Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: ykLLIF0wl+mZyfSUanvyod/h33Cmk31PB/4BHbfdCUE=
Subject key identifier: 82:64:DE:2D:ED:61:33:E0:97:10:DF:A3:BA:23:08:74:42:0D:96:E6
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019CAAFD7E70BAB96A0A66C8DF176B56FF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 04F7
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: 0Ls1EegJnpsHWE0gkkCpgcQcVdNv5+wono4HwMuq+/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7e:70:ba:b9:6a:0a:66:c8:df:17:6b:56:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=8264de2ded6133e09710dfa3ba230874420d96e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:51:37:98:45:21:aa:52:05:49:ac:cc:c2:
19:b8:f4:03:de:1a:91:87:ee:e9:6f:67:eb:68:fb:
ec:92:10:47:d6:f0:f7:d2:6f:5b:33:7c:0a:1b:bf:
94:df:90:b6:0b:ef:ab:04:f8:95:f2:79:62:f8:ca:
10:b5:73:5c:c3:5c:25:d5:c1:3f:29:88:85:fc:01:
ff:ab:52:f4:95:c1:57:f4:2b:ff:bb:6a:08:01:10:
63:37:85:d2:3a:bc:91:e5:50:1f:26:ea:d0:c2:f9:
3f:f0:1f:5f:fc:9a:36:1c:b8:e7:ec:8d:94:10:d8:
5b:06:4f:d1:10:5e:5d:52:7a:ec:ea:de:c2:c8:15:
f5:c1:19:9e:95:42:ba:b4:c9:65:1e:5d:4f:30:f0:
5e:5b:7b:42:66:60:21:e0:1a:b8:0a:ae:10:d8:ca:
b8:88:46:7c:74:a6:14:13:3e:b2:97:1a:d7:07:fa:
8f:1d:e9:70:eb:7d:7b:b3:bd:93:ec:c8:47:e6:59:
af:bb:4a:71:2a:5f:7e:0e:98:45:15:2e:de:2b:ff:
91:f8:fd:69:df:2a:ec:19:c1:6a:f7:83:a9:bb:93:
12:8c:3d:4c:3a:94:bf:30:20:49:64:0d:da:20:49:
1b:05:72:04:84:11:31:ee:e6:b6:77:bb:7c:3f:51:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:DE:2D:ED:61:33:E0:97:10:DF:A3:BA:23:08:74:42:0D:96:E6
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:2e:38:fe:77:14:19:30:8c:8c:f3:b2:73:82:c9:38:da:
64:d7:75:c1:2f:2b:37:c6:47:99:28:18:28:03:ac:2b:60:7a:
78:75:6c:18:7f:6a:4e:6d:41:b4:3c:cc:bd:9f:0a:06:4a:44:
72:b8:b0:56:81:f1:98:cb:45:b1:73:03:f6:64:8a:a9:e3:ec:
69:67:d2:86:ff:cb:a8:eb:66:e6:77:ed:c2:30:b9:bf:47:aa:
7a:12:3f:ee:0a:5c:a9:11:19:51:57:d8:bb:ab:e3:89:02:e9:
77:2c:aa:f6:61:35:0b:92:03:05:0d:68:19:18:30:58:81:43:
d9:5c:36:11:79:39:1a:15:42:2f:2e:03:fb:ef:59:6e:54:07:
79:02:8c:b7:b6:95:88:8b:50:b5:c6:d5:07:1a:e4:7c:7d:14:
93:50:bc:ac:86:96:75:83:61:ab:5a:35:3d:85:c5:b1:3b:33:
1e:50:32:56:88:66:33:59:a4:c3:2d:89:3e:9d:56:eb:89:93:
7b:43:2b:4a:3f:ae:99:c2:bf:d0:53:ee:7a:fd:e5:d7:24:2a:
33:c1:b9:80:16:e7:9f:39:0e:5a:04:77:ae:a5:44:83:fa:c9:
ed:a1:88:bf:a3:d0:dc:fb:66:e2:46:38:57:f7:23:df:b6:64:
a7:98:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:06 2026 by rpki-client