Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: fLofp7XGf6YveNcqydG647kPwmUpbq9ujMcXa7MFFkI=
Subject key identifier: 40:8E:86:BA:67:6B:60:8A:44:83:D3:2A:CF:4F:47:2B:C7:1E:3B:1D
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019D9A076ED75BC66CF10D2D330C7734BBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: B2
Signing time: Fri 17 Apr 2026 06:01:11 +0000
Manifest this update: Fri 17 Apr 2026 06:01:11 +0000
Manifest next update: Sat 18 Apr 2026 06:01:11 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: q8V8RwgeG1N9UYVqvT3VzPOyzIcXkv7uxUBi+SM/mGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:6e:d7:5b:c6:6c:f1:0d:2d:33:0c:77:34:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Apr 17 06:01:11 2026 GMT
Not After : Apr 18 06:01:11 2026 GMT
Subject: CN=408e86ba676b608a4483d32acf4f472bc71e3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:38:3a:06:01:6c:fc:b2:43:5f:93:d4:5e:
44:e4:73:74:04:cf:a6:5c:53:cf:77:a2:8d:26:9a:
35:4f:4e:95:00:c9:f0:f9:00:62:ec:bc:f9:3e:53:
12:cb:e3:fc:55:eb:b9:0d:75:8a:71:79:12:e1:db:
3b:55:d6:f1:c7:17:4c:1b:12:3f:ab:ec:0d:1c:e5:
bd:83:6e:ee:ae:f1:32:e4:cf:e7:a4:6a:ac:f9:15:
7f:63:28:82:a8:81:9a:d8:80:a0:b2:e8:ef:f4:5c:
dc:29:f8:62:d2:04:f7:08:f2:ee:c1:8a:35:b1:f2:
71:7f:f6:92:a9:50:c4:a8:3c:8e:6a:45:ff:eb:0e:
7c:cf:e2:ce:6a:24:fc:7e:f1:e6:40:e1:a0:3f:a3:
52:74:f2:ea:52:ca:08:a8:4f:1a:e0:6a:5f:16:d6:
a9:84:9d:7b:c7:4a:52:d4:7a:5a:32:23:b7:21:4a:
12:40:d7:6c:36:c0:c7:6c:0a:0a:cc:d3:d4:dd:5a:
c5:e8:b7:32:73:c3:60:a9:47:d4:76:5d:2a:c9:21:
2d:14:c7:0f:5b:aa:23:db:b8:ee:1d:36:e6:f2:21:
fa:7c:37:52:ce:f7:25:12:82:ee:5f:74:ac:64:d7:
3d:4d:c7:5d:47:e6:4e:5b:23:66:3e:76:e2:47:07:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:86:BA:67:6B:60:8A:44:83:D3:2A:CF:4F:47:2B:C7:1E:3B:1D
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:c3:2c:c8:3f:cb:09:e3:8a:3d:19:a9:aa:72:54:96:d7:
a2:7b:f1:9b:82:87:a3:2a:60:e1:ce:16:d4:48:0b:bd:0b:ca:
89:97:7c:ec:04:31:7a:b0:e1:48:39:c4:f5:91:85:53:44:02:
09:c6:2f:94:81:89:eb:df:ab:23:6e:9b:cc:5d:2a:ab:2e:ea:
b3:ea:8a:52:37:d5:e6:5e:1f:aa:33:d7:5d:8e:ee:cc:f9:6d:
03:06:e4:39:6e:8b:3b:3c:e5:d2:59:1b:b1:f8:4a:62:bd:9c:
26:85:3a:55:44:df:cc:e0:3d:3d:7a:1b:e0:ac:12:0b:2a:0c:
87:af:ab:3c:a0:42:38:0f:cb:25:96:3e:4d:7a:57:79:a0:6d:
1e:b3:bf:54:ce:e6:fd:0b:e2:25:d0:79:ac:e0:da:c8:0a:0e:
54:93:a8:2c:54:b8:97:ff:da:6f:fe:a2:00:43:4a:f0:2f:7e:
e6:ab:ce:a7:7e:50:ca:56:c9:24:db:73:89:4a:95:5e:f4:c2:
12:b7:7d:f8:92:c6:d1:a6:9f:6c:66:5f:77:58:bb:06:3f:02:
ea:a0:35:38:ce:77:32:82:5b:f1:8f:1b:ca:cf:9c:68:40:7c:
17:32:f2:aa:35:17:d8:cc:26:00:81:5c:8c:ed:e9:71:ca:59:
a4:13:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:34:56 2026 by rpki-client