Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: qiXI2KVJIRBFaZAYMoGNw0oAsHJlYsbDzAsWL9059S0=
Subject key identifier: B1:B6:86:1A:2B:A1:29:E6:14:84:46:01:4D:C6:9F:38:0C:49:52:4C
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019CAA8FD7287076441F1A6F99A382383C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0ED2
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: m72wASQpNeXsgS7Ds3yQsOA84ZBDc7y8I7shqFNJVkE=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d7:28:70:76:44:1f:1a:6f:99:a3:82:38:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=b1b6861a2ba129e6148446014dc69f380c49524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:6e:b9:81:2f:e7:f9:44:bd:57:cb:7e:f8:
49:b2:ec:73:5d:70:8c:1a:32:45:29:8d:01:b1:89:
a9:cc:39:6f:48:67:a2:5a:d2:38:00:fa:0b:7b:82:
ec:ce:ed:ee:a5:e8:4b:c7:77:ad:c8:1d:5b:e6:54:
e3:42:eb:f4:7a:1d:eb:81:2e:35:7b:2d:a2:2f:c2:
46:e5:f2:b6:31:cf:44:2c:4f:0f:9c:03:59:e0:4c:
25:1e:2f:b5:97:af:ca:4f:8a:f0:23:cf:f0:bd:77:
35:af:56:51:c3:b4:23:78:53:e4:64:02:14:2e:c9:
14:05:f9:5a:ac:2c:e2:4c:4a:ca:60:98:dd:e6:bc:
52:1e:4c:c5:a0:c5:11:80:ad:6e:af:f6:1f:b4:73:
0b:97:c9:0c:78:13:b6:0b:1d:29:b0:e8:08:5a:b6:
e4:a5:b3:8e:7b:a4:b7:e0:44:f1:38:b9:0f:87:f2:
03:ec:96:9a:da:9d:12:d8:b2:ec:b2:f1:ab:4a:c9:
1b:60:83:b2:f9:e3:bf:0a:3f:f3:7a:b3:85:0e:a0:
4b:43:93:2c:5e:9c:40:65:8a:de:0d:98:d4:1a:bc:
27:29:d3:1e:1e:0f:84:f9:bd:dd:98:4d:45:80:58:
15:db:81:17:db:f5:3c:fb:6f:fd:9a:22:d6:bc:f5:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:86:1A:2B:A1:29:E6:14:84:46:01:4D:C6:9F:38:0C:49:52:4C
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:b6:05:81:60:70:1b:0f:7d:17:b3:33:6b:1a:91:e9:63:
ed:02:98:cf:87:ea:83:3e:c7:8c:6b:38:f3:8a:e2:67:6f:a8:
4d:39:e6:59:8a:d5:56:a1:4b:61:ae:8c:1e:7b:94:bd:b7:f1:
8d:38:5a:53:79:7d:7e:ff:6d:37:c2:1e:f2:c6:2e:a0:05:3f:
ca:31:8e:d3:ec:99:dd:e3:3a:7d:07:0c:c3:e0:bf:11:09:25:
f4:44:cc:00:70:6d:30:69:f9:80:7d:09:be:b7:11:4f:21:40:
0d:7a:8a:8f:a4:2f:ed:8a:3a:b8:24:19:12:35:cc:04:bf:f9:
25:e6:d7:7b:ce:f2:5c:8d:9b:5c:9e:d2:03:3f:05:d1:ae:59:
bd:47:69:b4:ef:9b:7b:7b:91:ae:ee:97:82:eb:f5:e7:8f:d8:
d1:b3:d6:88:00:c9:2b:09:5d:d4:50:e6:c7:5a:2c:42:3a:91:
d9:8f:4f:49:46:88:bd:83:05:f6:18:5f:ca:7c:a7:43:c4:93:
08:4b:19:3b:4b:fd:8b:e8:3d:7a:31:ca:33:5d:e2:f7:22:c9:
a0:06:bf:e2:48:34:1e:a7:46:51:90:28:d4:54:4d:35:0b:ef:
ee:26:7f:0a:d9:af:f2:ce:f5:03:94:f7:cf:2f:5d:0e:0a:49:
3d:9c:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:54 2026 by rpki-client