Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
File: i8Wo923xVof4NEHJprVUV48831c.mft (raw, json)
Hash identifier: 3/Fu7F0/EWhSJMrJV4Is4yZvFyn9fbmLYerMNnjJwMM=
Subject key identifier: 27:D8:B1:2B:8E:DC:35:5D:27:0C:16:E8:32:AD:75:B0:ED:B7:56:03
Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Certificate serial: 019CAB6B177706714AC7F83A17D01D43A6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
Manifest number: 04E4
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: YmvEy21Oo_K93uY9_6q4yH9waAs.roa (hash: Dd5U/8FlVGfaWd8sQ9wxYRvKK+HxQrbJ5WW1os00xSE=)
2: i8Wo923xVof4NEHJprVUV48831c.crl (hash: jAZP7H4puqpoGkbNxsBY5kMgSBkCWH7JHa/uFINuhNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:17:77:06:71:4a:c7:f8:3a:17:d0:1d:43:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=27d8b12b8edc355d270c16e832ad75b0edb75603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:08:9e:d3:de:88:4b:b3:9f:20:4a:76:bb:
48:3c:e6:99:d7:39:17:24:0f:20:cf:18:1a:55:a9:
b7:df:e3:b7:db:cb:e5:26:fe:ce:3e:ac:62:df:0b:
0c:f6:5d:cf:42:7e:1f:19:51:d2:91:d6:ac:86:64:
01:59:53:fd:bf:7f:19:73:48:6d:fb:58:0b:7e:e5:
4c:9d:31:15:f5:ad:66:a1:64:a3:08:57:81:34:a7:
6a:c9:16:77:9b:9e:5a:17:1c:11:c3:24:64:69:06:
9e:cd:89:f5:ec:6e:4f:1c:85:19:4f:4b:c1:92:13:
d9:41:c0:71:02:75:9a:0e:47:7f:85:5e:f2:60:d6:
dc:2b:98:f3:96:41:a6:07:4a:10:8a:b3:c4:bd:73:
85:2f:6d:50:ff:ec:ff:0a:24:26:9e:28:a8:e0:50:
5d:41:a4:9d:f3:ea:e8:6c:16:0c:e1:fe:7a:a9:12:
67:1f:39:09:e3:2f:9c:23:0f:d2:67:57:6e:f5:25:
ea:73:ac:ba:21:9c:14:4f:44:9f:cc:e2:44:42:00:
bb:2c:9e:1d:cb:55:16:45:13:99:36:0e:c8:9a:2e:
00:9d:c3:ee:17:ce:1c:2c:08:09:f8:b9:06:fe:f6:
00:75:0d:7e:58:fe:fe:e0:a7:a6:77:26:85:00:d7:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:B1:2B:8E:DC:35:5D:27:0C:16:E8:32:AD:75:B0:ED:B7:56:03
X509v3 Authority Key Identifier:
keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ea:a7:63:70:ee:04:98:4e:40:92:6d:75:0c:b4:05:e1:f2:
c2:bd:de:64:9d:00:d2:e1:09:06:31:88:08:8f:2a:b1:65:c4:
bf:4f:22:70:e9:c8:6f:03:01:e4:29:06:6f:6a:43:ea:0d:1f:
dd:55:fc:d9:d6:e7:0b:96:71:85:3e:a6:89:4a:f3:a3:6f:af:
dc:1d:a4:d9:e6:40:91:6c:5b:e1:6d:2f:35:17:43:24:86:11:
14:13:b8:df:ea:48:11:2f:3b:cc:cb:96:9b:2e:b9:6a:8f:38:
5d:84:09:db:94:4e:24:96:d6:30:55:fe:b7:b3:e7:c4:64:6b:
29:31:2b:d3:e1:88:6e:55:ae:51:fd:0a:32:56:3e:e0:b0:49:
fc:cb:af:71:0d:58:df:9a:06:b1:ed:a7:53:07:c2:d1:01:83:
04:99:a1:ee:74:90:91:a0:78:25:cf:f8:07:46:7f:c0:1e:e9:
6c:27:23:12:93:ff:12:cc:f5:14:6c:fb:7b:c2:e1:a6:ce:0f:
78:28:67:b9:72:d9:e0:c7:1f:b9:3d:98:7f:39:06:70:5d:1a:
ee:95:49:f7:a7:3e:3a:cb:1f:de:a4:71:5d:b1:b6:a6:1e:41:
41:5d:67:60:5b:5d:43:65:f3:58:9f:f6:cf:28:f0:09:fe:48:
ea:a8:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:44 2026 by rpki-client