Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: n/b9v8M6/1aJxRdQh3Yc7Vs+7UQnu80S93/FlPG3uhY=
Subject key identifier: 58:47:12:E9:F2:AF:BE:68:C2:13:EE:25:72:8F:BF:3D:BC:33:F9:C7
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019CAA587AD69DC98FA4E235199B1BB28856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 1388
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: fODIw1KkOlSrY2OVpupUmldIsdjkI76M8L8k3YjwfFw=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7a:d6:9d:c9:8f:a4:e2:35:19:9b:1b:b2:88:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=584712e9f2afbe68c213ee25728fbf3dbc33f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:09:ec:44:4f:13:af:70:4e:50:a6:d6:1d:
5f:a5:94:ca:4e:1c:57:1b:aa:83:c4:2b:a3:f9:8e:
31:b2:9c:8e:5f:54:27:07:d2:67:23:ff:66:13:7b:
5c:28:3e:d9:6f:e2:06:19:fb:28:15:0b:b1:ec:1a:
b9:a8:01:1d:45:93:ea:8d:3f:84:2a:bb:aa:29:8e:
49:92:51:bf:8e:b0:d2:ac:0f:4c:3e:9b:0b:93:cc:
89:1b:90:63:58:1f:f7:61:9d:6e:43:c4:f3:cb:68:
5d:81:fe:fb:66:f1:ce:f9:d9:66:06:e7:08:79:1a:
3b:4a:99:a5:79:d9:66:90:d1:42:88:b3:30:87:a4:
bb:e1:f3:e4:e4:28:43:2b:77:a0:ce:9e:91:b6:ec:
b1:5d:41:63:0b:ef:ad:32:77:cb:11:0e:91:a0:88:
74:d8:66:58:27:95:f2:03:6b:e9:a0:73:48:22:f3:
b0:dc:e3:0e:28:e3:20:3d:6a:7a:8f:86:17:76:fc:
ad:09:38:84:ac:63:2e:9d:67:ed:e4:e5:95:63:7b:
d3:a3:58:ed:63:02:05:9c:f6:37:be:f6:88:c4:06:
f5:19:f8:bd:a8:a9:b0:6b:4c:7f:21:35:d7:74:5e:
13:6d:8c:b9:66:58:9d:92:2f:dd:5f:a1:26:d5:a7:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:12:E9:F2:AF:BE:68:C2:13:EE:25:72:8F:BF:3D:BC:33:F9:C7
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ec:f5:e0:68:2a:87:72:54:21:8c:15:fa:5f:86:ea:bd:57:
e9:77:24:b2:d0:6d:5d:28:f3:ab:07:20:48:68:66:0b:06:dd:
7d:69:8e:14:20:fc:47:80:b6:18:3c:16:9f:a8:c6:4d:ed:43:
d4:f2:c5:91:7e:58:16:cf:b0:e3:b5:d9:c2:c8:b8:be:5a:8d:
dd:fe:30:d8:ae:f0:cc:f5:0d:44:ee:71:d5:2b:c6:0d:ed:ab:
59:95:65:36:01:e1:e2:75:3d:22:a0:b3:4a:0e:34:14:4c:f3:
41:1b:bc:fa:44:1d:23:d7:a0:64:ef:e2:98:ab:0e:80:d4:ad:
f2:8c:4f:74:c3:52:b2:02:71:fd:c4:f0:dd:d7:fb:2b:46:05:
cf:25:f3:6b:08:9f:5c:16:e1:f2:a5:13:ec:cf:21:f3:be:92:
8c:f2:70:49:c6:e6:af:9c:8d:10:49:ce:e3:17:d9:08:86:21:
59:51:bf:dd:4a:b6:8d:17:47:4f:ce:4b:bc:62:68:94:c2:29:
91:46:dd:b0:2b:d4:67:03:a5:8d:b1:ab:a7:93:89:98:f2:33:
39:8d:37:e3:62:55:62:e2:b1:d2:ce:0c:13:b5:c2:d3:66:7b:
c7:f4:1a:8a:c2:5a:62:4d:1f:10:3a:15:5a:48:68:e8:4c:9f:
7e:5c:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:30 2026 by rpki-client