Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: 69KJUG1gzirFw+GpQQYcnC9vb4wJcmAv6h7Fg139rG4=
Subject key identifier: 05:F8:75:D7:43:3D:B2:DE:77:E6:3F:87:9F:FC:F5:F6:BF:1B:D0:4A
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019CACEBC117F90838AEE66334497222C48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 0272
Signing time: Mon 02 Mar 2026 05:00:57 +0000
Manifest this update: Mon 02 Mar 2026 05:00:57 +0000
Manifest next update: Tue 03 Mar 2026 05:00:57 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: N/IuH2YOsDhWDVYLUDvDr344s99BJvmCDLUUWdcEVv0=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c1:17:f9:08:38:ae:e6:63:34:49:72:22:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Mar 2 05:00:57 2026 GMT
Not After : Mar 3 05:00:57 2026 GMT
Subject: CN=05f875d7433db2de77e63f879ffcf5f6bf1bd04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:98:0b:ae:9f:e4:d9:64:fa:19:f8:0e:4a:
54:0e:48:a0:e6:f0:62:7b:3c:b6:d3:45:af:16:ac:
79:0e:ff:8a:e2:f5:10:86:c6:7c:0d:90:4a:7d:41:
86:d4:7f:18:1b:a8:7d:db:34:1d:16:2c:bc:4f:c3:
78:89:eb:49:5c:5f:99:d0:44:98:0f:c7:85:a6:eb:
54:60:a4:99:04:a5:ad:93:02:57:53:bb:ea:ab:76:
b2:37:82:d2:77:aa:03:d4:94:19:e5:88:11:9b:be:
9f:29:53:2d:43:05:b4:88:ef:d1:34:2e:4c:17:8c:
55:41:00:44:05:0b:25:70:30:45:60:e0:4f:77:9a:
94:c1:16:e8:3e:1d:fd:06:e8:6f:d3:bb:2d:cf:7d:
10:98:a9:58:96:85:da:03:d3:18:c3:ad:29:0d:72:
a7:c0:8c:76:70:a6:fd:0d:01:ee:d0:81:95:f4:c6:
25:12:bb:02:8e:f8:3d:43:7d:ee:8f:9d:f4:a4:b6:
56:7e:c4:f0:5c:8b:6a:1b:08:64:2f:10:1e:5b:fc:
21:0a:7c:ba:cd:85:ef:dd:a7:ad:82:f7:c0:52:0f:
c1:89:a4:5d:54:fd:44:bc:b9:4d:2a:c4:9f:a4:68:
05:b1:6b:ed:e0:4f:e2:d8:7a:8f:27:88:15:2c:dc:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F8:75:D7:43:3D:B2:DE:77:E6:3F:87:9F:FC:F5:F6:BF:1B:D0:4A
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:e0:e5:fc:4a:8d:b6:6c:d9:da:06:54:03:74:e9:c0:6b:
75:70:e3:59:ed:ae:17:f4:be:f4:c8:77:f6:78:4f:dd:7b:0a:
c0:2a:e3:27:6d:c9:4e:3b:a9:e2:cd:4c:b1:29:44:97:c9:39:
e9:4b:89:e8:88:16:7a:67:9e:82:53:ff:ce:4b:8c:cc:80:12:
4c:31:f2:3b:2a:1a:3d:05:ee:bd:8a:17:8e:1b:45:8e:1f:ed:
2f:f8:31:0a:8a:7f:f8:fa:ab:a6:a4:2b:27:24:9a:5a:ec:56:
fd:80:c4:26:96:ed:35:f7:88:39:4c:70:38:bf:df:e3:31:91:
f2:65:44:25:7a:9f:18:d2:02:95:28:b9:a0:dc:9a:e7:3a:db:
97:e1:40:ad:22:95:d9:e2:d7:ad:78:79:ab:96:9c:e6:01:e9:
bb:86:5d:32:e1:1f:f1:ba:ee:56:39:89:91:87:2c:77:6f:10:
5f:7b:c8:e6:8f:af:4b:40:35:86:40:fe:c5:93:ea:92:db:4a:
0d:4b:22:74:48:5b:a3:74:f1:95:b0:c3:fc:7a:cf:9d:cb:80:
9d:e1:82:cd:8e:a2:c4:82:c8:0b:bc:27:6c:96:23:1b:5f:10:
dd:92:e6:49:a4:51:63:a0:97:4a:c8:2d:46:e8:4a:3f:d3:04:
d5:e7:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:10 2026 by rpki-client