Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: 4tq4WZvBHvwyfZXERSOgejyPCStjD02cN3ASbp9MURU=
Subject key identifier: 6D:09:CD:E0:0F:C9:09:42:BB:60:8C:5F:C0:AE:88:C4:84:D3:23:F0
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019D37F783D06CB8F0A7554AD6CC2CE95E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1462
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: ElwaUMINBaBKF34TpTL8haqVd_s.roa (hash: QJTxI54JV9QgQdwNg1CINH9sDRPfJfNrzCHiU/q0Bi0=)
2: PfqFO43KqwDuwV1NwMVNOIpCa7k.roa (hash: KIFfrdCVgjpBo7n8/Wm61/4Xa4EQ0RYR7+7S2nxBq8A=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: XQfxWyOtE3iivBvcjveQ2ZQRYS2PaNAS1mgjbYvFQdM=)
4: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (hash: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:d0:6c:b8:f0:a7:55:4a:d6:cc:2c:e9:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=6d09cde00fc90942bb608c5fc0ae88c484d323f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:a6:ac:af:99:98:6d:cc:a3:2e:6d:69:a8:
35:c0:79:08:ab:52:a5:8b:0a:1a:90:dc:ba:44:67:
fb:b1:12:25:59:9d:c6:7e:ab:67:a8:00:69:04:72:
c8:6c:ac:11:6c:7c:56:ec:95:31:f1:ac:79:f2:11:
af:c1:82:42:86:fb:1a:3f:76:a3:8d:e3:f7:41:67:
bd:2f:c9:f4:9f:16:6f:ef:73:90:cc:d0:15:3f:d3:
0f:3e:70:d2:f1:ad:2d:c3:ea:e9:82:76:31:a8:16:
2c:a0:53:a2:46:22:a0:af:5d:e7:7f:9c:24:0d:2d:
a3:00:39:ff:32:f7:0e:e2:05:25:5f:c5:cb:76:63:
9c:bc:ac:89:c6:1d:87:0f:d9:5e:3c:4c:77:03:66:
0e:27:b9:73:8e:8e:16:90:53:b9:b0:e1:ea:a7:a3:
63:bf:88:1c:9c:12:ac:12:96:19:8d:f8:ba:39:3a:
7d:2a:a6:46:e6:30:56:48:fe:09:a6:1f:53:dc:29:
da:21:e6:18:c7:07:76:91:97:89:1e:b4:fb:e1:36:
4c:6a:07:a0:38:87:98:ce:22:9c:a1:d1:cf:74:d8:
b4:87:e6:4b:3b:86:b6:a5:5d:47:20:38:be:0a:a4:
e1:3e:b1:6d:51:ef:4d:02:aa:7c:16:d3:31:42:26:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:CD:E0:0F:C9:09:42:BB:60:8C:5F:C0:AE:88:C4:84:D3:23:F0
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:79:b7:a5:15:48:8c:0a:13:bc:eb:01:af:18:fa:26:f2:99:
9e:9e:43:af:58:d5:27:41:8e:44:12:0a:6d:b9:d1:da:f1:ac:
ab:ab:a5:cb:b3:37:74:9f:50:c8:fc:52:ef:ed:7b:4e:02:b1:
2d:95:17:fa:29:62:1b:87:14:43:9e:5b:18:de:bc:1a:9e:97:
59:1f:e5:1d:c4:6d:c3:2a:27:24:d0:ad:ec:92:4f:38:b3:0e:
98:7f:da:fd:b7:43:53:2d:29:01:07:40:6d:b7:82:ac:a6:15:
20:48:15:d2:93:78:70:54:d8:1f:04:b8:4c:b9:54:ab:b4:a3:
ac:3a:c5:96:a8:25:31:ea:3c:61:e7:39:58:52:13:e8:1b:bd:
a0:75:55:aa:04:d3:a3:09:71:37:2e:2e:ec:2b:89:82:43:a1:
6e:f0:9b:1c:3f:d8:e3:82:3a:a7:bb:88:f8:07:0a:f2:a1:b6:
b8:de:fa:e3:f8:d3:df:fb:33:f8:ec:37:de:05:23:5c:e6:a6:
ff:bd:6d:78:b6:36:90:cb:43:83:e0:9c:cf:45:29:2a:3e:4a:
c7:fd:83:21:11:d4:f5:14:75:27:de:da:3b:1c:43:4a:d0:50:
58:f4:9c:15:12:b3:59:06:42:1b:47:b7:20:27:72:59:4f:d8:
d4:57:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:54 2026 by rpki-client