Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: 2oYwB6RjP+nlVybPLabBT4SvVqg6YzAlq58XqiMpQTA=
Subject key identifier: 70:CA:8E:83:8C:1B:DA:2F:2B:8F:4A:A8:69:76:5F:C3:88:E1:17:B8
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019CAE3535ABBC226C54950CE54473EFB83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 1811
Signing time: Mon 02 Mar 2026 11:00:48 +0000
Manifest this update: Mon 02 Mar 2026 11:00:48 +0000
Manifest next update: Tue 03 Mar 2026 11:00:48 +0000
Files and hashes: 1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: XTxXMDDy980xsQKiE4Vm4TMmMoOG10PszCdRnBUCIqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:35:ab:bc:22:6c:54:95:0c:e5:44:73:ef:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Mar 2 11:00:48 2026 GMT
Not After : Mar 3 11:00:48 2026 GMT
Subject: CN=70ca8e838c1bda2f2b8f4aa869765fc388e117b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:79:82:bc:40:1a:11:c6:11:bb:2f:e0:b2:
af:85:b3:9d:ae:61:ce:4c:8d:44:33:4b:e9:4b:eb:
3b:89:2c:5b:0a:21:c1:a6:0c:bb:1b:02:fb:06:18:
e7:26:d6:02:0b:82:a8:a5:93:42:34:61:87:06:d8:
a9:31:75:df:35:3e:6c:fe:b0:33:c2:68:c6:39:1b:
3d:f1:ab:3a:a6:9b:95:a7:51:c1:4b:83:a5:25:1e:
80:c4:b5:bb:92:cb:5a:ef:45:16:89:51:77:bd:aa:
5f:5b:de:fa:94:cf:ce:30:18:09:05:29:03:f8:e2:
9d:18:0a:72:55:af:4f:0f:e3:ad:59:73:c0:da:94:
67:5b:ce:7a:81:2a:83:3e:87:cf:50:ee:02:16:66:
93:d1:8a:fa:f9:fa:d3:07:09:a9:69:37:0a:38:03:
a0:ed:80:08:de:0b:36:92:9c:a6:4b:92:d9:61:38:
e8:88:bf:ed:48:18:14:45:c6:09:20:53:0c:90:3c:
76:8c:83:fd:d0:6d:b1:44:10:1b:9e:92:f4:1c:c5:
9d:bf:16:35:14:0b:90:c6:87:c5:e9:51:ed:a2:0c:
af:58:ea:86:6c:b0:dc:a7:4d:a8:26:d9:3d:29:e7:
31:c7:c5:d6:6d:d6:e6:0b:d7:65:b0:94:1e:6a:7b:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:8E:83:8C:1B:DA:2F:2B:8F:4A:A8:69:76:5F:C3:88:E1:17:B8
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:80:4e:57:ab:a7:7c:a4:0f:19:b7:7f:61:17:3b:e9:58:
e9:ab:4a:c2:4b:4c:4d:5a:bf:2d:70:28:01:86:24:a4:b7:30:
97:49:a0:6d:36:1e:15:05:5e:ef:03:20:34:e3:88:78:d1:69:
cc:14:d7:c4:c9:63:18:b5:57:af:9a:6e:ec:f8:6f:ce:de:6e:
62:dd:e0:ec:bd:d1:ee:4c:ea:b9:71:36:24:25:cd:96:0d:1e:
d2:74:11:8c:8e:fd:e1:33:5e:bc:23:ea:3a:e1:24:e7:67:ad:
19:5e:7f:9c:04:5a:30:32:bc:a9:e1:50:f5:a2:db:2f:d6:c1:
b6:43:1d:e5:55:09:2c:52:f0:00:6b:cb:05:b4:02:64:18:47:
90:7a:b0:21:4d:f1:6a:58:42:df:a8:a0:07:d8:4b:0e:38:b5:
ce:5b:b0:fd:46:4b:2e:ff:6c:bc:8a:c1:5e:f3:90:4e:03:c8:
c0:13:e2:77:c8:db:37:65:94:d9:9b:a2:49:63:4b:bc:9f:38:
db:2c:c1:74:24:e3:5b:08:58:2d:58:a4:e0:de:6c:a5:e6:ac:
8a:f2:8b:4b:e4:05:dc:72:ec:0f:14:46:5a:42:3e:0d:a4:ef:
1b:00:23:e8:ed:a5:db:7a:b0:7d:72:23:0c:78:0b:86:44:7d:
25:ef:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:31 2026 by rpki-client