Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: dUZkQfFlARCuFqMcQKsqeOo35gXgCt+YOA5R/6i3aRg=
Subject key identifier: 75:4E:55:FD:FB:F7:5B:91:0B:40:8D:5D:51:13:4A:04:95:B5:4A:E4
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 01A08B317BFAECA20E9A9E0801D5E9D6943E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 183C
Signing time: Thu 10 Sep 2026 12:01:10 +0000
Manifest this update: Thu 10 Sep 2026 12:01:10 +0000
Manifest next update: Fri 11 Sep 2026 12:01:10 +0000
Files and hashes: 1: QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (hash: vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=)
2: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: jvfKmxHAuNRLOtMrRfDlbvQmKIoKQVdsYDk5A8fnUYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:7b:fa:ec:a2:0e:9a:9e:08:01:d5:e9:d6:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Sep 10 12:01:10 2026 GMT
Not After : Sep 11 12:01:10 2026 GMT
Subject: CN=754e55fdfbf75b910b408d5d51134a0495b54ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:5e:40:ca:c4:f7:65:0c:e0:8b:ee:2d:10:
74:33:be:eb:80:eb:69:28:c9:63:5c:fa:55:8d:6d:
6f:73:04:35:57:4e:54:0a:bb:97:4f:99:c6:99:05:
4e:9b:63:5b:95:ca:47:63:c9:32:45:4c:6a:ad:7f:
04:cd:29:78:6e:dd:7c:38:de:39:e1:2f:a7:a9:0a:
7c:76:51:50:40:d8:7c:a2:b9:61:9f:6c:42:bf:05:
91:19:7e:84:91:75:1c:00:06:fc:ef:7f:01:3f:47:
83:a1:6b:f3:25:0d:f8:1e:ff:e4:ce:6b:7c:f9:89:
62:07:1c:46:9c:6d:9b:61:13:f7:5a:4b:89:51:17:
c6:e4:b8:83:60:75:dd:da:33:c0:e2:f5:d2:6f:2e:
0b:d0:09:fc:4e:b1:1d:74:c7:2e:ae:10:bb:6b:c9:
f8:3d:74:ce:1e:6b:1f:d0:11:4d:ea:98:27:70:ea:
b2:a6:a4:64:f8:a6:28:2b:9f:f1:cf:83:ca:b2:30:
bd:77:d8:78:52:ff:ac:6d:05:d4:ce:a0:2d:20:64:
3c:de:fd:9c:69:dd:9c:96:78:d8:9e:8f:d7:02:02:
44:b3:ee:21:09:02:88:09:b6:c8:7f:bf:fd:8f:cc:
c5:7f:ba:56:53:b8:ea:78:5c:b3:d1:04:22:6c:61:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:55:FD:FB:F7:5B:91:0B:40:8D:5D:51:13:4A:04:95:B5:4A:E4
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2f:c0:94:ed:02:a3:7f:ec:a5:58:02:36:f5:05:69:c5:be:
8f:b2:e8:9e:c9:ce:06:e1:29:96:9c:77:32:99:b7:f1:17:fd:
f3:54:ef:ce:48:ec:11:6b:22:21:19:4c:0e:60:65:04:61:af:
ba:dc:b4:23:a3:38:72:97:5e:2e:3c:fa:f4:b1:cd:a1:51:1e:
53:b5:a6:72:3f:15:de:cc:23:69:3e:bd:4e:ae:15:2d:b0:26:
09:bb:bc:37:71:f9:2d:50:f1:f7:26:5d:b8:97:4d:ac:ca:60:
a1:02:de:5b:66:b2:c3:3e:da:0d:cf:3e:ed:77:00:5d:0e:ca:
1d:c2:f9:8e:b8:75:be:d3:e5:13:15:fb:7f:9b:c8:bd:f7:0d:
a4:55:d3:cf:56:ee:3e:57:4d:1b:86:4f:41:c0:af:e8:5d:64:
2e:54:f3:48:7d:90:5f:07:70:d2:bd:76:53:f1:5a:3b:a7:64:
61:ff:52:9a:20:bb:9c:d5:04:11:15:8b:0d:63:1c:78:93:fe:
1b:3f:80:24:96:55:19:6d:02:6b:57:6d:b0:aa:d0:61:fa:5f:
bf:5c:e8:8c:d7:81:6b:3d:9d:48:ce:b1:55:3e:26:fa:db:ff:
1f:66:54:65:58:99:ad:03:ee:99:3e:fd:7c:4e:95:0f:56:fd:
3e:00:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:09 2026 by rpki-client