Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: oCHhN7gmW/yabrL62oRBeWNaCvce9BaYbDMt7e5eHHU=
Subject key identifier: FB:86:4B:A4:E0:5F:7F:B3:BF:C8:4B:BC:5B:E9:11:D3:A5:E1:E8:31
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 019D38D3C2EEBE86DE01810724173E9D0938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 080C
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: QLtJcG0ov5kJEPRfZdYFBtWtVsjz1e1l4+1SUEw3jpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c2:ee:be:86:de:01:81:07:24:17:3e:9d:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=fb864ba4e05f7fb3bfc84bbc5be911d3a5e1e831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:a6:ce:d6:20:c0:eb:e5:5c:4b:e3:c6:00:
c3:8c:f0:57:47:ce:9e:cc:51:a5:f2:e1:73:db:fe:
d3:38:43:55:c1:4b:d4:b2:0d:10:70:2b:25:e0:37:
b6:57:bd:7d:6a:41:11:aa:d3:50:52:f1:45:7f:2f:
40:3f:20:04:d7:9e:55:ee:b9:25:c4:35:26:38:de:
1a:ca:96:e8:d2:16:da:aa:48:af:aa:94:d6:28:dd:
37:ca:03:80:04:88:71:78:4c:f5:5d:b9:a1:40:34:
1e:9b:5e:7a:70:95:5a:cc:40:dd:ed:a7:e7:ba:63:
ae:6b:0e:36:6e:ef:3b:44:d7:7a:03:65:0d:7a:63:
0f:27:dd:b1:e2:0a:15:83:79:55:93:c5:24:20:75:
a4:94:44:27:01:83:ea:f7:2b:01:00:db:1d:ea:99:
c1:82:21:92:1f:ca:fe:03:c1:2b:d4:7f:32:2e:23:
fe:64:66:5d:5d:64:24:b0:30:37:52:06:04:c4:fb:
13:fd:71:b5:2b:6d:1d:3d:55:8a:73:3e:5d:12:3c:
d4:56:23:97:3b:5b:5b:b3:6c:4e:11:c1:40:84:e4:
6a:91:80:14:14:df:5e:93:62:9e:c9:6a:92:52:16:
12:dd:51:65:03:d0:90:1a:5a:18:ff:e3:72:71:09:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:4B:A4:E0:5F:7F:B3:BF:C8:4B:BC:5B:E9:11:D3:A5:E1:E8:31
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:f0:05:bb:49:b0:17:f6:1a:d4:fc:58:82:a6:ec:66:75:
60:36:43:23:56:48:a4:c9:93:5c:f8:2c:1c:40:08:68:b1:bf:
06:4e:55:a7:02:87:e0:75:86:31:bf:57:70:88:c5:35:1b:a0:
1f:b7:15:64:7c:f2:50:3c:ea:f9:92:2c:da:e1:f4:23:86:9e:
de:5c:79:cb:01:20:b9:5e:c5:c3:98:41:6f:39:5b:59:0a:84:
ed:1c:32:ac:d0:68:90:c7:82:4a:3c:43:aa:cd:b0:ee:d6:6c:
14:91:75:5c:06:5e:ca:f6:29:87:9c:26:26:9b:fe:7c:d1:d3:
1e:65:55:9d:d7:44:72:63:e5:75:8f:f6:eb:39:aa:0c:db:ce:
32:ca:e5:d2:2c:ea:f3:d9:0e:c5:55:74:39:2c:df:1a:2a:ed:
91:a5:ab:50:5e:a0:59:f5:44:da:6d:f0:63:9d:82:66:ed:c0:
f5:cc:4a:3f:7a:da:fc:45:c5:b3:33:fa:c0:43:8f:13:70:03:
be:08:eb:f9:eb:b0:9f:2d:e8:9d:6d:1f:f8:55:a3:12:13:14:
e0:03:40:86:d1:4c:f2:75:e8:6e:24:42:d3:0d:18:cb:d4:ed:
e7:3c:bb:b5:cb:11:b3:3a:e1:71:e9:a0:2c:ce:e4:f6:a3:c8:
af:70:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client