Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: erPTDWLBTfBnMSlgyRMQdR4yoDubdHJZZOJRwz0Jt60=
Subject key identifier: 31:A3:1A:E0:96:92:0F:75:35:01:01:F9:F3:7D:AC:A6:58:EF:D8:6D
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019CAB3413B3EFF5C01354E246BD8DA4E68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: QTFVoLwa+BEXOqqDLP79wuiSC44Jcrt1d7zdJCGnmXk=)
2: wkMmp6s5tIiVOMhQ-G1Z3odbkBA.roa (hash: E+8cABzHZlQUHHuKZ16h6fJZng3ckrzig4shYxP7eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:13:b3:ef:f5:c0:13:54:e2:46:bd:8d:a4:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=31a31ae096920f75350101f9f37daca658efd86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:6a:b6:78:6e:a7:ab:7b:38:9f:55:85:73:
c8:77:73:c4:82:6e:50:36:95:43:35:54:63:88:c1:
54:fa:81:fb:6e:a6:cb:80:9f:23:4e:04:46:b5:6a:
bf:1a:8f:a2:7b:af:9b:b2:86:e9:31:f5:9a:bc:60:
fe:e8:6e:c1:62:8d:29:5f:07:85:49:1f:47:c1:57:
ff:e8:3d:6b:c9:cf:a4:18:eb:3e:ac:09:70:3c:0d:
76:dc:03:ad:0c:67:96:71:2d:4a:b8:32:67:db:e9:
29:f8:67:61:4b:94:ab:a4:4b:5c:f3:17:ff:bc:a9:
aa:bd:08:4f:6e:4d:c6:a6:45:ac:c7:a6:79:c8:ce:
cc:7f:a4:83:c3:36:5f:c6:96:e3:fe:73:64:5d:a3:
e3:70:94:66:9b:78:1a:ce:5a:99:21:4b:ad:58:06:
53:eb:09:15:db:d4:f9:10:b6:3a:1b:d1:38:21:10:
db:50:60:2f:08:17:62:25:f1:6d:de:b2:55:92:e3:
53:f9:f3:f0:45:4d:41:61:d0:46:48:09:ca:43:c5:
3e:98:8c:65:21:f6:1e:28:27:32:27:d8:c7:c3:38:
a4:2c:8c:d3:90:f6:76:d6:33:57:ff:f7:6b:2d:df:
a5:a9:70:c9:9e:34:05:f1:d2:69:c5:57:2d:90:b6:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:1A:E0:96:92:0F:75:35:01:01:F9:F3:7D:AC:A6:58:EF:D8:6D
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:21:36:86:f0:71:15:d6:6f:5b:0f:0e:05:54:f2:31:f7:de:
08:8c:3e:90:5a:fc:3a:81:31:26:66:d8:71:2b:c3:8e:83:9c:
38:f8:04:66:b9:0e:83:da:93:dd:7f:e2:85:6e:4e:8d:eb:40:
eb:46:0f:49:d6:23:5a:43:8e:79:64:73:01:20:b2:4b:2e:53:
62:a5:6a:b7:7c:c6:4d:f2:69:2e:9e:89:aa:0e:d6:88:2c:72:
7c:56:c7:d8:2d:c8:73:35:05:65:05:dc:5f:33:75:96:b2:ad:
39:fe:94:55:e7:1b:60:ee:88:eb:bf:7c:ef:5f:5e:5d:75:45:
eb:ee:a0:28:a7:5f:85:13:ae:6a:f5:3b:c8:14:e9:90:f3:03:
12:90:33:68:a2:ba:fa:5d:65:65:ef:b6:ef:e7:ef:44:91:56:
61:ed:32:51:18:0a:ac:0b:3c:bc:30:ff:55:cb:2f:a2:a2:60:
a5:76:07:e2:ba:c8:a1:7f:29:9a:f9:74:8d:d1:c7:a3:a0:74:
e4:91:00:18:4b:b1:bf:61:6a:a6:06:22:58:76:ef:da:64:3c:
5b:25:ed:a7:9e:96:8b:c6:27:f4:f8:ce:0e:fc:ab:d2:fd:29:
9c:1e:10:f4:c5:04:e5:3a:30:cb:ba:64:5e:dd:4f:0e:94:27:
8c:c7:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:11 2026 by rpki-client