Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: KwksUj+pU/f7zm8oXWpmRkvjau1GLyqBSZhD+45ivF8=
Subject key identifier: 9A:5F:E5:D3:19:69:03:4F:D3:20:E0:F5:75:4C:7C:5F:1F:D5:ED:7F
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019D3977A8D242EEAACF895EDC28ED25EF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 1684
Signing time: Sun 29 Mar 2026 12:00:36 +0000
Manifest this update: Sun 29 Mar 2026 12:00:36 +0000
Manifest next update: Mon 30 Mar 2026 12:00:36 +0000
Files and hashes: 1: QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (hash: vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=)
2: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: QIyeiHW9z3NvQAyI84dAnu0pM5boommRyhAwg1OVF38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a8:d2:42:ee:aa:cf:89:5e:dc:28:ed:25:ef:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Mar 29 12:00:36 2026 GMT
Not After : Mar 30 12:00:36 2026 GMT
Subject: CN=9a5fe5d31969034fd320e0f5754c7c5f1fd5ed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:71:08:d1:37:ff:b3:e5:22:a8:5b:77:37:
01:06:13:74:b4:09:79:0a:c8:85:4f:e9:b5:c6:8e:
77:ef:32:0f:05:40:0d:10:0c:7b:95:9e:9f:b2:13:
b1:67:00:b8:79:a2:6b:88:40:0b:64:42:35:58:3d:
a5:8e:7b:cb:e8:f7:af:68:30:4c:f1:56:f2:39:dd:
04:16:56:e2:25:03:3b:3c:17:e4:1a:66:12:6f:f3:
db:91:d3:f0:4b:cd:25:3b:04:10:1f:2b:15:5a:c9:
09:26:01:e0:25:2e:ca:0b:25:bd:76:d5:25:6e:47:
39:7b:46:a9:b7:15:84:4c:ce:91:1b:f5:19:00:98:
e9:96:56:aa:47:db:48:26:94:1e:eb:f4:85:b0:b1:
8f:54:b7:95:70:b8:6e:f4:7e:5e:13:ae:b8:b8:db:
19:dd:b8:8e:3e:53:11:97:7f:6e:6d:ca:6b:b1:c6:
b9:07:5e:26:67:e3:18:42:d9:ce:ee:23:c6:06:73:
a3:d9:8d:e5:6c:da:02:da:8f:09:77:6b:06:c9:31:
57:9a:16:a8:fa:ba:41:53:76:10:b1:0c:ae:aa:2b:
c4:57:bd:d1:7b:10:a5:04:56:91:8a:f7:db:aa:f4:
0c:f4:38:d0:6b:b3:a9:1c:84:32:45:f3:cf:13:f0:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:E5:D3:19:69:03:4F:D3:20:E0:F5:75:4C:7C:5F:1F:D5:ED:7F
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:aa:e5:04:b8:0b:5d:90:f2:14:74:86:bb:5b:9c:ec:33:
f3:5e:35:25:14:0b:9f:f5:f4:c0:38:6f:a7:4d:71:d4:f2:64:
53:72:7e:71:42:de:8e:f1:79:b1:b1:a6:b8:2a:05:5e:07:a2:
97:7f:6f:12:ac:81:5c:68:6d:97:00:b3:fd:40:ec:b5:86:81:
34:6d:db:86:f7:31:fa:40:24:ab:87:32:9e:11:c2:cf:1f:cc:
ba:96:92:07:fd:ef:5d:2c:60:d6:e6:bc:f5:2e:a9:8e:a9:ac:
9f:32:6e:09:d3:c9:d7:82:60:08:3e:35:45:84:f4:2c:e8:27:
fe:8e:66:9b:1a:d7:5b:f3:de:c9:d3:81:7b:f1:34:ab:16:e6:
f3:12:46:d7:8c:48:62:51:68:46:35:8a:ba:69:e2:b6:f4:cd:
8e:4c:91:c6:eb:63:e1:ae:57:c3:cc:e0:ee:4b:2b:81:67:1f:
3b:be:b8:0c:42:76:d6:37:f5:94:a3:bb:e6:c9:90:e0:54:94:
30:cb:72:b6:91:ba:3f:19:8d:ae:c1:19:66:95:d6:76:12:cf:
cd:b0:39:c7:51:d1:54:c6:de:f3:c3:e1:e4:b3:1f:3d:8e:0c:
b0:1b:f7:d0:ee:b6:69:79:cc:b1:b6:b7:6f:fc:18:02:d8:09:
57:6e:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:52 2026 by rpki-client