Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
File: rcPkes8gE_hlTK21u8BSJoDj0CA.mft (raw, json)
Hash identifier: yOJO2hCB5T1Q4kAGICpQ7We87pKyPU2PozG1FEKelQo=
Subject key identifier: 74:D3:58:9E:B5:46:C6:F7:AF:54:55:5B:3E:49:B7:BA:87:6B:B1:9D
Authority key identifier: AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20
Certificate issuer: /CN=adc3e47acf2013f8654cadb5bbc0522680e3d020
Certificate serial: 019D25BA27EC46EED4DAA1DA6E453767ED16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
Manifest number: A8
Signing time: Wed 25 Mar 2026 16:00:50 +0000
Manifest this update: Wed 25 Mar 2026 16:00:50 +0000
Manifest next update: Thu 26 Mar 2026 16:00:50 +0000
Files and hashes: 1: kpaNejaKmczszSeV4Kr3nQVsfCk.roa (hash: ae4+SDY4Ysgx2BqDFABpfVwYYmnIsIslEL496b85q74=)
2: rcPkes8gE_hlTK21u8BSJoDj0CA.crl (hash: xB+N5QaSPDPLes9P5bNJD8m2d/YulRo5mlloJSQoGGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:27:ec:46:ee:d4:da:a1:da:6e:45:37:67:ed:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc3e47acf2013f8654cadb5bbc0522680e3d020
Validity
Not Before: Mar 25 16:00:50 2026 GMT
Not After : Mar 26 16:00:50 2026 GMT
Subject: CN=74d3589eb546c6f7af54555b3e49b7ba876bb19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:41:dd:0b:5f:db:1d:dd:e0:46:1e:0c:1f:
c5:21:86:67:96:ee:72:98:99:9c:7b:3e:89:2e:8e:
1b:61:a8:58:e8:de:01:8c:c3:29:87:6d:8a:0e:76:
fb:bd:07:aa:0b:b8:7e:02:cb:ca:66:f5:1b:65:6e:
c4:33:83:e8:61:01:bf:6b:7c:82:9b:ed:c4:ec:a2:
03:06:22:e3:48:96:be:78:75:57:8b:44:15:df:7e:
d7:4c:9c:70:90:ed:41:d4:d5:a4:aa:fa:36:f4:d9:
c3:06:8f:6e:89:43:82:97:59:57:03:9c:b7:c0:20:
d9:09:e9:64:b3:3b:e5:e4:b9:23:f1:3b:0f:b3:ff:
36:4a:76:0e:65:fe:0c:86:55:b9:eb:9f:b6:0f:3e:
7e:ae:0b:4e:6c:ea:01:6a:a6:7e:fc:80:d8:42:1e:
54:0b:85:72:03:70:ac:90:6a:82:ef:87:f5:63:00:
db:f8:ef:1a:bd:57:0e:26:40:5c:17:ea:d7:b3:89:
fb:1c:60:97:ec:89:91:86:aa:1c:9c:b9:0b:7e:15:
65:33:7e:9e:72:6b:86:72:d2:57:4b:94:e1:5c:b8:
29:2a:87:6e:06:f1:b7:b5:da:c6:0f:04:ea:98:16:
62:41:c6:86:62:75:54:b9:33:5c:a1:3b:96:0b:26:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:58:9E:B5:46:C6:F7:AF:54:55:5B:3E:49:B7:BA:87:6B:B1:9D
X509v3 Authority Key Identifier:
keyid:AD:C3:E4:7A:CF:20:13:F8:65:4C:AD:B5:BB:C0:52:26:80:E3:D0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcPkes8gE_hlTK21u8BSJoDj0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/350b1a-7a06-49bf-bde2-bf0f65b7d35a/1/rcPkes8gE_hlTK21u8BSJoDj0CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:86:fc:55:e0:27:81:83:79:d7:ed:70:75:2a:6d:96:eb:f6:
14:21:e7:39:ef:a2:a5:be:f0:41:44:c2:a7:ac:b3:38:b0:4a:
98:20:93:c6:df:f3:9f:d1:b4:d3:6f:e5:bb:fe:84:3a:bd:56:
2e:ee:5a:41:5e:1c:ac:60:d1:72:1a:b6:bc:6d:5f:c8:93:69:
71:95:57:79:04:45:96:31:03:51:2b:82:6d:47:60:d7:ac:91:
a5:a5:ae:c9:c8:ee:eb:04:4f:1e:64:18:6d:42:0b:29:fe:76:
96:25:4c:43:20:dc:0e:c7:de:33:5a:9f:bb:fd:12:86:b2:3f:
16:6d:b0:3f:bc:a0:bf:67:5a:dc:d9:da:b2:98:bb:18:d0:df:
48:f8:af:31:2b:50:45:6f:3c:b2:ae:ea:73:d9:79:20:af:ec:
26:fb:dc:5d:46:db:e9:80:ca:92:e6:63:55:1b:95:ab:93:92:
54:3c:ff:f0:3c:4e:a6:b3:21:35:26:af:e1:1c:56:78:12:f6:
1a:1d:19:4f:48:92:0d:02:0c:45:17:26:06:ca:31:79:9e:29:
a9:17:6d:23:04:2b:14:84:84:d2:e6:be:c1:b3:19:af:9d:a8:
b1:ba:d7:5b:a0:af:bd:98:10:6f:dc:3b:79:78:53:01:77:90:
e8:56:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:32 2026 by rpki-client