Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: kUzAoIdTy79saBIi65ohadF0OM0b9VCp7XOA9CBts60=
Subject key identifier: EB:DB:C5:ED:27:4F:23:A5:46:17:3D:9E:82:DE:28:CF:12:38:87:60
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019DA379130D26EFF5E9C5172E917049B64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 1409
Signing time: Sun 19 Apr 2026 02:01:53 +0000
Manifest this update: Sun 19 Apr 2026 02:01:53 +0000
Manifest next update: Mon 20 Apr 2026 02:01:53 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: y4+A5kqOajWY+SDVjPTiglbfmgBshMhBjf3tbdeNgig=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:13:0d:26:ef:f5:e9:c5:17:2e:91:70:49:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Apr 19 02:01:53 2026 GMT
Not After : Apr 20 02:01:53 2026 GMT
Subject: CN=ebdbc5ed274f23a546173d9e82de28cf12388760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:d9:d6:bb:48:11:69:46:4f:92:8a:3a:7e:
e9:ed:da:22:62:75:6e:33:59:19:ef:42:57:74:5a:
2e:62:07:48:9c:20:b2:78:f1:07:e5:37:43:3b:9a:
d6:dd:f1:04:b4:bd:0c:d4:50:87:aa:c9:84:39:46:
78:28:c5:5f:36:2c:2c:aa:2d:25:05:20:d1:f4:5b:
55:0e:b0:ff:d5:9e:3f:9d:94:d8:83:eb:cf:ff:39:
2f:91:98:2c:62:bc:c9:df:e2:9c:14:ba:1a:00:50:
05:ba:c5:37:36:e0:77:31:20:7c:14:1e:e1:22:d3:
9c:79:a5:54:b6:c0:2d:0a:20:3b:98:75:db:0c:da:
31:8a:48:98:8d:a6:80:d9:84:f3:4f:a4:8b:c7:4d:
1c:10:de:bd:e4:60:f8:40:26:5a:ac:a1:70:90:3b:
14:b7:c7:d4:9a:6d:78:82:9e:d8:0a:76:17:50:d6:
86:6f:a6:e3:cf:63:a4:31:3d:c4:42:1a:90:47:5e:
6d:eb:40:5a:d8:1d:82:14:ab:d2:29:33:da:f9:59:
17:a1:47:40:5f:53:7e:87:a1:79:be:29:f7:75:0f:
b3:8d:cf:27:b7:9d:75:dd:39:6f:50:cf:89:f2:f0:
18:22:8b:e6:9a:4a:7d:e8:7c:88:ec:93:07:a7:4b:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:C5:ED:27:4F:23:A5:46:17:3D:9E:82:DE:28:CF:12:38:87:60
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:2b:c0:4b:cd:66:3f:9f:34:6c:54:1c:e9:12:22:8c:89:
0b:e3:ac:7a:2c:17:51:25:77:57:fa:f2:38:00:15:be:1b:a1:
db:ac:69:c0:15:f6:bb:cf:bc:b4:27:b9:a6:02:b5:86:61:9e:
84:2e:dd:6a:26:d5:ac:0e:e4:e4:e7:49:b9:dc:b9:ac:7e:fa:
8c:6a:88:c1:1d:81:c3:4f:70:4d:f2:c2:a2:05:8f:67:bf:98:
8e:b1:65:ed:e4:3a:95:fc:f1:ee:92:e6:34:4f:8b:07:0d:21:
07:99:a5:37:f9:63:4a:4f:70:06:c1:8a:24:da:d7:14:38:56:
ab:f8:d8:a6:13:81:54:f3:15:31:7e:6f:74:db:97:dc:03:0c:
55:3c:57:6a:ae:c3:39:89:42:f4:44:14:7e:ab:61:3d:e4:4c:
44:ba:b8:7b:0d:92:48:65:ce:19:bb:d9:0a:23:b0:dd:9d:ea:
e6:e9:ba:8f:10:09:4b:75:1b:5f:ce:e9:05:cd:90:70:7e:d5:
87:73:90:20:6c:b6:da:64:7e:31:43:da:ff:26:5c:ef:ff:b1:
30:b3:be:18:07:a2:69:be:07:a1:3b:46:fe:c2:4f:37:63:6a:
2d:e8:27:af:b5:9b:7d:50:ae:12:bb:51:d9:53:af:36:77:b3:
e7:4b:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:56 2026 by rpki-client