Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
File: _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json)
Hash identifier: XUx6t1gnJgp1j/itm51ptC15hv8lLRsJgWdNAqj+t8w=
Subject key identifier: 2B:33:66:8A:8C:C2:79:79:F1:9A:AD:58:93:2C:49:F0:EB:8D:E4:E4
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 01A13F6FF4CE59C0F8E75E7159A8011C9088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 12:01:03 +0000
Manifest this update: Thu 15 Oct 2026 12:01:03 +0000
Manifest next update: Fri 16 Oct 2026 12:01:03 +0000
Files and hashes: 1: ZZSujaCywYYBPGcUKJLCx-iYKGY.roa (hash: A7oLxvVZYFnaxAjlUArrfm3Zu1qybxKzD2ovuJ4kp4g=)
2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: bA2gVPGw7gNt3M0Jke0nF+4t03u+HBSLX4HihvZV/qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:f4:ce:59:c0:f8:e7:5e:71:59:a8:01:1c:90:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Oct 15 12:01:03 2026 GMT
Not After : Oct 16 12:01:03 2026 GMT
Subject: CN=2b33668a8cc27979f19aad58932c49f0eb8de4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:9d:bd:f5:69:7f:23:5d:d2:c9:73:eb:db:
bc:df:1f:82:ec:e4:06:ee:31:80:47:23:e7:bb:09:
a7:40:3a:9a:2d:ac:9c:88:d3:1c:ff:04:3c:d2:1b:
0a:4f:7d:fb:0a:5d:61:e9:9b:41:f6:21:5a:da:91:
d3:6c:a5:c9:68:e8:33:5d:3f:8e:25:0a:f7:eb:44:
ec:42:23:7d:80:b9:6b:ea:4b:c4:64:a4:d1:70:c8:
9d:f3:b5:7e:c6:83:0b:2d:f5:19:df:01:aa:30:7e:
c2:44:eb:90:57:f6:c4:8a:7c:fe:93:9b:d1:81:02:
39:99:b2:78:f5:a6:b6:b8:7d:22:48:a1:62:c2:c8:
37:11:b7:78:1e:cb:87:e9:bc:39:85:2f:76:60:c2:
48:91:a0:b1:90:1d:b0:d0:42:8e:5c:66:72:18:55:
05:39:60:dc:60:d9:47:a7:46:bb:29:99:0d:99:92:
e8:eb:cd:4f:af:9b:6c:45:a5:c2:82:6c:a2:fb:ca:
3d:bb:de:1e:66:6f:f3:e4:c7:da:91:96:00:86:7d:
96:02:c3:39:98:ae:b8:96:69:e8:e3:4c:f0:5e:dc:
ea:10:dc:9a:d4:3c:5c:b9:1c:ec:a8:44:9c:91:a6:
a9:a2:f7:9e:f9:48:f5:d6:74:71:a0:a9:b3:92:62:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:66:8A:8C:C2:79:79:F1:9A:AD:58:93:2C:49:F0:EB:8D:E4:E4
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e8:98:51:75:fa:57:c0:9a:d5:af:c9:9a:49:ea:a7:03:09:
10:53:a7:25:5d:79:7f:ae:19:c9:58:79:98:0e:c6:5d:f9:1d:
d6:a5:9c:02:26:f7:18:2f:2d:97:19:e7:c6:24:85:82:ef:b6:
fe:a8:42:61:59:6b:58:3c:7a:72:2f:67:a9:fd:d9:41:21:b8:
9f:7b:96:1a:17:5e:60:66:1b:98:d1:8f:b0:f9:24:bb:8e:be:
43:05:9d:21:19:5e:7a:44:3f:ef:7e:7c:3e:9a:c0:25:8b:44:
82:fb:35:42:91:b1:9c:2a:8c:b5:2e:d0:ae:14:48:bc:8a:c9:
8a:54:4a:93:50:2c:de:fc:5c:76:d3:03:58:fb:4b:67:1a:f8:
83:b7:08:65:42:9d:a4:7f:55:85:32:c0:fd:28:59:3d:24:cf:
6f:2b:61:05:8d:ce:c4:f8:78:dd:3f:e0:1a:44:4d:a6:bd:e8:
da:d4:a5:d6:2a:e3:c6:5b:c8:ea:c3:96:78:67:6c:e4:03:0f:
61:16:5c:4f:b9:cf:b8:3e:c7:2e:20:72:16:82:93:4f:22:b9:
d2:2f:f9:9c:df:a0:0f:2b:d3:fb:84:bb:1e:a1:5a:02:38:82:
3c:d1:1f:ec:cf:48:44:a4:4b:43:64:dd:bc:b7:12:2b:b4:ad:
0a:79:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:41:00 2026 by rpki-client