Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: YWPH7OosATseqdE8je04FXYoQEekV+IVvN6PK/8E1LM=
Subject key identifier: F1:0D:A1:8C:F2:16:08:FC:98:75:FD:AF:80:F5:F9:5D:83:F7:80:77
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 019CE4ECDC2C9F37EF3EBD482D8362EAD74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 0A0F
Signing time: Fri 13 Mar 2026 02:00:53 +0000
Manifest this update: Fri 13 Mar 2026 02:00:53 +0000
Manifest next update: Sat 14 Mar 2026 02:00:53 +0000
Files and hashes: 1: XzS-ABIitAhoDjgaxod5k36Rzyk.roa (hash: 8qFIpKhqUDM+Zl/pmjZajomHNYIv1lRs91XtmDgIewQ=)
2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: CsGAupTim2+UlUFfIxpRcc+qmpY4BNIqA7Q097+A06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:dc:2c:9f:37:ef:3e:bd:48:2d:83:62:ea:d7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Mar 13 02:00:53 2026 GMT
Not After : Mar 14 02:00:53 2026 GMT
Subject: CN=f10da18cf21608fc9875fdaf80f5f95d83f78077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:aa:62:8e:f2:6f:35:d5:ff:7c:04:7b:32:
ab:f0:b7:75:41:88:ca:ba:88:47:d6:c1:d7:1d:72:
cd:0e:1e:b7:4c:1b:08:9a:7c:85:3d:f6:6e:70:c0:
96:30:dd:7f:94:f3:83:58:86:13:75:cf:34:55:35:
f2:28:f9:d7:3d:d9:2d:35:16:0f:cf:72:cb:f6:16:
19:d3:21:98:32:9c:e1:a9:5e:f3:ef:0b:c8:d2:ba:
f3:3d:32:2a:14:50:64:51:8c:f7:19:4b:d2:a2:c8:
a6:0d:aa:9a:77:7e:1f:b1:39:cd:37:b6:97:e7:51:
4e:64:10:30:43:93:60:73:8d:71:c8:94:e2:5c:bd:
ce:6b:12:d4:80:ff:36:da:91:b5:7a:f3:a3:88:32:
1e:a6:1d:69:4d:e4:3c:7f:1c:89:85:45:80:5e:71:
a5:ef:d5:b1:2a:ce:93:3f:b3:3c:b8:ba:b8:d4:80:
7b:d2:a2:5e:b6:2a:66:45:54:b1:be:f1:7a:c8:49:
5b:16:a5:b3:58:8e:0d:df:be:a1:d2:0b:99:71:75:
6b:5d:f7:30:f7:96:09:79:37:31:7b:1e:6e:40:35:
ac:97:52:68:c6:82:9d:a3:cb:f2:5a:50:47:e2:76:
0d:92:56:b9:b9:2d:7c:a1:9b:92:3b:09:25:54:ef:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:A1:8C:F2:16:08:FC:98:75:FD:AF:80:F5:F9:5D:83:F7:80:77
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:c8:09:05:b0:12:bf:01:12:1f:06:f3:93:ca:31:fe:06:
eb:e6:e1:bb:b4:1e:8a:62:0d:b3:67:d9:b8:db:93:f5:30:9c:
bf:80:7b:bc:61:37:66:65:bd:14:b6:ef:27:c8:bc:6a:1e:8c:
05:39:35:5c:e5:21:d6:24:ff:e4:8e:53:74:19:70:fb:d8:ec:
13:95:e7:d3:6f:89:4f:ed:9c:00:37:dd:83:03:a4:0b:29:85:
0e:f2:5f:dc:8f:a6:1f:d5:32:1b:d5:af:d4:35:ea:b5:00:3e:
98:ac:15:99:5f:e1:bc:e4:fb:9f:cf:49:59:e7:b7:66:f0:95:
2a:99:95:c2:86:87:2d:2c:7b:4a:1b:3d:73:87:15:ec:00:40:
ee:b5:76:1a:9d:3b:d9:8c:76:28:20:09:f6:ef:89:7d:57:45:
0a:64:cc:c6:2c:e7:fb:e0:c6:fd:1e:7b:13:96:03:36:11:41:
3a:cf:c9:c6:3c:48:38:ba:7b:5b:eb:07:06:c2:d7:d8:de:99:
ae:ad:ee:e4:c9:10:32:31:de:8f:5f:1d:da:25:a2:f5:ab:7a:
39:b6:56:de:1d:88:45:de:93:f8:e9:ee:ff:27:2d:47:48:35:
a7:15:90:37:28:41:9c:5c:f5:0b:b0:84:16:b2:09:82:58:26:
c0:4f:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:26 2026 by rpki-client