Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: zVDydxmSvb5If8ZKr1vYAAYiD8OiMr0FOWnCnS8zu80=
Subject key identifier: C4:DA:1E:EB:A6:87:36:37:64:B6:E2:C8:67:45:4C:4F:4E:9B:83:0D
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019D389BAD5C7E8CFBD21F244E82082F7BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: t+4aCEpq6QyDaWzzxfriftaCcTeHNCJ7t7Zfq7zFWdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:5c:7e:8c:fb:d2:1f:24:4e:82:08:2f:7b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=c4da1eeba687363764b6e2c867454c4f4e9b830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:0f:b6:30:b1:98:3b:5a:a6:1f:bd:8c:6a:
a6:e2:5a:a9:f7:fe:55:1f:9e:13:fd:6d:4d:c6:0a:
08:76:b8:16:3c:80:b9:55:8d:50:78:e4:50:1a:2a:
61:3e:10:65:61:d3:0a:3c:73:c7:d0:3a:bb:85:ce:
20:c9:10:e4:64:08:c7:3c:ff:49:a7:b2:8e:7b:10:
ff:00:7e:4e:10:37:c4:af:7a:34:3c:50:3c:cc:92:
1f:5c:5b:28:fc:0e:de:13:83:aa:45:a7:0d:4b:a9:
fd:a7:9b:b2:c5:ac:05:30:fa:47:9b:0b:d7:e8:10:
22:3d:03:ed:9b:65:05:8b:c5:b0:b1:26:af:f8:81:
4c:b8:dc:69:48:e3:94:99:7e:e5:68:d1:71:45:9c:
d4:ac:a7:8f:20:95:9c:97:ef:b0:14:8f:b7:53:3e:
41:ce:45:24:74:b9:91:6a:31:b4:6d:bc:1f:4d:c3:
ff:dc:0f:9f:37:94:3f:fd:00:a7:fe:30:e5:88:8c:
96:4d:46:c3:86:30:69:5f:fb:48:cf:2d:48:7c:43:
43:5c:41:72:bb:d0:35:01:e4:b8:a4:ae:1f:52:a7:
21:cd:f4:db:fe:e1:ba:0d:92:df:e0:6e:e3:74:c7:
e9:43:fd:91:c9:72:52:59:54:fb:f1:9f:de:cb:e4:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:1E:EB:A6:87:36:37:64:B6:E2:C8:67:45:4C:4F:4E:9B:83:0D
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:0a:d4:e4:c6:a8:43:38:24:cc:4e:bf:3c:ed:c1:e3:c9:
ba:1f:35:6e:31:cf:ea:97:ca:a3:56:a5:51:b9:93:15:5f:0f:
24:1b:27:7e:d1:0b:5a:99:4d:68:2f:53:9e:15:eb:ae:e4:8e:
99:8f:15:a5:06:0c:85:e3:e3:d1:73:7a:4f:fd:0d:c7:7c:d7:
2c:bb:3e:87:9e:82:c9:03:55:07:80:e8:03:af:35:aa:c5:14:
eb:ef:ea:a6:4f:6b:89:54:89:a0:cc:64:67:59:9e:ca:b2:72:
eb:79:d2:1a:f4:f0:97:8b:39:f0:ee:fa:65:b5:74:5c:e0:62:
d9:7c:96:e3:0f:3b:18:30:88:86:74:2d:ff:dc:fe:79:9d:9c:
34:b2:45:53:59:b1:ba:ca:97:d2:57:8b:a3:b2:c1:5e:a4:65:
5a:0f:37:06:8e:e5:cf:99:d1:06:02:4a:b0:ca:76:ad:de:d5:
c4:f8:d2:ad:d9:6b:27:90:eb:74:50:a5:f3:73:0d:08:20:9b:
5a:49:48:27:62:1b:25:4e:c6:82:33:d5:4b:b2:68:32:c7:10:
b0:a4:4a:d3:b1:91:1f:70:07:81:f9:6f:a0:1a:92:18:99:56:
15:08:56:77:b0:57:5a:5a:ae:cf:b7:f9:6e:d5:d3:78:2d:08:
11:33:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:50 2026 by rpki-client