Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: a77LOw+CQfTdm1VTfjRfeVBDMkECumjFXeov+8YKcNg=
Subject key identifier: C3:93:1F:6B:88:0C:D2:1E:DE:D9:97:F6:8E:C4:E4:CE:11:FC:58:36
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01A0C40E571F472A58CBA15C899BB289E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 1330
Signing time: Mon 21 Sep 2026 13:01:09 +0000
Manifest this update: Mon 21 Sep 2026 13:01:09 +0000
Manifest next update: Tue 22 Sep 2026 13:01:09 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: WW89SEpaBq/yVXGKo+FNKxzoOYo7XlrHX0AO/e2vwQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:57:1f:47:2a:58:cb:a1:5c:89:9b:b2:89:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Sep 21 13:01:09 2026 GMT
Not After : Sep 22 13:01:09 2026 GMT
Subject: CN=c3931f6b880cd21eded997f68ec4e4ce11fc5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:3d:c3:19:5e:ee:49:51:2d:f2:ee:88:5d:
0c:e4:85:7e:84:6f:34:fc:e6:71:e5:2e:9f:81:12:
ce:02:95:62:62:ac:f3:96:a0:99:de:19:d7:8b:16:
7b:28:9e:dd:67:61:7b:6d:64:3b:75:37:37:a3:8c:
a9:ed:bc:f6:f5:ef:ec:58:99:27:e4:fb:0f:0f:75:
b7:86:8d:87:2c:2c:7b:44:49:e8:e4:93:ac:81:3e:
29:80:7d:37:bb:b5:11:8f:65:cc:8c:58:df:84:14:
12:33:6e:f6:c3:8c:00:54:9d:29:81:e3:ed:40:74:
22:53:22:fc:4b:d9:6c:21:ab:0a:6f:de:d3:23:c7:
5e:37:05:bb:8a:c3:5f:57:99:0b:d4:0e:2f:6f:49:
93:03:78:f6:8d:89:a9:17:75:0e:e2:8c:6b:87:f7:
b4:9b:99:9d:18:85:89:63:49:28:6d:d1:e5:28:ec:
f4:d6:70:87:e1:6d:36:ae:6c:d0:b0:38:19:0d:7b:
a8:1d:54:90:c4:20:98:60:4a:cb:b5:1f:10:b9:a6:
7e:66:c0:12:ba:08:76:5a:bb:61:d9:0a:36:1e:fc:
3b:e2:af:a0:84:06:71:58:ef:36:f3:58:b6:b5:55:
9d:48:52:ce:71:05:be:4f:a3:65:31:8a:95:5e:51:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:1F:6B:88:0C:D2:1E:DE:D9:97:F6:8E:C4:E4:CE:11:FC:58:36
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:bb:9a:e6:68:3f:27:a6:34:4f:e2:7e:41:4a:01:c2:66:
42:b3:fc:5b:28:0f:59:3e:0e:13:32:0c:60:b5:9c:0f:40:49:
dc:40:44:90:32:53:97:75:b3:e2:f2:2a:38:35:22:30:8e:10:
dd:35:61:e7:ab:8f:9a:99:42:76:3e:87:b3:c7:60:3f:f1:44:
1e:55:d7:04:b0:d7:62:f4:40:98:52:ca:41:2a:88:c4:36:7b:
cd:43:d0:f8:65:e8:d7:f6:ee:ba:98:42:62:e3:72:ea:3c:36:
f6:18:5d:77:46:74:34:d0:37:be:c6:8f:5c:56:b2:dc:69:87:
0e:70:fc:47:96:fe:f1:36:2d:ae:f6:01:95:60:ae:36:3d:ef:
85:8e:62:24:d9:b3:fc:38:46:57:be:fc:a4:b5:4a:f8:7a:c3:
63:80:f3:8b:2e:76:14:a1:bf:7b:fc:bf:bf:40:d7:8c:ff:0f:
8c:bb:cb:b6:61:92:da:82:a0:ac:63:8c:b8:c2:0a:68:99:3b:
66:9e:e3:c5:11:9d:1f:d9:2d:5c:c9:79:6c:02:ef:52:e9:59:
ed:42:0b:9c:63:47:47:7f:b8:d8:2a:69:a3:34:62:fa:3e:36:
ac:41:22:f8:23:3e:4a:f9:7f:41:a0:9d:4d:c0:eb:da:ad:d6:
eb:c8:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:12:29 2026 by rpki-client