Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier: vHY13c8OrDj/P+0zJFcx9tVJxNhUneJoU+2EQ2/2y1c=
Subject key identifier: 48:D2:03:F8:C8:F9:E9:5C:9D:85:77:33:FD:A2:99:A5:AF:70:E6:82
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial: 019D28BBAC286B5E7860894D985307645A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number: 0DDA
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: lWFmjWS1SbQSeACbvDZD9f1EmEg.roa (hash: TjMg92xbLY6yeaH0PpcE4pe0qFscpI9c3d7VL5l9Rzw=)
2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: Fc3EXW3A775vJ/I/5asQAM6FOFr4tRRyQZWjTv+5rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ac:28:6b:5e:78:60:89:4d:98:53:07:64:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=48d203f8c8f9e95c9d857733fda299a5af70e682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:90:7e:ab:3a:52:7b:74:49:32:8c:ea:e9:
40:71:4e:ef:e9:05:f3:46:5f:f3:9a:19:2b:df:2f:
81:6b:ed:df:12:cd:46:70:9e:ec:8b:52:bc:52:4f:
25:8e:14:89:df:32:a2:3b:55:ba:4f:60:00:ef:ca:
17:38:b4:3f:6d:1a:19:07:81:4b:9f:11:bf:8e:cf:
d8:42:01:d7:d8:0b:e1:12:18:89:f7:c3:9b:f1:35:
1a:5c:28:60:6b:86:20:d7:dc:93:48:f0:a3:67:27:
49:f6:56:fe:c8:dd:8c:7a:55:a7:b3:bc:86:1e:2f:
6b:b1:30:12:86:da:76:fa:2c:12:ef:ba:fe:57:38:
9a:f5:d0:dc:9f:1c:46:1e:bb:a4:37:b4:12:0e:bd:
31:bb:1f:3c:99:97:dc:03:8a:ba:4e:d3:0c:ee:ac:
80:65:76:d2:3d:98:d9:87:2e:35:f2:05:4f:0d:e2:
bc:8e:51:f1:74:b7:c7:46:8b:07:c8:83:e5:d3:7f:
da:2d:84:ed:3f:f6:d4:5d:03:ea:b1:b6:30:57:1c:
dc:f2:63:a4:b3:3b:fd:20:7f:21:47:02:f9:c9:dd:
45:53:61:6e:ea:d4:35:73:f5:f7:ab:1b:86:c3:53:
50:be:f8:be:ef:00:69:fe:9f:5e:14:24:f9:11:32:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D2:03:F8:C8:F9:E9:5C:9D:85:77:33:FD:A2:99:A5:AF:70:E6:82
X509v3 Authority Key Identifier:
keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:89:7e:10:3c:a6:22:33:8e:78:e8:61:db:b4:a2:5b:d9:
5a:eb:eb:ea:a5:dc:7d:64:86:ca:1c:5e:73:a0:ca:36:10:1b:
e1:81:6b:be:7f:4c:41:bf:66:cc:59:3f:ad:62:e7:48:77:a7:
93:04:80:c1:ed:e8:99:70:1a:c1:19:72:cc:90:3d:5b:ad:c6:
87:6a:70:b8:6c:e1:54:b5:43:d3:d3:43:be:05:0c:91:55:1d:
d4:05:f6:ef:b3:00:ed:41:e7:19:9d:8a:c5:e7:f9:cf:6e:99:
d3:25:24:1c:f0:c5:b9:1d:c8:4f:e4:6d:9e:b3:5c:af:01:79:
be:e3:32:15:71:99:41:e8:e7:3b:3d:e9:9a:2f:03:af:50:42:
39:38:31:4f:a6:82:84:10:df:bb:e1:f7:1c:75:5a:9b:d2:da:
98:7d:1c:25:97:f2:17:43:85:4a:8b:df:49:68:98:a3:43:71:
71:23:22:50:29:cb:23:f6:a4:ce:f7:6b:8b:7a:8c:46:1c:8e:
79:41:aa:f0:df:be:60:32:d4:95:5d:50:aa:cb:e5:dc:cd:94:
91:7c:7a:31:48:22:70:f3:9c:91:49:05:1e:49:40:20:d2:8c:
e2:80:ba:4d:a0:3f:62:17:83:81:3e:ab:2b:a3:d7:de:cd:3d:
66:a5:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:04:23 2026 by rpki-client