Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: fN1D8tWoUgNZ4+uImK/vWb1EMuULTqU9DvIIfdJr8Rc=
Subject key identifier: 1C:8C:04:D5:D5:F7:02:EE:7A:43:7F:37:78:B8:66:CD:13:40:97:45
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019CA8A1719BE623AE97EAB6E786655A9665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 35
Signing time: Sun 01 Mar 2026 09:01:18 +0000
Manifest this update: Sun 01 Mar 2026 09:01:18 +0000
Manifest next update: Mon 02 Mar 2026 09:01:18 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: WNE/EFUYOpi5PjzKxU7ljXv10y2oArYUGxNwN8Dj+uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:71:9b:e6:23:ae:97:ea:b6:e7:86:65:5a:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Mar 1 09:01:18 2026 GMT
Not After : Mar 2 09:01:18 2026 GMT
Subject: CN=1c8c04d5d5f702ee7a437f3778b866cd13409745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:66:fd:00:3e:61:63:13:66:a8:bb:2c:d3:
7c:36:5d:0f:8e:32:01:0c:fc:4b:8d:4f:d5:ff:6f:
e5:c1:79:da:26:bb:f2:52:3c:99:52:b1:43:8a:20:
89:78:5c:99:e0:68:dc:d3:e7:4a:27:c1:19:e2:e8:
ad:1e:91:2b:cc:f7:d5:9b:9a:e1:52:c6:b1:b5:f5:
70:0b:d5:a7:bf:24:c6:24:2a:0a:10:4f:31:89:cb:
d6:d8:19:f8:9c:23:76:4e:b9:e5:69:81:b9:e0:bb:
72:e4:d5:76:5e:45:26:9a:dd:b2:f3:92:55:af:e0:
53:28:99:c6:6a:59:c7:be:cd:1e:75:31:f0:47:00:
3c:ea:1f:e7:98:8a:07:49:c6:c3:c7:e5:b6:8b:6d:
2d:d9:b6:14:a9:8f:da:3b:47:80:5b:2f:21:ab:58:
f9:2c:9a:cf:64:3b:60:c2:2d:b1:92:2d:0d:6f:94:
bd:c3:3c:f9:ac:f8:08:96:8c:36:fa:f3:2d:9b:77:
25:73:e6:3c:67:e8:4f:07:9f:2e:39:ba:a4:39:a5:
3c:24:f2:ba:0a:54:b6:d9:79:98:16:ad:6b:f6:0d:
81:c8:fe:cc:6b:8a:d7:b1:9c:5b:7c:48:d1:b2:c1:
d7:49:f6:57:21:f0:f2:8f:3e:64:e2:57:07:3f:9e:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:04:D5:D5:F7:02:EE:7A:43:7F:37:78:B8:66:CD:13:40:97:45
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:0f:64:47:81:03:53:e4:e7:bf:26:84:76:b3:20:e4:c1:
eb:05:39:b4:21:41:61:cd:8e:f6:4d:78:d8:0c:3b:dc:f4:d5:
50:a3:a9:2a:8a:f8:5c:8b:35:b4:58:4a:86:05:56:05:57:bb:
aa:f3:fd:5b:6f:2e:47:34:cf:7f:05:7d:e4:02:9c:55:bb:6b:
c2:82:b3:5c:82:4d:b3:7a:4a:f9:03:3f:c8:f7:ea:60:07:be:
82:98:1a:dc:81:6d:8a:38:73:6c:24:b6:10:fe:7c:88:e1:81:
3d:f1:fd:fd:7c:6c:88:96:3b:a9:8d:c9:e8:45:e7:a4:82:8c:
61:9c:4d:f9:3f:03:b6:46:d4:cc:d0:90:52:7f:d7:98:3b:04:
35:3b:0f:02:05:4c:26:c0:da:39:53:6a:25:dc:64:84:c2:16:
41:9e:84:e6:d3:13:07:58:9d:18:a6:62:02:4b:87:a2:20:e0:
19:89:50:a2:36:98:39:58:37:dc:7f:11:20:e8:18:64:fc:17:
12:af:df:2a:5d:85:49:bb:93:de:9a:32:b2:a1:dd:b1:2b:a1:
4c:34:25:a3:7b:30:b2:ae:fc:d9:a0:74:20:b0:ef:81:03:1b:
01:b6:a3:b2:60:6f:68:f9:c9:e6:45:e3:50:7c:1c:e9:76:57:
d9:e1:b7:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooXGb5iOul+q254ZlWpZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzMzM2RlMmQ4ZTcwMzcxMzQyNTRjMjdjZTFjNDJiZjQ3
NWEyOGIwHhcNMjYwMzAxMDkwMTE4WhcNMjYwMzAyMDkwMTE4WjAzMTEwLwYDVQQD
EygxYzhjMDRkNWQ1ZjcwMmVlN2E0MzdmMzc3OGI4NjZjZDEzNDA5NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rxm/QA+YWMTZqi7LNN8Nl0PjjIB
DPxLjU/V/2/lwXnaJrvyUjyZUrFDiiCJeFyZ4Gjc0+dKJ8EZ4uitHpErzPfVm5rh
UsaxtfVwC9WnvyTGJCoKEE8xicvW2Bn4nCN2TrnlaYG54Lty5NV2XkUmmt2y85JV
r+BTKJnGalnHvs0edTHwRwA86h/nmIoHScbDx+W2i20t2bYUqY/aO0eAWy8hq1j5
LJrPZDtgwi2xki0Nb5S9wzz5rPgIlow2+vMtm3clc+Y8Z+hPB58uObqkOaU8JPK6
ClS22XmYFq1r9g2ByP7Ma4rXsZxbfEjRssHXSfZXIfDyjz5k4lcHP57VmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByMBNXV9wLuekN/N3i4Zs0TQJdFMB8GA1UdIwQY
MBaAFG/DM94tjnA3E0JUwnzhxCv0daKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhNejNpMk9jRGNUUWxUQ2ZPSEVLX1Ixb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jZjIyOTgtNDMxNC00ZDMwLTk1NGIt
YWE3NDZjYWI1NDE1LzEvYjhNejNpMk9jRGNUUWxUQ2ZPSEVLX1Ixb29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jZjIyOTgtNDMxNC00ZDMwLTk1NGItYWE3NDZjYWI1NDE1
LzEvYjhNejNpMk9jRGNUUWxUQ2ZPSEVLX1Ixb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwUPZEeB
A1Pk578mhHazIOTB6wU5tCFBYc2O9k142Aw73PTVUKOpKor4XIs1tFhKhgVWBVe7
qvP9W28uRzTPfwV95AKcVbtrwoKzXIJNs3pK+QM/yPfqYAe+gpga3IFtijhzbCS2
EP58iOGBPfH9/XxsiJY7qY3J6EXnpIKMYZxN+T8DtkbUzNCQUn/XmDsENTsPAgVM
JsDaOVNqJdxkhMIWQZ6E5tMTB1idGKZiAkuHoiDgGYlQojaYOVg33H8RIOgYZPwX
Eq/fKl2FSbuT3poysqHdsSuhTDQlo3swsq782aB0ILDvgQMbAbajsmBvaPnJ5kXj
UHwc6XZX2eG3ew==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:14 2026 by rpki-client