
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: fCamu/OFVtYV+MIvazZTMxt95IcOJXOq7xWtB4T3hp8=
Subject key identifier: E0:E8:EF:10:81:BF:DD:0D:56:27:3E:47:31:43:BC:D2:B9:DA:A6:E9
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019D9DE3AA0CD6399AA6A123D02402693E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: B4
Signing time: Sat 18 Apr 2026 00:00:36 +0000
Manifest this update: Sat 18 Apr 2026 00:00:36 +0000
Manifest next update: Sun 19 Apr 2026 00:00:36 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: mR+oiQqdbhIUBboaUBLXHHO3xOiVmJowQhaZYOwMIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:aa:0c:d6:39:9a:a6:a1:23:d0:24:02:69:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Apr 18 00:00:36 2026 GMT
Not After : Apr 19 00:00:36 2026 GMT
Subject: CN=e0e8ef1081bfdd0d56273e473143bcd2b9daa6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:27:3a:0f:a8:20:0d:b4:83:88:3d:8e:ee:
7c:ed:3d:c2:ba:d6:37:e3:9c:ad:95:d7:48:dc:be:
68:f7:4c:32:aa:ec:30:8c:99:d0:66:38:eb:1f:bf:
da:09:5d:ca:c6:00:03:6b:4f:e7:39:ea:0f:06:04:
ea:86:e1:81:2c:34:9e:89:94:3b:17:a6:87:52:94:
ed:77:ae:a1:64:2e:9a:84:d7:bd:be:eb:59:30:e0:
fb:89:c4:2d:8a:7d:52:b5:92:4c:80:f8:6c:fa:55:
cf:2c:df:43:79:8b:da:4f:17:8a:55:4b:e4:cf:bb:
c8:97:bb:6c:d6:5b:f6:6b:ab:b0:8c:c3:b5:cf:8c:
75:f6:54:26:0d:bc:9e:60:b8:e8:a9:9b:0b:08:5c:
ce:66:60:67:73:c3:8c:80:86:18:07:a8:ad:d4:49:
7f:d9:ad:ef:03:88:2a:6b:2e:17:37:dd:ed:dc:75:
8f:38:09:c1:b8:33:ab:fc:7a:66:89:b4:14:a0:d8:
5b:9e:96:e9:78:3f:6b:c7:02:16:2f:36:4c:71:7e:
a1:eb:fa:ea:71:bc:78:50:e5:3c:99:d2:9a:c5:36:
8c:05:7f:81:dc:3c:1d:36:9f:53:08:8e:7c:a1:7b:
83:7a:90:ba:68:8c:c9:e9:72:df:e0:5c:b2:e5:9c:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:EF:10:81:BF:DD:0D:56:27:3E:47:31:43:BC:D2:B9:DA:A6:E9
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:e7:bf:41:f0:71:0e:06:23:4f:eb:f9:ea:c8:71:50:8c:
4b:d8:42:a9:a3:36:6c:8b:3d:5f:d4:ca:bd:fb:e7:38:06:c0:
a4:72:19:5f:75:f2:ed:39:d4:1c:85:53:bd:a6:4a:82:89:a1:
a7:57:2e:7b:01:32:35:47:f6:8b:7c:3f:67:fb:be:8f:f4:af:
c9:44:37:7f:48:95:91:bc:d9:39:01:8a:b3:e9:ef:7b:7b:30:
b7:be:e4:77:22:41:1b:81:eb:24:eb:ab:fd:96:2d:31:49:92:
06:fa:a3:84:2d:d9:8b:33:d7:a7:07:ed:41:14:b6:df:c4:6a:
1d:5a:7f:8f:3c:db:e3:2f:53:79:0a:98:75:8c:96:ca:ca:65:
9c:9b:12:41:07:24:1a:79:72:e9:dc:ce:d3:2f:9e:30:b3:61:
df:4e:53:35:ca:50:48:db:a1:32:18:92:f5:0d:77:f2:5b:74:
93:4f:66:f3:3c:56:ad:8d:6a:57:b9:98:08:9f:57:df:62:5e:
a9:a3:30:b5:10:8f:e3:8b:d9:cc:4a:80:07:86:33:5c:1c:44:
91:c9:dc:b7:e9:f7:62:9f:f9:53:3a:13:4b:91:c3:20:ec:71:
43:0d:4f:7d:00:5a:06:0a:99:68:89:b4:89:4a:c9:09:29:5c:
f3:0c:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:08:09 2026 by rpki-client