Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: tSIqXftXc4HCT4tvst6Xs5wDY4ZWCVnFkvJOfQD3W/I=
Subject key identifier: C6:FC:5B:4A:33:1C:83:39:B7:87:44:8C:AD:FD:81:E2:46:92:45:AF
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019CE4485AC422CD6D453CF1DE6CE5AA00BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1865
Signing time: Thu 12 Mar 2026 23:01:12 +0000
Manifest this update: Thu 12 Mar 2026 23:01:12 +0000
Manifest next update: Fri 13 Mar 2026 23:01:12 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: jtfpnVWFl8ko6lQniEwnLqe/MQ747aPKCc7tNekIvJc=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:5a:c4:22:cd:6d:45:3c:f1:de:6c:e5:aa:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Mar 12 23:01:12 2026 GMT
Not After : Mar 13 23:01:12 2026 GMT
Subject: CN=c6fc5b4a331c8339b787448cadfd81e2469245af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:1c:02:02:fb:f2:dd:a8:1c:ff:0c:a9:48:
bf:d3:03:91:72:02:b1:48:e8:8d:1e:41:da:52:67:
37:4f:dc:05:7c:0c:83:62:48:39:81:ab:b7:b0:7e:
4b:97:84:f2:f5:17:a1:a9:39:ff:ca:7e:0b:54:74:
62:63:a0:0c:e0:02:49:83:c9:c6:91:16:66:fc:8b:
e0:d8:f0:47:a5:61:42:df:5b:43:52:ef:4c:25:d8:
14:02:b7:cd:03:f5:b7:47:00:3e:b3:c3:f5:f5:5e:
5d:a4:e0:b8:13:5d:d9:87:34:4b:11:a7:1f:0f:6e:
72:95:91:90:d5:5a:4a:f3:d4:84:b5:d2:9a:3a:08:
84:5a:db:cd:b4:d1:bc:2f:9a:4b:5f:07:6a:77:6d:
c2:23:14:e8:ed:4f:c5:59:2b:4d:1e:2a:c9:01:fe:
6e:3b:d8:ca:df:f3:56:d0:8d:fd:0a:7b:cc:ce:8f:
ee:c1:cd:7f:1c:bd:fc:70:77:c6:f1:27:84:ec:62:
72:04:2d:a6:09:e1:e7:d6:fa:35:24:04:ac:43:f7:
1f:2d:78:8d:b5:80:27:27:8f:3e:92:07:ce:bd:17:
37:f0:c5:3c:0b:d4:72:98:0c:fe:56:cb:42:90:98:
41:ff:48:21:73:ba:0a:db:7c:f8:c9:a0:46:e3:86:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:5B:4A:33:1C:83:39:B7:87:44:8C:AD:FD:81:E2:46:92:45:AF
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:46:c8:4e:97:04:6c:f7:f3:e6:32:da:55:33:f7:8c:88:47:
89:53:39:ed:b5:9e:71:34:2f:51:e7:48:11:3e:1c:f0:2f:8d:
28:05:8c:bf:b6:55:88:82:b0:bf:a1:1a:98:a5:aa:13:1d:0d:
fe:23:41:50:3b:53:3f:7c:40:42:c0:58:43:10:db:2b:59:fc:
9a:74:f4:19:7e:59:20:11:6c:d3:35:5a:c7:52:19:2b:b2:38:
41:02:79:0c:c4:ec:df:ae:a4:13:5e:9a:eb:e7:a6:48:23:60:
61:9c:71:7a:6a:b5:3c:32:ee:5d:2b:37:5c:2b:b5:fe:36:76:
d6:5d:23:8b:b8:50:6a:94:80:dd:e3:e1:d5:85:bb:df:6a:18:
9a:8e:2d:e2:24:06:48:81:67:26:f6:d8:cb:e3:61:af:f4:07:
b9:c6:66:b2:b9:00:e9:46:eb:51:02:02:f6:10:57:55:c2:17:
98:b6:7b:7d:15:d2:0c:82:07:d6:13:e9:48:1a:3f:98:05:45:
b2:f8:1f:b1:d9:79:95:ad:9c:75:15:45:67:a7:04:35:63:5d:
a8:de:bc:b9:7a:4d:3b:c3:b7:4c:55:0d:38:cb:e2:c8:0b:42:
8f:4d:d3:20:f4:86:b8:a6:1c:53:28:e4:e8:e0:52:72:39:33:
6b:2e:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:12 2026 by rpki-client