Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: SPQhh1A+nunNNl1K+qd6TnTilHW2kApbJjcGMwg3o0s=
Subject key identifier: 2B:DF:D3:FE:12:5F:1F:8A:4A:0E:75:BA:3F:B9:FB:9A:D1:53:75:54
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019EBF9199C73EFD83C5BF85AA8643C184B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 014A
Signing time: Sat 13 Jun 2026 06:00:50 +0000
Manifest this update: Sat 13 Jun 2026 06:00:50 +0000
Manifest next update: Sun 14 Jun 2026 06:00:50 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: xp6v4W7DMIyr+992+Gz6P0tmFJIL+fZB6UC226ZxZVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:99:c7:3e:fd:83:c5:bf:85:aa:86:43:c1:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Jun 13 06:00:50 2026 GMT
Not After : Jun 14 06:00:50 2026 GMT
Subject: CN=2bdfd3fe125f1f8a4a0e75ba3fb9fb9ad1537554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:af:ac:ad:b9:9a:1e:29:0a:e4:bc:f9:93:
30:fa:f5:18:1f:aa:e5:b8:06:a0:4a:9d:03:5f:71:
94:41:15:4c:96:a8:cf:e8:fc:6a:9d:20:04:89:ea:
d3:6a:fa:38:95:9f:5c:1f:6e:f1:8c:26:22:a9:2e:
a7:20:3f:80:82:1f:80:0c:70:98:09:17:3c:86:49:
39:e3:b5:54:5d:b4:50:40:04:fb:fd:eb:19:b9:40:
28:08:04:25:42:fd:dc:0f:ba:a6:25:95:db:2c:b6:
aa:a2:93:58:d2:cd:2c:db:cf:e6:b5:61:15:26:e0:
0b:24:71:59:f8:60:14:9a:7b:65:9a:e1:90:10:4c:
90:7c:ce:10:94:49:e9:d6:a9:bf:f3:1b:88:b8:75:
f5:15:86:fb:ab:a4:41:01:08:df:3e:17:f7:3a:8c:
bc:9e:a0:a8:9f:1a:5a:2f:fb:f1:34:82:92:3a:d3:
3f:ab:1a:2b:55:c1:c2:12:f6:81:02:5f:26:5b:31:
49:47:e8:93:d6:15:85:90:39:ed:0d:72:48:c2:f9:
fa:6f:9c:3e:98:2b:24:fb:c8:95:41:4f:96:eb:81:
4d:bd:5e:af:8a:95:66:ee:a5:1a:4c:07:92:ec:d9:
dd:a1:24:cd:03:54:c8:3e:72:7c:57:5f:62:37:f3:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:D3:FE:12:5F:1F:8A:4A:0E:75:BA:3F:B9:FB:9A:D1:53:75:54
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:8c:f3:1c:09:85:17:b5:7e:48:69:fa:e3:53:d8:5e:9d:
7e:59:a0:09:73:1d:84:fe:6a:6c:6a:fa:de:f3:8a:28:0b:58:
62:b0:d0:2e:c5:ef:2b:e9:4e:8b:6d:88:80:96:d7:f0:8d:45:
5e:ac:d2:5b:48:56:11:e6:fe:a4:d8:3d:5a:ff:16:f5:92:47:
d2:6d:22:32:5f:99:e7:5f:8c:2f:8f:4b:58:61:ae:47:01:89:
e7:42:d9:e9:02:64:84:df:fa:5b:a0:6b:a6:7a:52:f6:7c:9a:
1f:be:69:6a:ff:30:71:94:aa:49:13:9a:a8:52:51:66:90:4f:
c3:98:ce:0d:9b:54:df:1f:f1:da:e3:97:20:18:2a:c2:e6:37:
c2:c7:8e:20:9b:27:2b:f8:89:8f:63:7c:4d:0b:08:61:6d:89:
1e:dc:18:ac:02:89:05:40:0c:c5:16:72:bd:95:4f:27:10:f0:
f2:02:ba:f3:0d:47:a8:9b:fd:e2:99:c2:35:5b:37:29:25:8a:
a2:b3:60:4c:30:7c:8c:13:44:ea:a3:46:d4:a5:9e:1c:0f:1f:
be:c2:45:d4:71:cd:e3:01:0b:36:10:c2:5d:21:a6:cf:fd:1a:
57:eb:f5:f5:1a:f0:9c:0e:7a:9c:7c:11:c7:c2:0e:1e:89:21:
64:f7:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:20 2026 by rpki-client