019CABD97186D96BCAA609603E4547A2DAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (hash: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: qsxaYq72XrZxSdgh3Na0fqKd41sKLeca/vyD9xmE9X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:71:86:d9:6b:ca:a6:09:60:3e:45:47:a2:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=f214e074c23afa227d8dd3db59fac9f42fd36559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:cd:79:c5:14:17:35:c0:50:c5:75:7d:35:
c5:20:06:46:fc:83:af:a6:4e:68:be:15:5b:97:32:
0d:42:56:5c:8d:52:3a:5c:b7:24:b7:5f:55:e3:dd:
d1:74:42:9a:e6:30:6a:2e:55:d3:a6:dd:8a:d6:fc:
ad:e2:37:1e:ba:e0:8e:b5:e5:67:f7:7b:4f:91:99:
f2:15:5d:95:3d:db:77:98:cb:1b:c5:57:a2:09:e6:
77:30:b6:fa:70:1f:48:5a:22:b7:97:e9:66:b2:45:
ab:a4:c4:93:2f:1f:33:ff:54:d9:de:19:ec:8e:73:
a2:56:62:a4:d1:05:9f:08:e3:3f:e6:ce:9f:48:e7:
94:2a:69:77:0e:37:58:76:f9:8d:76:82:04:71:96:
d5:2e:71:a1:84:ec:4b:86:c3:26:fd:75:fa:a5:70:
5f:eb:b6:c6:0e:93:2f:56:1d:1b:f6:1e:27:5c:b5:
ac:17:1e:23:45:61:6c:f8:77:95:26:bb:a0:1f:50:
ef:8e:17:6a:e5:6c:a3:02:8a:fb:f5:71:03:5c:f6:
76:5b:80:90:1d:4a:37:a2:cf:b3:12:51:31:0d:42:
cc:be:22:e5:8b:df:48:7f:3a:72:e6:b0:eb:5a:16:
be:3d:d4:0e:76:25:0e:fb:8c:4c:72:c8:7f:0e:7d:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:E0:74:C2:3A:FA:22:7D:8D:D3:DB:59:FA:C9:F4:2F:D3:65:59
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:aa:fb:65:0f:18:63:fd:66:da:f8:12:b3:8b:7b:43:66:d2:
8e:b6:57:44:75:e2:0f:46:03:4d:d4:ba:50:49:71:5e:57:3f:
07:61:16:ce:de:2e:35:b0:7d:1c:dc:7b:a5:85:bf:b0:b3:65:
f2:fb:89:4b:d7:f3:43:e3:dd:54:24:17:32:de:4d:2d:f0:e2:
04:ab:0b:04:bf:83:68:ee:8b:6e:de:9d:2f:aa:fe:14:01:99:
e7:f9:94:ef:7d:47:29:0c:1d:7c:83:be:d4:99:65:23:c4:83:
7e:b7:9f:bc:da:8c:68:db:2b:c1:ea:da:01:9c:98:36:84:26:
61:d0:8e:a1:39:0a:96:87:50:48:f2:84:ef:d6:59:e7:a0:89:
5a:55:59:68:7d:65:09:9a:70:a6:a2:31:14:37:a7:08:3e:b8:
4a:fe:89:9b:ae:c2:f3:7c:4e:62:4a:b5:62:39:1b:f0:28:b0:
64:2f:cf:0f:c9:d3:ea:c0:e1:4c:2e:1a:c2:2f:02:7d:ef:06:
04:35:fb:14:d5:23:4b:bd:80:24:78:7c:e6:37:6d:a6:de:18:
93:83:f9:e2:92:16:30:d6:86:aa:0d:ba:50:cd:5d:70:38:87:
b6:c3:45:1e:55:04:16:78:86:ff:f5:59:47:00:e2:c5:27:0c:
46:7b:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:51 2026 by rpki-client