Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: Qh6hWwIPqKJ9aAijr9otwus/ns45Jup+LCbL5F4CYN4=
Subject key identifier: F2:5C:E2:96:43:5D:57:AF:3A:5D:47:46:58:F7:B2:7C:63:68:94:3A
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 019D27DF534A147B5BC0CD13AF52A6659666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: J2vsYiO_j7zPiKzW4JGDK-XoS3M.roa (hash: CDGBFZZXjqUOo82TFc4xaYNNSk3nq1xi7rB9+MvdQeA=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: /GCONfQxSdNweBmZPGEuMJaRaM3rKBq0tuWMapw6ucs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:53:4a:14:7b:5b:c0:cd:13:af:52:a6:65:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=f25ce296435d57af3a5d474658f7b27c6368943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:08:3d:4e:e3:b0:9b:33:86:19:83:44:5f:
ed:b4:0d:e1:28:8a:76:b0:eb:3f:5a:96:f4:bc:80:
d5:9b:4d:39:54:61:41:4c:a7:26:79:4d:fa:4c:2f:
38:20:a7:58:39:01:d3:67:3d:21:f2:70:30:e2:86:
be:78:1d:4b:da:50:80:fe:35:1f:c5:14:2d:79:97:
7d:f7:1b:81:a4:b9:a9:82:98:42:bb:16:be:c5:5b:
61:c4:02:03:24:1f:66:45:e9:83:0a:74:a0:5d:1e:
df:4c:3d:ab:36:0a:89:97:ee:08:47:56:c8:5a:d5:
70:d8:44:2e:d9:f8:a0:90:9a:02:c0:1a:d6:b3:68:
80:ae:33:29:0f:82:7c:25:60:9b:bd:68:e6:80:82:
82:7e:57:5d:99:50:3a:30:d3:4c:08:8e:b1:b1:40:
aa:11:4d:fd:b7:5c:4f:54:3a:cf:d8:08:e3:c0:7e:
6d:b0:34:bc:77:bd:d9:00:bf:b3:24:41:ca:35:d6:
45:30:a3:95:6e:3d:db:b1:6e:3c:2f:f3:81:e9:ef:
d3:24:5f:06:91:aa:df:fb:8f:4f:59:bc:42:68:7c:
42:7e:ff:b2:8a:1b:db:a6:27:a6:02:f6:48:43:d0:
04:e9:7f:1c:2e:46:a1:f2:db:28:6f:74:6d:f0:df:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:E2:96:43:5D:57:AF:3A:5D:47:46:58:F7:B2:7C:63:68:94:3A
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:74:a3:80:55:9a:f1:63:9f:39:a1:02:80:10:a1:f9:4f:
52:1c:e5:c9:a7:57:2b:1f:7d:43:5c:f4:ec:17:15:ca:6f:2c:
ba:cc:02:f6:de:31:e9:c7:38:08:80:78:90:fa:46:18:98:0a:
e6:c3:3a:9b:2c:7a:fb:2f:f1:69:d7:5b:91:ab:86:a8:c9:99:
13:07:1c:6b:4d:ed:94:2f:ac:10:1f:75:0a:1c:0b:ba:e2:ca:
6e:9a:5b:44:75:87:2b:36:be:13:1a:48:75:3d:9e:1e:f0:6b:
1e:db:82:9d:84:64:b1:75:85:85:96:db:14:12:79:12:6f:ac:
b1:7f:18:5d:cf:87:9c:d6:d9:3d:38:53:da:eb:a1:4b:82:44:
91:05:80:38:8e:72:49:94:d0:78:38:b8:c5:b6:ab:76:63:09:
f6:51:a1:7d:42:0c:b9:82:8e:71:58:30:6e:f0:b4:ac:a4:4d:
1f:ac:86:de:34:32:1a:97:85:0e:a2:11:cd:71:a5:da:84:c5:
e6:a7:f4:26:b2:77:81:f1:a7:c8:cf:a6:4b:99:7b:56:b8:d9:
21:49:3d:12:1c:2a:b1:10:af:dc:ca:3f:50:6c:7e:3d:7d:b8:
dc:4f:06:6a:2b:96:4f:48:88:a7:b8:fc:64:fc:a9:54:bb:da:
e7:8d:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:07 2026 by rpki-client