Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: otcv3TubDE+TvFBiIqKfdv9OM4xoY42UBgyhGZLrt0Q=
Subject key identifier: 25:D8:C2:10:2D:10:F3:52:99:92:6F:C9:71:20:09:F7:DA:BA:8D:AE
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 019D2703B8183C0DC0A7B138CD8200295220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: bHL1JZuwDbJ9i+FBeHFeX7M2mllvj1L41WuGA2nVyy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b8:18:3c:0d:c0:a7:b1:38:cd:82:00:29:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=25d8c2102d10f35299926fc9712009f7daba8dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:cd:8e:30:a6:da:12:3e:c2:e4:67:d9:f5:
17:0f:48:af:9e:38:af:fa:13:d1:cc:7a:17:66:1d:
91:12:95:be:2e:2d:14:32:4a:e3:20:46:f1:85:7d:
90:83:6a:d3:3e:54:91:7d:91:94:54:48:aa:e1:e9:
c5:fb:2e:2d:c8:4f:b3:d4:0b:34:17:3f:7c:47:ef:
7e:2f:49:26:a1:5f:b6:3a:a4:82:d8:81:ba:82:d9:
61:eb:34:36:2e:ef:72:c6:4d:4a:2d:a0:29:67:1b:
7d:ae:82:0f:e5:8b:fb:8f:aa:71:9a:9b:5c:a7:e2:
61:88:d1:df:89:57:8e:d7:77:70:cd:d9:ae:fe:93:
2e:12:39:e2:00:7d:40:0f:a1:0a:85:13:5f:6d:9b:
ff:e0:ec:7d:c1:d1:8c:fd:d1:1a:1b:04:f8:6f:fd:
9b:d0:f5:de:8f:c8:27:e7:b4:5b:23:45:e6:db:5e:
f4:b0:f9:e1:87:4a:d9:25:c0:71:2a:41:b5:3f:39:
d1:ca:2e:07:fe:eb:94:6f:7d:d7:36:1a:db:eb:8b:
68:e6:77:59:16:f7:9b:c3:c5:5c:f3:75:6a:b0:6f:
f7:5d:58:3c:81:cb:e1:4a:4f:ed:60:2d:4e:f5:bf:
b6:fc:5a:40:5c:3b:5e:39:9a:a9:f5:37:cc:4c:64:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:C2:10:2D:10:F3:52:99:92:6F:C9:71:20:09:F7:DA:BA:8D:AE
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:d0:6d:5e:80:2f:ec:a0:10:1f:73:cb:31:db:21:0f:b5:
5d:89:3c:53:4f:c9:9c:d6:1f:2a:1b:9d:a8:4b:94:cc:6d:95:
8f:cc:90:44:29:c1:8c:97:03:14:71:a5:12:99:a8:23:a3:34:
30:d2:c5:f5:69:c1:34:91:39:da:d9:a0:79:0f:6c:14:2b:aa:
15:e2:05:04:1d:62:c8:bd:65:22:a8:38:d7:a4:dc:80:85:36:
f0:50:a8:c7:b6:01:b0:e1:d9:62:21:7f:44:f0:c3:41:51:53:
04:53:f9:7a:c5:d9:0b:72:70:3e:08:93:f3:a0:18:c2:56:f7:
89:98:84:d3:69:ae:b1:49:31:56:c9:4a:dc:aa:cd:6a:24:27:
ae:b9:7d:47:b1:e6:72:3e:10:9e:43:1d:50:61:47:95:6d:59:
c5:de:f8:15:f2:54:0e:38:30:f8:21:49:80:5f:a7:ee:35:2c:
2b:03:96:7b:c7:11:29:73:48:98:1e:1e:ad:b9:47:47:a2:9d:
a0:5d:be:35:91:a4:1a:fd:76:d1:a3:60:6a:87:ad:89:c7:18:
4d:0b:a1:df:d5:f7:74:bb:d8:c9:0d:e9:2d:23:fc:48:11:76:
73:b2:d3:7b:b6:f1:e1:88:54:74:d5:8d:65:ec:60:3e:c6:7d:
1e:bd:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:40 2026 by rpki-client