Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: RU5NBn+UUL79QrUUwpq5ApO/V+T3JEdqDL9xLpUDRk0=
Subject key identifier: A9:03:59:F5:15:9C:08:C8:84:59:10:37:E2:A6:F4:AA:B6:D2:2D:FD
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019CAC7DF424263A9075F2BA9A37AF379872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 146E
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: 80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa (hash: inbOmLYfTUWv8xqKpQqk0iSMIhKJkA0PbwgWW07QMo4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: ktYE5jXbF03h5+rd13YUCbEVH1fGrO/Bq3pZoKZwhwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f4:24:26:3a:90:75:f2:ba:9a:37:af:37:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=a90359f5159c08c884591037e2a6f4aab6d22dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:9a:4d:dc:88:e7:29:8f:ee:be:f6:5a:02:
79:d2:e7:d9:3e:2f:c3:5d:0b:72:13:00:13:e2:a5:
a2:a3:ea:57:45:ac:7a:e4:7d:60:12:a5:7b:9c:c8:
fa:0e:24:6e:ee:e6:91:14:d2:f8:40:7e:9a:e6:c7:
7a:69:5f:7f:f1:62:d6:66:5e:95:d3:10:7f:24:95:
b7:ce:8c:85:14:01:e1:e9:29:4a:58:4f:b9:21:2c:
6b:9c:2e:86:e6:e1:f0:58:9c:63:5c:a1:47:59:b8:
b4:b0:45:9d:a6:c2:1e:e2:5c:6d:fc:9b:96:6e:45:
06:85:76:f1:ba:17:3a:27:31:3a:1e:82:4d:c2:af:
37:d6:35:69:9f:cc:e8:a6:ee:56:5d:f3:65:31:84:
b4:96:03:7a:32:69:bb:24:01:ec:5d:db:d8:d4:a6:
ac:47:40:e4:72:69:9c:5d:ce:bf:24:cb:80:e7:5a:
1c:9e:28:fe:e4:7d:6a:01:64:0f:12:e0:47:ce:77:
73:cd:c3:08:92:e2:ee:21:d3:b2:74:0f:d4:df:7b:
e3:e1:c7:ef:0a:01:7f:de:4d:0b:3a:99:e4:41:5b:
9f:5c:b6:a0:5e:65:ab:c1:92:f9:15:fa:0d:a4:e7:
30:d5:1c:65:e9:cb:98:37:9a:87:84:80:fc:92:52:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:59:F5:15:9C:08:C8:84:59:10:37:E2:A6:F4:AA:B6:D2:2D:FD
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f0:63:10:80:94:0c:1b:72:91:49:50:32:27:45:64:14:a2:
62:cf:8f:36:cf:08:99:9e:e5:cc:4b:f2:6d:3c:a7:b5:fc:90:
dd:60:df:96:7c:df:f7:60:72:c4:e5:70:41:bf:fd:18:fb:06:
07:09:35:bb:f6:eb:ac:39:04:73:45:c4:f9:d6:95:46:f9:c9:
a3:91:57:bf:6f:46:de:02:ee:dc:82:d3:c0:0e:f4:33:ee:a5:
58:ce:99:bc:02:2a:f0:ff:7a:3c:fe:a0:04:2f:f8:d9:ef:d6:
cc:b0:f5:6d:2e:d9:fd:53:0f:db:fc:10:e3:29:1b:93:37:11:
64:69:c7:f6:d0:f7:dc:f2:99:8c:69:87:4d:59:83:0a:19:10:
a4:5a:73:67:3e:96:d9:46:19:8f:e5:99:62:74:19:5b:9c:67:
fe:e5:a6:eb:3a:26:f8:4a:39:77:40:fa:44:db:a8:48:34:ba:
6c:5d:62:ca:71:99:d9:9b:e4:11:2a:aa:68:92:be:cc:03:c5:
b1:5b:2a:ec:e0:75:b9:c9:c7:b8:b5:90:22:a8:05:d6:f1:55:
25:29:81:d0:6c:f7:d0:6a:5b:7d:19:9b:06:e6:56:01:de:c4:
57:10:6c:e4:fd:ce:8d:ba:2d:2c:16:11:53:ce:4f:82:c8:1f:
0c:46:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:40 2026 by rpki-client