Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: 4UyAUOJD+dFizKaLXWp1l3oypqoCf2kwMMslFiZrn3Y=
Subject key identifier: 3A:37:55:AC:DD:C9:A6:B7:36:F2:2C:5D:1E:18:5A:DD:9C:3E:38:B8
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019CA97CFE4D7895D2A681E01FB641828A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 1110
Signing time: Sun 01 Mar 2026 13:01:06 +0000
Manifest this update: Sun 01 Mar 2026 13:01:06 +0000
Manifest next update: Mon 02 Mar 2026 13:01:06 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: bjL1VJgurlTeUAbz0K2et43XV54mOCG2OHVJaSRqUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:fe:4d:78:95:d2:a6:81:e0:1f:b6:41:82:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Mar 1 13:01:06 2026 GMT
Not After : Mar 2 13:01:06 2026 GMT
Subject: CN=3a3755acddc9a6b736f22c5d1e185add9c3e38b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:04:a5:25:8f:b2:0c:53:8e:95:86:a3:b8:
47:52:aa:0c:2e:05:1b:4d:7e:6c:88:18:71:84:9c:
eb:2f:a1:10:ca:15:a7:57:c1:28:09:fe:0e:0c:d5:
33:79:3d:a2:c8:5c:d6:a8:b3:a0:e7:6f:8e:37:d0:
52:87:8f:6a:a0:84:41:48:a3:6e:70:93:fb:74:b3:
5f:47:54:5f:60:82:dd:45:31:33:0d:ad:9e:ca:b7:
af:0c:f9:d5:e4:4c:49:5f:15:b9:98:e2:63:da:3d:
34:69:59:eb:d0:4e:76:05:58:d4:6f:f2:d4:ae:a5:
1b:01:86:27:d3:43:9c:d4:93:96:ba:8d:b6:5e:98:
e6:9f:14:af:a3:44:0d:5e:6e:19:fb:c4:09:12:3b:
70:75:9e:59:1d:7d:9e:91:e1:de:8f:3a:70:df:b6:
e7:fd:d6:b9:ad:0e:89:47:0b:50:7d:c4:aa:1c:d6:
5a:c7:18:e4:bd:02:41:7e:d0:5f:17:d8:de:6e:de:
8a:e9:be:fa:3f:0b:c1:f3:41:26:01:4b:47:54:7e:
c9:16:75:57:0c:35:23:eb:c5:97:6b:72:f1:78:cf:
b3:62:5d:9e:2d:3f:58:04:9e:b1:38:49:f9:01:20:
08:41:71:23:db:14:43:2e:ed:70:a2:ab:eb:5d:ed:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:55:AC:DD:C9:A6:B7:36:F2:2C:5D:1E:18:5A:DD:9C:3E:38:B8
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:fa:38:c8:2c:63:a0:f2:97:52:83:a5:f0:dc:49:f1:7e:
16:3c:12:80:ce:25:c4:d5:03:fd:17:ea:2b:1d:c7:ca:35:17:
ff:da:87:76:e1:80:13:a2:1b:43:ec:7a:aa:48:9b:cc:43:94:
1d:f3:45:62:ee:0e:47:dc:c8:3b:5c:b3:be:eb:92:77:8a:ca:
28:04:0c:aa:7b:bd:17:cf:04:a9:ff:60:8c:5e:9a:35:31:07:
b0:94:46:14:c9:5f:30:c4:be:9c:fd:b3:e2:01:fb:59:b8:e6:
f9:b2:c0:c6:ff:31:ed:eb:22:a6:08:ca:11:dc:de:e9:02:82:
de:99:c7:0f:d2:9e:31:93:54:c6:ca:8d:4e:b4:49:09:ab:d0:
9a:8f:bc:ad:f0:59:a9:36:e2:b4:6f:69:05:7f:a3:d0:41:0c:
9b:28:8e:48:74:69:64:a2:42:9d:95:c5:01:de:eb:a5:cb:34:
a4:ee:04:ba:b2:76:78:64:81:99:26:d8:8e:ae:fe:ff:cd:69:
95:f5:17:e0:3d:1a:c6:69:d4:08:06:89:05:9e:59:18:d1:72:
63:e5:58:f2:24:81:f1:94:f0:de:da:3f:82:bb:cf:35:24:1c:
17:98:e6:ea:2d:e6:90:01:3d:08:0f:a1:55:e0:44:08:e4:8d:
1d:99:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:12 2026 by rpki-client