Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: jHyoDRIEqUKN0avRhZE52ASZtV1rr5QJe9I/x2nxRYQ=
Subject key identifier: 5F:4A:B0:02:5B:39:55:CB:08:4A:93:4B:C5:D9:D7:39:BB:65:13:A8
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019CACEB980935F802B2DAEB8EF2F7B75E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 02B2
Signing time: Mon 02 Mar 2026 05:00:46 +0000
Manifest this update: Mon 02 Mar 2026 05:00:46 +0000
Manifest next update: Tue 03 Mar 2026 05:00:46 +0000
Files and hashes: 1: 4diahVLzyWADsafzMMkqiTBhFG0.roa (hash: riwko2/K4Xljlw5gsbraTspcz3PMLisMleLPiCJZSh0=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: TVXasRIsF0mstP1d1bJFm+P4/2imOPxXWbiPmgoryB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:98:09:35:f8:02:b2:da:eb:8e:f2:f7:b7:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Mar 2 05:00:46 2026 GMT
Not After : Mar 3 05:00:46 2026 GMT
Subject: CN=5f4ab0025b3955cb084a934bc5d9d739bb6513a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:f8:4b:af:74:6d:43:20:4e:42:d9:fc:2c:
3a:c7:8d:f3:b5:41:b6:24:12:2c:19:97:2c:73:08:
f0:6c:77:73:fd:18:cb:74:90:6d:2a:de:57:9c:51:
dd:bb:f7:c5:50:a2:74:99:5d:48:68:d1:51:f0:68:
28:1e:75:a7:b5:cb:fd:57:e0:25:5c:9e:42:77:6c:
e0:be:b9:40:33:2b:56:97:05:2f:77:f1:d4:2c:51:
b6:bd:d5:59:e1:9f:dc:e0:32:b8:3e:d1:d1:42:10:
61:34:56:a5:12:d6:15:22:99:73:aa:e5:64:78:e6:
35:0a:40:aa:86:25:1f:2c:af:18:c0:65:bd:96:af:
97:a9:f8:2e:95:95:c8:35:0a:f7:32:8a:12:dd:8c:
b6:54:8a:f1:f8:2e:d9:60:80:14:f5:6c:97:06:b6:
b8:5e:ad:4a:12:b3:dc:41:60:28:ac:b6:31:c7:41:
54:d6:80:0e:6d:72:56:b6:2e:8f:18:ec:64:9b:80:
09:fe:33:ea:76:0d:40:e8:37:76:7c:83:9c:67:ea:
9a:23:15:ba:3b:90:07:56:46:c0:53:77:73:5e:68:
a2:85:d5:fb:7d:b4:d9:18:8e:3d:0d:8b:5e:05:29:
53:bf:85:ad:18:ea:cf:0e:3c:7c:49:71:54:7a:89:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:B0:02:5B:39:55:CB:08:4A:93:4B:C5:D9:D7:39:BB:65:13:A8
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:75:b7:fa:db:d3:7b:b9:28:8b:cf:2b:87:0d:cf:59:65:
0b:76:e1:b6:da:2a:e7:59:bd:70:fe:e8:45:e3:60:92:ca:69:
e4:3a:0e:34:0d:fc:04:db:0b:bf:88:d9:f2:a7:d1:e5:d3:61:
ec:2e:ad:b5:6d:80:72:f2:fd:eb:a1:5b:93:5b:50:fb:e0:8f:
14:8d:b1:13:09:e0:2d:10:6a:d9:d5:0d:89:19:6b:d7:1e:27:
89:f8:29:35:7b:bf:8f:a4:36:22:68:39:60:a7:fb:27:8c:5b:
96:bd:aa:d6:39:42:b2:ba:d0:82:e1:2e:ac:fc:7f:6d:56:27:
a6:8c:88:8c:94:b6:d3:bf:3e:3f:e4:73:3b:95:6a:67:0d:93:
24:3f:c6:a8:6a:f2:66:6b:c0:79:06:42:06:0c:04:5e:0a:97:
f3:04:18:7e:d5:3b:42:58:85:47:a6:7a:18:98:ba:2b:8a:2c:
8e:77:c9:b0:90:b5:cd:44:9a:0a:a6:60:b7:87:99:ee:50:21:
0c:7d:a4:73:17:7b:ce:39:85:d3:04:2b:5f:5c:c8:a6:99:69:
42:66:e7:a5:ac:e7:3b:a7:6e:9a:72:38:a6:5f:3e:02:8b:0f:
6f:bd:b0:ce:30:7e:fb:46:0f:25:82:21:1f:9e:d6:be:70:71:
06:63:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:20 2026 by rpki-client