Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: CF2RSRZtI5efVw/XJvL7xqequeHJn17QyaVgjFTD7ko=
Subject key identifier: AF:56:91:09:AA:5E:EB:6F:2C:BD:E3:F4:5A:D9:34:F6:FF:EE:A3:D7
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 019DA45403C5315F681111DF16190397F0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 06:01:02 +0000
Manifest this update: Sun 19 Apr 2026 06:01:02 +0000
Manifest next update: Mon 20 Apr 2026 06:01:02 +0000
Files and hashes: 1: 9gGSBVdoMqiDjRpMvCx2xmyD74c.roa (hash: NKCr7+PeOZuiE60zEjyMYDN68eBiZ4Wy2UIX8ZkkZo4=)
2: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: dczOVB8US60v+sK9hsvruHnY7KQh7A0/JNtj3zJE31I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:03:c5:31:5f:68:11:11:df:16:19:03:97:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Apr 19 06:01:02 2026 GMT
Not After : Apr 20 06:01:02 2026 GMT
Subject: CN=af569109aa5eeb6f2cbde3f45ad934f6ffeea3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:70:2a:7b:4e:35:e5:61:a0:fc:74:73:60:
5d:f2:5f:c7:fd:0c:47:f8:b4:31:02:80:e9:54:46:
b0:76:85:5b:13:06:2a:19:e1:01:53:c4:0b:b2:18:
c4:8e:5b:ba:e0:f4:7a:84:fe:0b:22:a8:72:e2:3b:
42:13:11:16:18:48:e3:9b:b6:1b:e0:c2:01:18:3d:
be:e6:09:ea:f2:2a:97:8c:88:48:46:1a:68:ff:e1:
fd:30:17:41:00:01:d5:67:6a:0c:dc:1e:df:ba:4a:
2e:0d:2f:4a:a5:cb:91:56:e8:fe:09:20:6b:37:1c:
ef:9b:83:e7:74:76:0a:68:d2:ee:0b:6e:0f:b5:57:
bd:99:c1:e2:d9:7f:29:98:af:c9:8b:d2:56:81:0c:
95:09:4b:a7:df:76:cd:73:7d:88:c5:62:52:6a:1f:
38:45:2f:8c:50:e4:23:36:8a:85:46:5d:6d:ed:e7:
ac:aa:64:2d:f1:21:2f:91:d7:47:81:f4:22:e5:8f:
ca:b7:95:40:f6:b0:f2:b3:85:4f:43:8f:c8:36:12:
85:7f:44:3b:5f:e4:09:6d:e5:eb:81:8f:90:d9:db:
30:2a:ec:ec:8a:b3:40:b3:fa:a1:a1:8d:26:0c:3f:
1d:6e:bf:24:b3:82:eb:9d:d6:5c:7b:02:a5:d0:a0:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:91:09:AA:5E:EB:6F:2C:BD:E3:F4:5A:D9:34:F6:FF:EE:A3:D7
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:97:c9:1a:eb:58:e3:b7:44:6c:4b:0e:35:d7:f7:33:55:84:
35:10:69:15:df:cd:0f:88:37:03:15:1d:0c:ab:4c:4a:cb:c5:
70:6d:5f:e9:a5:d0:26:54:e5:e7:04:88:07:71:9d:a0:e5:49:
d1:b5:bf:25:7e:65:77:b7:c6:de:f5:df:95:35:4c:4a:f6:7c:
43:07:c7:8d:d9:92:9e:f0:4c:5d:41:73:2e:cd:60:b5:36:14:
2f:fb:97:23:8b:bc:a2:7c:3e:67:b9:54:3f:38:8c:8e:3e:01:
d7:14:f7:1a:8d:a2:05:c3:2a:ed:4c:b1:0d:32:8e:93:f2:61:
f3:9a:a7:3e:f2:08:ec:32:ce:a7:99:c2:90:5c:fa:39:e2:d7:
58:96:11:b7:f5:29:68:13:ea:c2:cf:6b:42:e5:bf:fd:04:18:
e5:65:c9:d2:7b:dc:3f:cc:81:57:03:36:8a:f8:1e:72:fc:73:
8e:5b:9d:7f:02:92:11:00:1d:0f:a9:9a:0c:9c:8e:c0:ad:94:
71:e6:3d:95:97:1e:69:d3:0d:b6:38:3a:a2:fc:85:51:1a:0e:
ed:92:d7:4b:ad:1b:3e:e0:be:05:0b:ae:83:20:ac:4a:c5:d0:
9e:06:23:db:1d:c2:f7:b5:58:c5:d4:89:8f:64:ef:80:ce:05:
34:b8:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:18 2026 by rpki-client