Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: JRBQMZ/0zdaBmWRiE8qiLuK5/9M1hx4OJgtQLeAFY0s=
Subject key identifier: 3B:7E:04:8E:B2:E8:AD:66:6B:2F:5E:2E:27:D8:EA:85:1B:3D:09:C0
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 01A0C74647D8BFF1C3B49591C235A95C7D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 137E
Signing time: Tue 22 Sep 2026 04:01:06 +0000
Manifest this update: Tue 22 Sep 2026 04:01:06 +0000
Manifest next update: Wed 23 Sep 2026 04:01:06 +0000
Files and hashes: 1: bgpnt5ibenfPpBkC5ed1S0aPSHU.roa (hash: S5fBLUnI7/aLMxt/ortotYg/YTHmJIqk2MiL/kErwvI=)
2: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: 9Dv1gd3smFx7b+Kg/Qu/bN3hW79jWuNYQW3ki71xc0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:47:d8:bf:f1:c3:b4:95:91:c2:35:a9:5c:7d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Sep 22 04:01:06 2026 GMT
Not After : Sep 23 04:01:06 2026 GMT
Subject: CN=3b7e048eb2e8ad666b2f5e2e27d8ea851b3d09c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:2d:af:7c:de:1c:ab:bd:b2:a8:11:bb:39:
66:e1:99:52:34:9f:1a:bd:21:5c:92:14:09:71:b1:
63:3d:a6:9f:f1:77:20:e2:07:61:85:ce:48:c3:37:
d4:98:49:59:35:43:42:53:41:08:13:28:35:4c:f9:
07:df:7c:9a:fe:83:0f:1b:1a:87:63:61:f7:45:53:
ed:00:03:96:22:c1:a2:0b:2e:b2:56:25:c0:19:9e:
a8:3c:76:9a:bb:08:d7:81:55:25:e6:64:2d:65:eb:
c6:9f:17:2b:f9:62:a6:10:c6:ca:9c:8c:86:da:7d:
c5:7b:26:d9:15:b5:88:e4:2a:03:52:0d:f0:01:d4:
5a:8c:67:57:f7:c9:39:1d:7d:04:a6:e9:7b:42:4a:
d6:91:bc:cc:3b:83:48:75:d0:8a:08:f2:ff:9b:16:
3f:2a:e2:86:19:bd:23:a2:91:d4:ac:b5:6f:19:92:
46:5b:35:24:fc:4c:c5:10:b7:f9:8a:21:76:81:da:
66:67:37:8c:19:59:7d:bc:94:2e:6c:b5:c9:c3:7d:
df:0e:9e:36:96:86:9f:a2:b9:81:e3:42:bd:bf:dc:
b7:fc:a5:66:1a:13:ea:fe:ca:34:9d:cb:e5:85:13:
80:9b:51:4c:91:c1:c9:6b:72:41:b0:c8:1e:de:ee:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:04:8E:B2:E8:AD:66:6B:2F:5E:2E:27:D8:EA:85:1B:3D:09:C0
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:e1:70:55:85:7f:87:81:a6:3c:84:3c:97:da:0e:66:83:
99:d6:2c:82:a7:cb:dd:f0:a0:c2:14:47:aa:e9:d1:63:77:4e:
75:71:3e:1b:6c:1a:fd:68:f9:81:66:41:8b:ae:da:b4:21:73:
58:c0:3f:2d:53:9f:64:b3:6a:e2:45:9b:43:73:67:63:3a:6b:
b9:7f:b5:f5:43:bb:ca:b7:20:14:1c:89:fe:e9:94:36:7d:f4:
c9:dd:b7:9f:2c:d0:20:0e:b2:da:75:e6:97:d1:2c:cb:9e:4e:
0c:53:29:35:a7:a5:87:a7:c2:e2:94:de:8b:fa:7c:0e:d7:70:
a3:57:68:f6:86:e1:71:4b:83:b9:78:3c:bb:5a:ef:3d:21:14:
69:b4:2c:c3:7d:d6:7c:00:61:73:d6:37:96:33:03:03:b4:e5:
cd:7f:b2:68:b2:53:7d:72:cc:2b:c3:9a:3a:8d:1b:b0:29:11:
55:54:83:60:22:a9:c9:4a:d1:95:73:5f:d5:62:f3:09:61:59:
4d:3d:33:54:89:3d:89:24:23:fe:ce:b7:91:6d:cd:1b:a9:f6:
77:83:04:a0:07:a9:17:14:a3:33:37:66:3c:be:2a:cc:46:9c:
88:f9:11:60:10:9d:55:5c:00:eb:33:d3:10:4c:ce:cf:e8:22:
1b:b4:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:49 2026 by rpki-client