Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: anP3G49t+UpZ6XJ6pL6HvOUQCV2ieT1Vt6vD94lK2Fs=
Subject key identifier: A4:94:71:6E:77:61:4C:E2:0A:B1:0B:85:B6:0F:8F:55:96:FE:D5:81
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019CAAC61B49C065314B131F4EAC8343C8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: K0sFZ9nRwAkuPWN8VFrUzOs75jKLl9ULs7XZunM/AFk=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1b:49:c0:65:31:4b:13:1f:4e:ac:83:43:c8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=a494716e77614ce20ab10b85b60f8f5596fed581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:f0:5f:22:86:ed:c9:76:10:48:47:3c:b2:
87:dc:60:e9:a6:b1:62:2d:39:0e:3c:02:e4:65:10:
28:58:bb:70:78:cd:d8:a5:47:f4:cf:2c:9a:74:c0:
5b:7a:25:f3:c1:8a:63:d0:9a:71:50:8c:1c:6b:e5:
ec:b3:56:81:a7:c5:90:fc:d2:34:c2:0c:a9:d6:3f:
2a:9c:0b:26:ff:66:6a:30:0a:2b:ef:ec:8a:bb:cb:
42:1e:b9:b6:47:25:ee:8f:15:6d:43:2f:74:9d:19:
fd:7c:f7:91:dc:d8:d6:f9:4b:ff:24:ca:6b:16:90:
dc:99:db:36:ee:6d:7b:6f:f6:c2:5c:9e:83:05:96:
2d:72:fd:0c:7c:ae:d0:ca:24:ff:d8:75:62:6f:f3:
55:fe:8a:95:07:99:b1:64:d5:89:db:b9:4e:39:ed:
72:ae:76:dc:2d:3f:a0:22:86:f2:e2:42:78:e6:65:
2c:12:00:4d:07:96:53:ca:88:8b:e2:00:e0:43:78:
fc:cf:fe:2f:60:7e:fd:26:c1:da:c7:15:21:70:aa:
09:a6:14:47:69:1d:64:b5:9d:55:d2:eb:9e:9a:ce:
6d:59:e3:fa:dc:44:d8:f9:ce:b7:a5:89:67:0a:34:
01:ef:12:5e:bd:eb:24:2a:64:95:dd:1b:ca:ad:e9:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:71:6E:77:61:4C:E2:0A:B1:0B:85:B6:0F:8F:55:96:FE:D5:81
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:43:fa:a8:6f:54:99:7a:f4:46:b2:ad:9a:45:e9:b7:b3:
11:47:60:ad:06:b4:42:96:39:d2:dd:fa:c7:5e:9d:f8:6e:5a:
dc:1c:f9:94:c1:25:1b:57:d5:ab:f9:bd:7f:3b:71:44:c3:6b:
11:d0:68:f6:bd:e6:c1:f5:7d:99:c1:ce:f0:cb:6a:77:57:e2:
be:a1:e5:dc:55:6c:cf:44:82:bf:d4:07:1c:d1:20:23:5c:a0:
58:4a:2d:2d:26:fa:66:8a:36:8d:d5:9b:b9:98:cc:7f:15:b0:
5b:14:14:d9:8c:1e:21:04:42:49:57:f4:0c:7f:87:f5:51:86:
02:f4:df:6d:18:36:2c:0f:ab:af:f4:60:7c:98:2c:1d:71:de:
39:a0:ac:94:43:e7:b7:db:d0:90:80:09:96:55:d5:a1:8e:f1:
40:34:56:f0:42:bc:3c:d1:6c:b8:bb:8f:f6:68:eb:58:91:57:
32:c8:52:2d:a6:4d:1e:58:7e:90:56:5a:ed:80:9e:0b:e4:99:
cb:96:d0:f5:00:e6:0f:99:d9:44:46:fc:8f:3f:6b:e4:96:3c:
44:c9:d7:ea:f5:6d:2f:22:86:cc:89:86:6c:ba:28:b8:df:81:
43:d4:86:17:54:8f:4a:b5:d4:b9:9d:66:39:8c:11:af:6b:da:
bd:d9:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:12 2026 by rpki-client