Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: FvVxFdXHdk8uFxf942uTzZzTi5ar8qFNt+PLsLeA1oo=
Subject key identifier: 3B:6A:CB:E6:BC:C6:37:3A:A6:1A:7C:9C:91:76:B8:D4:B2:B1:6E:1C
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 019CAB345BD24A6C3C4875E478361611EA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: 9gGSBVdoMqiDjRpMvCx2xmyD74c.roa (hash: NKCr7+PeOZuiE60zEjyMYDN68eBiZ4Wy2UIX8ZkkZo4=)
2: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: dmfYzOx0LSF254ILjQ+FgUE0wmSxZ/8KDYclxa+Drx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5b:d2:4a:6c:3c:48:75:e4:78:36:16:11:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=3b6acbe6bcc6373aa61a7c9c9176b8d4b2b16e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:23:5a:4f:d9:9a:17:d3:fd:e0:80:98:62:
2c:6a:2f:a8:6a:d8:5e:81:38:a0:7d:db:24:3c:ba:
c4:94:2f:8d:e9:64:62:f2:b3:cb:6a:e0:25:d0:b2:
a8:ec:d6:fb:90:71:d3:10:f3:56:4d:24:d2:7e:71:
e4:d5:d2:b5:40:4e:93:ae:da:42:26:c3:8b:45:a9:
bb:d4:e1:7e:30:30:6e:8a:64:38:f3:49:b6:91:a8:
6d:c6:47:ab:fd:19:d2:a5:01:4c:47:47:3b:36:5c:
88:21:5c:e9:d1:98:7b:fa:c4:24:0c:46:bc:34:4b:
77:37:db:2f:4e:f5:f5:5a:63:9a:27:08:97:96:58:
59:31:f2:e9:a0:b4:08:95:f9:4a:5e:da:81:d2:77:
86:4a:f0:07:b6:49:85:5c:27:17:9a:44:6f:77:8c:
d2:bd:a8:03:9c:fb:19:16:61:06:3b:29:c1:7f:fd:
c4:bc:11:3d:b5:c5:98:4c:7b:aa:2e:87:33:4e:39:
cb:15:5d:39:7e:5f:9e:53:f9:6b:b3:fd:6a:46:ea:
47:7a:c6:25:05:14:3e:f2:62:84:ad:d1:a8:36:fe:
10:d0:2e:9d:1c:ae:2f:d5:23:ec:0e:05:cf:62:8a:
af:34:bb:88:ab:08:14:92:3f:f9:66:d2:92:b2:26:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:CB:E6:BC:C6:37:3A:A6:1A:7C:9C:91:76:B8:D4:B2:B1:6E:1C
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:4f:b6:bb:1c:69:b6:6c:c1:64:58:cf:21:58:58:eb:f9:
b8:2e:53:15:47:eb:a6:bb:a5:2a:3e:bb:d7:89:78:8a:04:7c:
1c:fc:f7:9a:77:bd:0a:67:c7:45:80:57:c1:c7:1e:19:67:72:
e0:ab:35:86:55:78:a0:1a:03:43:93:67:8f:d0:e7:be:1f:61:
42:6e:29:da:0a:f3:8c:fb:83:c2:e3:c5:7d:3d:02:86:13:b2:
8c:d2:d1:08:1d:51:41:2c:4f:bc:f0:72:6a:08:67:0f:16:c9:
7c:97:4f:1f:be:15:9f:06:db:6c:22:e6:8c:ab:57:0f:db:07:
d1:54:e5:1f:e8:28:26:f5:a6:53:5f:b8:fb:d0:07:9f:79:7a:
8b:e4:28:e0:60:18:b7:cf:ce:27:9a:48:08:65:e8:2b:ac:68:
18:b7:ac:24:f0:18:72:17:aa:cf:16:24:15:6e:e7:f7:24:9f:
b0:2f:c8:fd:c1:d3:1a:e3:74:5b:2f:a2:47:b5:29:b1:35:86:
b1:e6:05:c3:c0:c8:07:77:37:f5:f5:d0:68:3c:fc:50:ea:14:
c3:52:f0:2c:05:5a:06:8c:83:e4:44:cf:b2:b5:3f:88:98:78:
2a:27:17:25:fa:7d:3f:b0:4c:b3:4b:38:ce:10:eb:05:92:79:
97:cc:0c:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFvSSmw8SHXkeDYWEeoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzA3N2I4Mzc3MmEwMDJkNWM0ZjhiOTIxOGVjMGRjN2Yw
NDBjYmYwHhcNMjYwMzAxMjEwMTAxWhcNMjYwMzAyMjEwMTAxWjAzMTEwLwYDVQQD
EygzYjZhY2JlNmJjYzYzNzNhYTYxYTdjOWM5MTc2YjhkNGIyYjE2ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBAjWk/ZmhfT/eCAmGIsai+oathe
gTigfdskPLrElC+N6WRi8rPLauAl0LKo7Nb7kHHTEPNWTSTSfnHk1dK1QE6TrtpC
JsOLRam71OF+MDBuimQ480m2kahtxker/RnSpQFMR0c7NlyIIVzp0Zh7+sQkDEa8
NEt3N9svTvX1WmOaJwiXllhZMfLpoLQIlflKXtqB0neGSvAHtkmFXCcXmkRvd4zS
vagDnPsZFmEGOynBf/3EvBE9tcWYTHuqLoczTjnLFV05fl+eU/lrs/1qRupHesYl
BRQ+8mKErdGoNv4Q0C6dHK4v1SPsDgXPYoqvNLuIqwgUkj/5ZtKSsiaLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtqy+a8xjc6php8nJF2uNSysW4cMB8GA1UdIwQY
MBaAFKPAd7g3cqAC1cT4uSGOwNx/BAy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzIt
NzA2YWIzZTgzZDFkLzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzItNzA2YWIzZTgzZDFk
LzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/9Ptrsc
abZswWRYzyFYWOv5uC5TFUfrprulKj6714l4igR8HPz3mne9CmfHRYBXwcceGWdy
4Ks1hlV4oBoDQ5Nnj9Dnvh9hQm4p2grzjPuDwuPFfT0ChhOyjNLRCB1RQSxPvPBy
aghnDxbJfJdPH74VnwbbbCLmjKtXD9sH0VTlH+goJvWmU1+4+9AHn3l6i+Qo4GAY
t8/OJ5pICGXoK6xoGLesJPAYcheqzxYkFW7n9ySfsC/I/cHTGuN0Wy+iR7UpsTWG
seYFw8DIB3c39fXQaDz8UOoUw1LwLAVaBoyD5ETPsrU/iJh4KicXJfp9P7BMs0s4
zhDrBZJ5l8wM4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:05 2026 by rpki-client