Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: KTXPn/AVPkjl4Aqu2FxUwTvBVml8QjSvCKvDZFIs+O8=
Subject key identifier: 89:BA:1D:A7:0A:E8:3E:B5:DD:7C:24:0B:C8:4A:57:11:79:A0:77:71
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 019CAA589EC55DBF747082694A6BD0FA28E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 10C8
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: pLNa+E6IPzW8nqP4KdAWkbMt/lDiIps1MOY3q/ltDDc=)
2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9e:c5:5d:bf:74:70:82:69:4a:6b:d0:fa:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=89ba1da70ae83eb5dd7c240bc84a571179a07771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:96:72:b4:2a:42:43:b8:63:b1:05:29:59:
c8:7a:83:34:a0:02:de:38:68:e0:62:8e:e1:d6:f0:
20:50:71:bc:e8:b8:61:8e:1f:7e:c8:7a:49:9a:36:
e5:63:22:4b:1b:50:cc:84:fe:e5:c6:38:4f:ed:ab:
c4:f5:56:b4:de:f4:2b:d0:88:e5:b1:44:47:3f:ab:
09:95:f3:53:db:48:49:d8:72:43:4e:2f:79:3d:5d:
56:18:7e:6d:fc:1a:a2:a8:fd:61:03:ee:e3:0c:f4:
0a:4f:08:16:2c:b5:97:9c:a6:d2:47:da:9f:dd:f8:
b7:53:e5:1e:28:2d:fe:7d:59:98:81:be:4b:5d:08:
9d:c5:13:c2:6f:5c:d5:b0:5c:41:77:2a:bb:c2:eb:
12:14:d8:3d:92:00:e5:c3:b9:53:d6:21:92:26:75:
39:eb:76:d4:9f:ce:51:17:e8:ea:8f:cb:b9:0f:fd:
12:6e:74:93:5b:ee:0c:90:3e:85:70:28:4a:0e:04:
cf:54:41:c5:68:cc:eb:25:38:b3:49:3e:fd:af:3e:
49:13:1c:32:ac:9e:5c:50:25:16:85:2f:50:a5:50:
6e:49:1e:a6:60:52:64:cf:c7:de:4e:48:6c:ac:37:
5d:bc:bd:d7:ba:bc:07:3c:ae:d3:03:69:fd:2f:95:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BA:1D:A7:0A:E8:3E:B5:DD:7C:24:0B:C8:4A:57:11:79:A0:77:71
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f2:84:2a:17:15:ca:60:e8:0d:ee:f2:9f:26:f8:31:ab:f0:
02:b8:c3:84:dc:8f:a6:08:46:7f:d1:f5:4c:66:05:e2:c3:de:
e9:c5:ca:7e:1b:30:aa:bb:e6:71:69:f4:cf:7c:25:05:0a:a1:
31:6f:45:72:25:5e:9d:2f:f5:b3:3f:4e:46:d7:fa:e2:5d:fb:
cd:b6:ab:c2:14:13:f5:6b:55:30:58:fe:c4:3d:ba:a0:92:de:
b6:be:68:3b:63:96:1b:48:1e:d5:8e:c0:30:75:ed:74:71:06:
f1:b4:39:af:15:05:45:e1:22:f4:ad:49:85:05:63:9f:dc:ff:
fb:9a:f6:72:19:c0:bb:58:c2:40:99:82:3a:fb:b5:96:4c:ea:
61:3a:56:2c:49:33:97:b5:02:b3:29:66:9e:cd:b8:00:1d:f7:
92:a4:ef:79:4c:99:cc:0b:d5:06:fa:28:b7:a3:75:1c:40:49:
d1:d8:36:b5:ab:a2:75:44:52:a5:ba:ec:dc:b9:81:67:7b:29:
d1:ad:0f:0c:c7:f2:27:e6:e3:99:f4:09:ab:da:87:51:ba:df:
84:75:9e:83:93:aa:ff:a1:59:3e:9f:27:ca:97:8e:17:3d:b4:
2d:32:c2:2a:a9:77:ce:f1:8d:ae:6f:ed:bd:63:d0:c4:41:0a:
90:ff:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:32 2026 by rpki-client