Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier: X/1zOfz0YrLsZhYrS/+iQ9LhbXlEFr6jSEXQohRMgQM=
Subject key identifier: 8A:82:93:F6:23:ED:36:F8:34:DD:AA:F7:AB:61:14:CA:DE:C2:DA:41
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 019CAC477A61BDA42D45AA879F5CDC44966D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number: 08B9
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: rutvr+MnTWUbHv6mLEKqcGaE3Zkl+UVIFSVvutkD4uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7a:61:bd:a4:2d:45:aa:87:9f:5c:dc:44:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=8a8293f623ed36f834ddaaf7ab6114cadec2da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:ad:bd:20:28:21:59:aa:ab:aa:d1:42:76:
62:5a:78:22:25:ff:85:82:b8:e1:d0:a9:94:35:d7:
93:ac:9c:ba:cd:34:d9:c0:ea:dc:8e:73:f9:68:28:
7e:04:62:eb:81:91:3e:f5:7f:ae:9f:94:16:9f:21:
9f:76:4e:87:3a:43:bb:ec:bd:b9:9d:c3:43:bf:b7:
f7:97:21:3c:ff:af:1d:b2:b6:cf:d6:0b:73:87:bf:
b8:1b:51:1f:f2:27:0b:4e:0d:3a:ed:52:c6:33:40:
bb:53:46:70:b2:af:f0:cb:54:fa:44:5c:68:78:0d:
c3:98:b2:5c:6f:24:c8:a0:fc:29:21:c6:db:bc:19:
80:ec:36:a0:f8:56:6b:be:88:c7:e4:65:8c:45:6e:
b8:18:53:85:a4:5f:28:a6:55:76:26:c0:d3:c3:e2:
f5:86:8f:6a:ff:e9:6d:4e:73:8b:cc:0d:33:c4:1b:
87:99:5d:c5:03:c7:09:e2:ba:f5:9e:5f:be:b5:7e:
ef:ab:9c:26:8a:b1:21:bc:42:5c:0c:ce:a5:bb:20:
30:37:93:f1:d9:34:f1:e2:7f:bb:8f:8d:64:0b:b9:
a0:55:f0:5e:10:82:40:e4:bf:d9:65:ca:bc:7b:bf:
65:41:4f:fc:93:74:3f:76:0b:7b:92:8f:83:84:2e:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:93:F6:23:ED:36:F8:34:DD:AA:F7:AB:61:14:CA:DE:C2:DA:41
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7a:58:f7:40:ac:89:8c:e7:91:8b:14:6d:a8:80:9b:ec:e0:
b8:31:d6:38:bb:a7:c3:4d:24:15:c3:b2:d9:e3:c4:a0:57:58:
38:73:7d:cb:be:04:b6:a6:1f:73:5b:77:b6:80:0c:0f:4b:be:
91:4f:c2:b9:73:59:ed:3c:87:18:ba:e8:8e:1b:d8:d3:14:87:
d1:10:76:20:66:1d:e3:a2:d1:01:64:1e:91:da:bd:10:12:cf:
32:82:6d:af:6e:0c:ee:85:73:e2:78:f1:ca:f4:e0:3e:69:b8:
7b:0a:f9:d7:f5:24:2c:ba:b3:81:41:32:14:86:c5:8b:9c:8c:
0f:af:89:99:b8:76:23:5a:04:c3:7c:35:39:fa:2b:d3:d2:ab:
ab:93:db:21:11:6e:02:ac:ca:ad:3f:50:cc:0b:31:8d:4c:f9:
8e:d9:6a:6b:ea:49:ac:69:f5:b8:31:72:2b:c6:96:fd:cc:08:
56:86:d6:f0:d5:66:12:2d:a0:44:43:1c:37:cd:e5:4e:b1:ea:
3b:73:b1:ee:29:7d:21:b5:08:d1:dc:84:78:ae:08:90:b7:51:
e2:e7:24:34:77:ee:b5:68:27:f9:c1:ab:cf:a3:c8:43:a6:c3:
de:dd:06:f8:d7:f7:a9:0f:15:b2:9b:d1:68:a5:b4:fb:68:f7:
81:09:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:29 2026 by rpki-client