Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: z3J9bQsPZi7CoYT0yVxXdqRcM6uVM0419dRRna0noyQ=
Subject key identifier: 83:C2:FF:D6:7B:33:81:76:D4:C7:E1:42:2C:9B:0E:1F:F1:EC:66:5C
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019D2771C36DF5EEE273B41BB8730D0D161E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:00 +0000
Manifest this update: Thu 26 Mar 2026 00:01:00 +0000
Manifest next update: Fri 27 Mar 2026 00:01:00 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: CqsniR9rxoihDEI9sR4U0kel8E5VzTe4M6QwAX45dF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c3:6d:f5:ee:e2:73:b4:1b:b8:73:0d:0d:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Mar 26 00:01:00 2026 GMT
Not After : Mar 27 00:01:00 2026 GMT
Subject: CN=83c2ffd67b338176d4c7e1422c9b0e1ff1ec665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:eb:9a:17:e5:66:75:07:15:fc:01:c9:6b:
29:43:3d:7b:d5:ef:59:c2:72:00:e6:2b:a2:84:38:
10:d4:38:e2:1f:99:db:2e:ce:48:39:e6:69:bc:ac:
b8:44:c7:4d:57:cf:c4:09:c0:08:6a:fd:69:c9:29:
93:56:f2:ec:0d:a1:cd:d3:13:1c:a0:ab:53:11:96:
e3:3c:dd:44:a8:a0:b6:9d:47:eb:c1:eb:f9:67:8d:
87:6d:7d:8c:ac:f5:c6:0b:37:72:5b:9f:55:6b:7d:
ae:2d:d8:b8:f6:67:cc:c8:b1:c2:03:cb:06:1d:61:
a5:22:c3:b0:c5:97:0b:dc:0b:58:6c:09:d2:2d:7a:
bf:d8:20:ac:b2:8a:7f:98:b3:ee:68:18:91:4e:09:
b2:29:3f:49:b9:54:bd:e9:50:c2:9b:04:50:fb:a2:
c5:68:f8:6e:0a:d7:5b:b1:b1:74:41:d1:f4:17:67:
c4:5d:77:65:66:25:fa:93:0d:63:65:47:0e:1e:c0:
9f:84:c7:c4:08:33:b6:7d:00:e0:db:6c:b0:91:7e:
fb:96:98:da:49:3e:58:7c:4a:0d:37:bb:97:c2:ef:
da:76:0a:07:d7:54:29:f1:39:e4:be:a3:2d:7f:16:
c3:62:57:17:29:c6:61:72:20:22:59:e7:2b:42:a3:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:FF:D6:7B:33:81:76:D4:C7:E1:42:2C:9B:0E:1F:F1:EC:66:5C
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2b:d4:a1:97:af:45:51:e9:d6:51:ab:ee:dd:67:cd:7a:e1:
bd:41:9d:a0:86:a3:98:0a:a6:b9:25:b2:c3:2b:90:ef:cb:bf:
60:13:cb:63:db:c8:a0:56:a9:09:d4:11:bb:95:6f:08:61:d1:
58:7a:ad:a3:a3:0a:16:90:18:c4:16:b3:f0:0a:ac:91:d0:8e:
f6:90:9c:cc:66:3e:1f:47:2d:9e:06:77:57:27:a4:c0:8c:99:
15:e9:0e:c0:65:75:94:9a:7c:1e:99:19:96:1c:2d:de:c1:e8:
d0:8c:9e:f1:b0:e5:41:7b:90:78:7a:07:53:17:03:f3:db:4b:
7f:0e:38:e5:4b:68:da:82:18:6d:8f:93:a2:9f:3c:a5:86:a5:
a9:42:b5:07:74:93:8e:6e:3e:10:c8:a2:ba:b1:41:0c:46:ed:
04:de:84:5d:27:e0:be:59:fa:6d:05:ba:b2:14:72:3d:bb:0b:
d1:78:9c:9a:20:e9:fe:87:f4:73:67:42:7e:18:98:29:d0:a8:
d5:2f:30:15:6e:40:79:f3:0b:e8:ce:aa:9d:e8:56:46:2e:98:
90:c5:0f:81:92:d3:0f:64:ed:6b:ec:85:e2:cc:47:b4:ce:1e:
4d:e4:6b:31:bd:89:15:e7:dd:ba:6a:a3:51:16:c3:5f:01:9f:
6a:19:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:57 2026 by rpki-client