Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: QcGGBIjVk3TUrGAIV1pdLO2p3ALhTz3jXkcGSlLcAYg=
Subject key identifier: 00:8D:41:0C:05:2D:20:C6:C3:15:73:E7:40:48:EE:F4:BA:7E:C6:F5
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 019D390A37557697CF26B94D284A16738876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: d8Ox8FBYXsaIB1S0il3JTqCiIxGX1dU43HIQyOP+Sv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:37:55:76:97:cf:26:b9:4d:28:4a:16:73:88:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=008d410c052d20c6c31573e74048eef4ba7ec6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:f0:20:4e:51:ef:b5:72:05:ec:39:9c:f7:
4c:5c:f1:25:34:55:4e:b9:eb:b9:c0:54:41:09:ad:
f1:00:f5:24:ae:88:20:5a:a5:be:f1:db:7b:d4:96:
b3:ae:94:4d:69:8b:bd:7e:36:d2:74:4c:ef:ce:69:
f3:7c:56:6d:59:dc:ee:e3:53:70:7d:f2:73:04:8e:
c8:93:00:07:c6:43:33:fe:42:32:87:38:a9:40:b1:
ec:b7:e6:0e:69:58:65:44:95:1c:69:24:43:e9:da:
e8:25:cb:0c:9a:e8:c0:74:8d:e1:eb:b8:3b:19:96:
27:3a:83:a5:e0:8f:73:1d:87:ac:2f:73:44:44:51:
58:1b:81:98:04:80:1b:e1:64:6e:66:d4:3a:ad:b4:
60:11:36:c8:e7:99:9e:70:61:be:e3:37:8c:35:e8:
bd:44:d2:bd:b4:fd:94:d5:2c:63:d0:2b:98:62:b7:
2d:93:0d:ec:c7:da:d4:49:92:42:ae:ac:75:6e:dd:
a6:6d:5c:f4:71:64:6f:fa:1a:68:42:09:07:05:0a:
f5:cd:0b:87:86:cd:59:89:ab:97:c7:02:fd:cc:44:
2f:28:c8:b7:78:24:0d:d5:43:5f:41:cb:6d:fc:d4:
94:d9:d5:ee:56:f7:ba:09:e7:82:38:42:3b:4f:5a:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:41:0C:05:2D:20:C6:C3:15:73:E7:40:48:EE:F4:BA:7E:C6:F5
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:20:31:03:e8:05:5d:cd:23:1b:36:6b:5a:89:b6:e5:b7:4d:
48:3d:a4:d7:18:02:31:f9:d4:b8:e7:27:f7:ac:47:0d:46:a8:
89:3a:ed:49:06:88:30:a5:81:cd:14:4e:61:fd:c5:a1:62:95:
62:62:01:1c:54:63:5a:ee:6d:51:8c:4e:d8:4c:bd:ad:cc:7e:
34:d0:59:bb:12:0a:ab:d7:17:95:c1:c7:20:a3:73:c3:34:71:
01:47:8f:bd:11:11:22:fd:65:e2:e7:48:69:b8:96:64:a0:88:
53:58:23:2d:f4:60:77:9a:70:0e:60:3c:79:21:2e:7f:7d:6d:
f9:a3:f2:ba:28:1c:db:e7:74:0d:14:c3:ca:7c:26:f2:f9:cd:
9a:be:2e:f8:86:07:3e:c2:8c:67:0c:d3:91:27:55:40:a2:90:
65:6a:1f:c8:21:c0:11:2c:8d:ad:13:00:6f:68:5e:c5:67:3b:
44:01:d7:61:e8:9e:e1:fc:ad:a6:cf:a4:0e:14:c3:53:53:32:
c1:2c:2f:c4:6d:c9:ce:5e:14:3b:08:3e:94:39:75:ef:48:f6:
f9:46:97:de:c5:1b:7c:3f:e4:5b:61:0d:cf:8a:4d:b8:4c:cb:
d6:1a:a8:e3:33:e7:ea:60:45:c7:98:76:61:6a:d5:6c:eb:f1:
c5:9b:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client