Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: WdizgqDZ2hSU21ciIV23mjkXAtMn4AfBg9UOdXwLyjs=
Subject key identifier: F2:61:12:DF:DD:FF:32:08:58:13:5A:69:DA:A1:01:C5:B7:41:2F:FE
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019CAAC632F64532B67BB69303FD066E5459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 115D
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: bgpnt5ibenfPpBkC5ed1S0aPSHU.roa (hash: S5fBLUnI7/aLMxt/ortotYg/YTHmJIqk2MiL/kErwvI=)
2: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: j0Y5T5SpGmRvF0tPtwcw+vQWqbshbJLLsO1KblHH8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:32:f6:45:32:b6:7b:b6:93:03:fd:06:6e:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=f26112dfddff320858135a69daa101c5b7412ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:06:2b:a7:6f:c7:2a:4c:f5:ef:3a:d6:9c:
49:61:d3:c8:2a:a0:ea:86:6f:6c:01:e1:2e:26:b5:
2d:4d:16:07:59:ea:70:f9:90:4f:9d:8f:2a:3e:8c:
fe:7a:8e:87:4f:8e:a5:94:c8:bc:fc:f6:1d:89:ff:
f1:b7:11:71:7a:de:71:0f:69:39:16:20:6d:f1:9a:
a5:85:ad:f0:ef:e9:1f:14:7b:dc:5f:ac:b5:86:6a:
1b:1d:e7:61:2e:68:03:15:be:00:02:21:94:0f:c9:
04:5d:dd:e8:e3:6c:64:29:14:66:1c:46:21:da:25:
a3:4b:4c:5a:04:44:eb:5a:e9:93:90:48:58:13:9a:
b6:1a:c0:bd:df:85:67:4f:2a:2d:e7:ae:39:fc:81:
1c:46:1d:a8:f4:7a:c8:49:65:64:2a:1e:23:11:f5:
14:3a:d9:82:e6:11:69:c5:5e:2f:ad:29:89:84:d4:
b5:da:b9:b0:76:c9:23:49:86:e0:e2:f5:42:f3:53:
28:d7:90:6e:10:f3:e4:91:1d:4b:bd:8b:ff:f3:ee:
5c:4c:7e:e2:62:cc:21:e3:6b:a8:e1:79:04:5e:ed:
4b:d4:41:7f:85:46:c9:2b:16:0e:46:ec:92:84:f6:
cc:d2:06:a0:cb:42:bb:06:05:23:52:28:b6:47:79:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:12:DF:DD:FF:32:08:58:13:5A:69:DA:A1:01:C5:B7:41:2F:FE
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:93:7a:dd:1d:f1:40:3d:a0:dc:1e:27:26:d8:28:ad:ed:
fe:0e:b7:78:3c:1f:64:20:a4:77:23:43:37:01:b0:66:8b:f0:
13:07:0c:3d:e9:af:b3:1a:1d:ad:5f:62:84:5d:4e:40:9b:40:
25:81:27:b2:9d:b0:ac:86:2f:8f:d9:a9:07:9e:ef:df:90:08:
7f:04:3c:84:1d:60:d8:84:30:6d:cf:de:e5:4f:9b:ae:5b:78:
07:1a:c3:dd:f3:79:b6:db:bd:d1:4f:52:b7:85:98:39:76:51:
ff:e0:f5:b8:ac:71:a7:7a:ed:c6:ac:bd:3d:17:45:68:d4:26:
b8:20:1c:42:53:1c:e4:d1:7a:c5:df:dd:40:ba:96:12:1d:8d:
9f:70:29:6e:e5:ec:a9:e5:83:62:46:45:48:db:33:ec:e0:10:
bb:7d:89:88:bc:90:6c:7a:3b:9d:6a:35:02:c0:fd:cf:bf:b0:
97:9b:ff:b9:fc:75:ed:7a:0d:7b:e4:57:4f:52:11:5e:16:16:
75:4e:ba:48:80:3d:76:44:18:ef:7a:ab:25:b0:a9:f7:79:6a:
85:b1:34:d5:5f:2a:1b:31:01:79:bd:2d:45:a5:83:20:41:b5:
65:6f:e7:86:e2:e0:b0:27:cd:b8:99:50:b4:64:ce:e3:37:fd:
12:1e:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:43 2026 by rpki-client