Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: keDM8J1euMV5lPFWSdIMA+eaMqBYGJlvZu9ijmvEAwA=
Subject key identifier: 0F:DE:CE:AD:D4:12:27:D8:C4:AE:5F:2A:1F:0B:BE:D2:72:2E:F6:67
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019DA48AF23B6431BA262D34F030091FBE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 1192
Signing time: Sun 19 Apr 2026 07:01:02 +0000
Manifest this update: Sun 19 Apr 2026 07:01:02 +0000
Manifest next update: Mon 20 Apr 2026 07:01:02 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: OynQrt6z76flwhB/64Rh4Ou8R6YvMFnPBQCDblojOA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:f2:3b:64:31:ba:26:2d:34:f0:30:09:1f:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Apr 19 07:01:02 2026 GMT
Not After : Apr 20 07:01:02 2026 GMT
Subject: CN=0fdeceadd41227d8c4ae5f2a1f0bbed2722ef667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:6f:9a:1f:72:5a:e0:03:b6:8d:b3:81:c2:
c9:1f:18:0e:c7:1e:c3:69:7a:c2:fd:91:72:e7:12:
8b:02:12:5f:e2:ab:65:0a:ca:43:b6:91:7a:85:2b:
3f:83:18:1a:29:62:18:8d:96:be:36:ff:82:51:f9:
68:c9:bd:06:8b:68:eb:4c:e0:9a:63:00:f1:04:b3:
2f:0c:c6:85:5e:74:58:ca:c2:d5:45:a7:e6:56:e7:
6e:9b:07:b4:2d:e4:48:10:cc:21:9f:25:a6:01:0e:
06:64:19:bd:d3:31:ca:3f:ab:f3:41:41:13:e7:bd:
36:ab:24:e5:89:c4:04:11:11:83:fc:c3:f7:bd:3a:
3b:c5:f7:4b:6a:b8:91:f8:3f:dd:91:45:66:4c:94:
93:1e:4b:4f:ff:26:d4:42:fa:44:33:ce:7e:70:75:
56:b8:c5:5c:eb:f5:aa:95:cb:9d:55:12:de:26:d4:
14:4d:b7:a5:e1:ab:af:07:b8:2e:31:cb:55:8a:01:
c8:2b:5e:17:40:f8:1e:04:e5:6a:3d:eb:00:3c:cc:
86:8e:10:cf:9f:44:b8:84:73:78:61:2e:bc:c8:81:
34:d9:5c:95:ae:85:37:f0:c6:6a:e7:73:68:51:48:
0e:1d:35:2a:3d:06:60:ff:a7:fc:cb:04:3e:0c:57:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DE:CE:AD:D4:12:27:D8:C4:AE:5F:2A:1F:0B:BE:D2:72:2E:F6:67
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:b2:0d:5f:b9:d4:e7:9b:60:79:f2:84:73:f7:9c:f6:01:
fc:a6:84:e6:72:c3:5b:6e:66:1f:64:36:a4:3e:c9:2f:c0:27:
c3:83:5c:82:2a:62:07:ff:7e:75:3d:2b:ec:bf:91:7c:a8:8b:
8d:3d:e1:5b:56:97:49:91:2b:79:35:91:a4:e8:99:a8:97:da:
1f:ae:1b:43:63:88:f2:86:20:3e:0a:c7:73:83:83:9b:03:06:
16:a0:70:9d:75:b1:0c:eb:d3:0c:88:c1:aa:21:91:4e:d7:7e:
8c:e9:90:5e:de:9f:ad:57:20:25:23:80:19:28:19:e9:e2:92:
e8:6b:89:f0:9e:34:de:29:d4:2e:ba:70:d4:4e:0c:9a:dc:14:
3d:50:30:89:0c:ba:f1:13:23:de:e8:95:74:7a:1d:b4:e1:79:
d0:32:71:10:e8:c5:ca:e9:57:f1:4f:46:e3:38:e9:3e:3d:eb:
de:27:aa:b0:e8:f1:aa:a4:ed:92:9c:64:8c:ee:b5:88:f9:3b:
aa:35:da:eb:ac:7b:8b:0d:f2:4c:bd:c5:e9:5c:4a:14:a6:74:
9b:85:35:11:e9:aa:13:78:7a:63:ce:d4:e5:7c:58:cb:95:8a:
ab:3f:50:83:bb:aa:96:24:05:88:e0:12:b5:f5:fa:27:28:d7:
4a:a7:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:20 2026 by rpki-client