Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: S3eDoJKuHhz5XPlvj36gIOAAXZ2sdsU+3BROn4vonNA=
Subject key identifier: E9:33:A9:48:9E:1D:53:11:DB:95:4A:09:C6:EA:FD:10:5B:5A:3C:DA
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 019CA946011BBEEDAF3A576FD04ADFF41F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0C96
Signing time: Sun 01 Mar 2026 12:01:03 +0000
Manifest this update: Sun 01 Mar 2026 12:01:03 +0000
Manifest next update: Mon 02 Mar 2026 12:01:03 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: SjwxPo4JobUTzBFvBblQAQE4txM48JrEUZSOAR5EBI4=)
2: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (hash: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:01:1b:be:ed:af:3a:57:6f:d0:4a:df:f4:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Mar 1 12:01:03 2026 GMT
Not After : Mar 2 12:01:03 2026 GMT
Subject: CN=e933a9489e1d5311db954a09c6eafd105b5a3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:25:c9:d4:7d:19:4e:a4:b1:bc:a6:de:c6:
bc:21:84:26:01:13:be:eb:68:eb:f0:2c:de:47:16:
6b:62:00:d7:cf:b9:00:b5:f4:ee:ff:a4:89:d7:13:
93:85:05:6e:d2:bd:12:30:5a:16:77:33:c7:6b:cc:
bb:7c:cc:1f:96:05:8e:90:4b:bc:67:8d:a2:42:25:
4b:ab:23:76:69:db:61:ed:59:3d:75:ea:d5:8b:b0:
74:ba:fa:3f:4b:b7:96:2a:63:80:fe:36:ee:bb:5b:
1e:9c:12:42:af:40:46:c6:b1:92:9a:32:c6:b4:78:
cf:d9:81:49:7b:c4:3c:ed:1b:7a:f0:7c:45:5b:74:
91:4e:62:65:11:8a:f2:dc:d0:a9:6b:03:b2:c7:af:
46:de:df:4e:8c:84:bd:a4:10:b9:7d:57:0b:7d:69:
ce:59:c6:c4:89:3a:e9:e0:51:38:7e:d5:77:6b:dc:
9f:cd:29:e2:49:30:b8:13:18:db:b9:f0:3e:d3:20:
9f:eb:1b:5f:69:f1:52:45:d7:30:18:a6:c0:61:15:
85:a1:ef:08:f5:0f:3a:10:83:9a:1d:27:d2:8e:8e:
2b:bc:18:e4:5f:f8:38:b3:d8:14:9a:02:b5:56:ae:
6b:a2:e6:5e:64:c5:a2:77:1b:2c:91:f7:dd:fb:8b:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:A9:48:9E:1D:53:11:DB:95:4A:09:C6:EA:FD:10:5B:5A:3C:DA
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1c:0a:c8:fe:4c:48:25:bd:7c:47:56:65:fc:f8:d5:a4:60:
2b:3a:33:c2:26:94:0a:3b:54:76:40:c3:a5:ec:3f:44:59:04:
0a:3b:d9:3b:6b:5f:b0:84:0a:98:08:08:85:4d:d0:28:eb:16:
79:fc:14:af:39:bf:db:70:80:ed:ad:2f:fb:12:55:74:86:56:
5b:ac:1d:a3:ad:df:38:da:33:05:97:8d:da:0c:85:03:f9:5a:
e8:78:fe:a5:38:51:f7:f4:45:3f:a7:76:61:33:58:23:28:99:
78:7f:70:f5:40:c1:a3:6c:ee:29:6c:04:b1:40:c5:42:c4:74:
fb:85:a9:ff:17:5d:e6:85:15:dc:eb:3a:77:65:24:26:5c:e4:
f5:dc:44:fe:4b:75:d3:aa:29:57:6b:ec:1f:bb:4c:8a:94:5f:
08:af:1e:61:a3:77:59:ec:47:4f:fb:35:db:2f:49:a3:1d:27:
a4:61:67:00:58:ce:6f:17:0c:2f:cf:d4:fa:84:96:d9:0f:ca:
3d:4d:d5:49:4e:ab:c8:c0:8e:a3:e8:84:69:74:fa:6e:1d:0d:
c7:24:5f:1b:cb:33:b9:ac:9f:8b:ee:9e:55:ba:92:81:6d:fd:
b8:83:b4:03:fc:9e:09:76:42:06:44:fb:53:18:73:15:7d:80:
d0:5f:04:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRgEbvu2vOldv0Erf9B+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGZhMWEyZTQ0OTE4OTFjMTliMGYxMGIwODZmNjU1OTg0
ZjU4NzkwHhcNMjYwMzAxMTIwMTAzWhcNMjYwMzAyMTIwMTAzWjAzMTEwLwYDVQQD
EyhlOTMzYTk0ODllMWQ1MzExZGI5NTRhMDljNmVhZmQxMDViNWEzY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10slydR9GU6ksbym3sa8IYQmARO+
62jr8CzeRxZrYgDXz7kAtfTu/6SJ1xOThQVu0r0SMFoWdzPHa8y7fMwflgWOkEu8
Z42iQiVLqyN2adth7Vk9derVi7B0uvo/S7eWKmOA/jbuu1senBJCr0BGxrGSmjLG
tHjP2YFJe8Q87Rt68HxFW3SRTmJlEYry3NCpawOyx69G3t9OjIS9pBC5fVcLfWnO
WcbEiTrp4FE4ftV3a9yfzSniSTC4ExjbufA+0yCf6xtfafFSRdcwGKbAYRWFoe8I
9Q86EIOaHSfSjo4rvBjkX/g4s9gUmgK1Vq5rouZeZMWidxsskffd+4tG1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkzqUieHVMR25VKCcbq/RBbWjzaMB8GA1UdIwQY
MBaAFPKPoaLkSRiRwZsPELCG9lWYT1h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTIt
MzRhMTRhMmJiNDAxLzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTItMzRhMTRhMmJiNDAx
LzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxwKyP5M
SCW9fEdWZfz41aRgKzozwiaUCjtUdkDDpew/RFkECjvZO2tfsIQKmAgIhU3QKOsW
efwUrzm/23CA7a0v+xJVdIZWW6wdo63fONozBZeN2gyFA/la6Hj+pThR9/RFP6d2
YTNYIyiZeH9w9UDBo2zuKWwEsUDFQsR0+4Wp/xdd5oUV3Os6d2UkJlzk9dxE/kt1
06opV2vsH7tMipRfCK8eYaN3WexHT/s12y9Jox0npGFnAFjObxcML8/U+oSW2Q/K
PU3VSU6ryMCOo+iEaXT6bh0NxyRfG8szuayfi+6eVbqSgW39uIO0A/yeCXZCBkT7
UxhzFX2A0F8EVw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:11 2026 by rpki-client