Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: GhqEh7Clg4AgrgPToAytNdEL7ATXGFdmapcXiMi8OUo=
Subject key identifier: 21:4D:F2:13:94:CA:B9:8A:2D:4D:A8:57:3D:88:7E:DE:A2:BA:84:71
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019CAAC6BC14F65BA1A834DB82ED516C6BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: TzUac4NxqNQrYtP3q8Ze91elGs3x0lSrFB16aBlXhNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:14:f6:5b:a1:a8:34:db:82:ed:51:6c:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=214df21394cab98a2d4da8573d887edea2ba8471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:9d:1c:24:62:42:00:0a:fc:26:64:e5:d7:
40:f6:4f:17:d4:c2:c6:ef:66:63:dd:43:54:a1:34:
91:8d:1c:e7:ef:b5:a9:70:e8:60:1e:95:74:9b:1d:
11:33:c8:45:9d:f7:5c:7d:3f:d7:54:73:ee:78:3e:
67:07:e1:81:6e:3d:26:cd:34:61:1f:1b:ea:91:b1:
93:d1:01:5a:9f:02:46:de:72:62:6d:53:88:cc:9d:
f5:92:a8:47:78:e3:2c:83:cb:83:3a:3e:4a:7e:83:
72:29:12:5c:8a:ec:df:da:92:16:12:90:0b:70:50:
ab:ac:79:71:32:dc:92:15:e4:5a:ee:a6:83:f8:dc:
44:d0:28:86:9b:26:c4:96:e8:2e:86:0d:8c:53:c4:
ae:a1:d2:d0:70:5a:00:21:ec:30:c2:5a:1f:a8:da:
25:2e:32:54:b0:96:c3:e8:21:34:11:9c:31:4c:64:
b4:c7:da:63:36:e8:7f:25:21:40:e2:6c:ff:d7:53:
b0:7f:e6:a6:a1:21:1f:13:5a:4d:9a:0f:6b:63:66:
cb:37:c7:36:76:89:51:8a:71:1f:a7:51:3e:04:39:
28:df:51:cf:7e:dc:dc:72:68:98:ef:c4:dc:6f:d4:
dd:2c:a3:f1:a6:e4:e5:c4:cd:06:63:c0:2e:35:ed:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:F2:13:94:CA:B9:8A:2D:4D:A8:57:3D:88:7E:DE:A2:BA:84:71
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:b3:26:9a:4a:d4:43:87:44:59:7e:1d:b4:54:ee:84:8e:
61:a4:f9:1e:e9:f4:29:0e:8e:9f:e2:29:74:64:4a:78:37:93:
7c:04:24:ea:8d:52:d3:b4:1d:eb:c4:4d:61:35:e7:de:29:54:
32:0c:fe:aa:a0:80:89:1d:41:aa:bb:dd:d1:3d:46:44:2b:33:
a8:2d:01:04:99:15:9f:9c:66:9e:f5:28:31:f3:04:c5:52:69:
f9:eb:39:cc:db:89:bc:65:13:8f:6e:fe:39:6e:56:5a:bd:84:
b5:73:67:87:f6:c9:c1:71:de:f7:cf:7c:b5:25:d0:c5:53:54:
93:1f:58:6e:0f:e7:2c:d3:49:d4:63:89:d0:77:cd:8d:c4:61:
6c:3a:f4:da:04:6a:51:c2:69:fb:bd:22:b6:5d:0e:0b:d3:1c:
64:22:a8:ec:a4:85:e7:be:5f:c2:73:ef:c2:01:ca:3a:14:10:
60:e4:4d:29:c5:73:7f:84:e0:52:38:f4:dc:0e:62:12:7f:25:
48:5a:a1:0b:71:9b:8f:68:6c:6d:70:dc:0f:7f:da:3a:f7:2e:
8d:db:69:b2:09:80:ad:9a:9f:bb:cc:3e:3f:e8:53:4e:bb:bf:
d5:45:0d:e1:a5:59:6f:55:a0:4a:5d:f8:48:7a:b7:65:30:12:
c9:1b:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:06 2026 by rpki-client