Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: tQ7uGMQhG/l93Bk76kPM0KGEGmt4yByH6CIPLSkImaQ=
Subject key identifier: 89:BA:5A:17:BD:A2:1D:65:4B:5D:2F:FC:2D:54:49:69:E3:DC:47:18
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019D273AC4F4733C725907030DEE5EA186EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: W04FY7JhdiDRIPdLbNcIZ0iEPYnBLzk+I2KUnRmE/JM=)
2: fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (hash: UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c4:f4:73:3c:72:59:07:03:0d:ee:5e:a1:86:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=89ba5a17bda21d654b5d2ffc2d544969e3dc4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:8e:9c:36:8b:c5:1e:0c:5e:f7:b3:7e:3b:
1d:7d:29:a1:cb:8a:83:05:ef:f8:9f:24:ba:62:21:
a2:18:65:6d:5f:6e:20:62:00:b6:25:73:37:e8:9e:
5d:4b:56:ce:0a:38:37:78:28:ed:08:5f:3a:56:b6:
a6:75:f3:e0:96:6c:ff:fc:5b:be:39:16:32:47:22:
92:8e:37:ad:3e:bc:5f:65:1f:eb:fd:4f:8f:e3:67:
30:0d:15:0c:7c:42:89:f3:4c:98:d4:cb:05:1c:37:
57:ce:f2:73:d6:0f:c4:73:6d:ef:48:04:83:46:0d:
97:71:43:23:67:16:b7:0a:fd:e3:c1:a4:b4:fc:58:
ae:42:c4:53:05:58:f4:63:7e:79:47:41:1c:05:ad:
a4:f9:60:57:e2:65:5d:3b:1a:7e:e6:a3:70:b1:25:
4e:3f:89:06:3e:45:f6:1f:81:cc:3e:1c:8b:a5:9c:
05:89:34:41:2a:a2:8c:e6:78:11:8b:58:7e:7e:93:
30:ba:26:4a:c3:aa:32:8a:d0:b6:52:69:f4:99:8a:
a0:da:b0:23:67:ce:5a:64:86:8a:8e:46:07:da:c2:
06:d6:d0:c0:fa:d9:97:02:ca:4c:6b:b8:e1:b2:12:
3e:aa:5d:11:66:48:5e:20:66:ad:07:8c:d6:23:59:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BA:5A:17:BD:A2:1D:65:4B:5D:2F:FC:2D:54:49:69:E3:DC:47:18
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f4:05:39:f0:e1:fe:f0:97:ad:e6:80:b7:f0:6a:7a:66:3a:
6e:01:d7:d3:e6:7a:af:66:b2:0c:58:72:cf:2f:1d:9f:1a:16:
c4:1e:cf:dc:d2:a1:92:79:c1:35:ac:07:b6:39:f1:3d:00:a2:
40:b3:b4:d0:c4:4e:fa:f6:90:0a:00:89:29:6c:00:c8:dd:ff:
08:3e:d3:71:69:2b:23:63:08:2d:13:d4:6e:5d:c5:5c:56:5c:
c7:97:18:c5:7e:7b:57:9a:33:3e:af:b4:2d:de:78:42:1c:fc:
f6:79:f6:32:80:7c:39:32:1a:46:40:6c:7f:51:30:92:1e:07:
1c:cf:13:9e:50:63:f8:00:68:46:5e:e5:c4:d9:a4:fc:e8:4d:
22:c4:28:f2:d3:38:f3:2f:3e:ef:54:c8:7a:79:4a:bc:68:b9:
0f:d5:d7:50:a4:49:79:33:1a:8e:39:67:09:2a:d0:7b:2f:7a:
9f:1d:5d:78:71:da:e6:7f:cf:02:b7:c9:4c:68:95:20:ab:17:
ce:d1:d2:be:47:6f:f9:db:45:94:2b:41:7b:ad:b1:60:67:e1:
33:0e:21:97:c0:55:bc:25:a3:87:9a:c5:6b:cf:22:12:90:2b:
dd:04:78:79:b4:ec:dd:0f:d0:87:57:aa:47:92:7e:fc:cd:f6:
5f:db:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:39 2026 by rpki-client