Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: 6PT3lXpueoaSqvO67xdPMTt9sGXm2GP3YqKWUA3mTBk=
Subject key identifier: D3:4D:FE:A6:4E:BD:C3:89:6F:7A:0D:4D:1D:E3:CA:D9:C2:DB:E0:F2
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 019CAA584BE5DBDAD8B318CCB09D3A035A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0CBE
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: bJWYvM9sVTXsCT0+N2xg7TRxoZ/3rmrncalMv2HU4Dg=)
2: i8r_KcfZKeFV_hgBzyCFH1FvU2Q.roa (hash: q7K3PKVBwmAslABYzD36Nuj0tVHPXSk4xv3r0eaKenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4b:e5:db:da:d8:b3:18:cc:b0:9d:3a:03:5a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=d34dfea64ebdc3896f7a0d4d1de3cad9c2dbe0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:2c:34:2d:53:3e:98:66:36:e4:3b:d3:8d:
7d:25:b0:56:39:d1:1f:1c:91:12:d1:b1:92:e0:2a:
dc:36:78:ba:60:37:78:96:eb:aa:37:ef:03:0d:b8:
ed:aa:f7:c5:d3:2c:26:a9:77:8e:81:95:06:4a:68:
45:ed:a4:af:ee:56:0e:46:a0:a4:a9:1e:d1:bb:13:
ec:24:c4:11:98:dc:ea:f0:93:6d:55:b8:43:18:0f:
80:d0:7e:b8:81:f7:35:1a:4c:01:b2:36:7c:b5:6f:
cb:8c:93:7b:5b:9c:ac:59:0d:83:54:33:d7:f6:3b:
69:6d:37:a8:04:b2:2f:e7:52:9d:3e:a0:79:5c:e9:
72:bf:6e:97:64:ec:a2:11:e5:8b:da:85:64:10:ad:
28:77:16:61:ec:6f:33:75:e1:ea:4f:b0:fe:de:9f:
d9:28:a0:19:62:07:24:a4:fa:24:4f:fa:37:62:01:
c8:ea:26:fc:9a:fe:c8:8f:04:04:a0:b6:55:b5:cf:
5c:19:f1:72:30:8a:88:8c:f9:e8:3f:a9:af:53:d0:
29:59:94:3c:23:3c:79:92:b8:0a:6c:72:93:9b:b6:
20:41:f0:1a:87:27:a0:d5:fd:f8:3e:32:55:e9:82:
96:41:ab:bb:ee:69:f1:93:0d:b3:9d:7c:74:f0:62:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:FE:A6:4E:BD:C3:89:6F:7A:0D:4D:1D:E3:CA:D9:C2:DB:E0:F2
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:f2:e4:c2:cd:5c:1a:28:18:31:49:ce:72:52:70:85:97:
63:27:ca:c4:3d:b0:c4:ef:99:34:23:2e:ea:49:18:cb:26:08:
d5:e1:a0:13:8f:ba:49:22:13:24:e3:98:97:43:27:3c:fe:a1:
c7:56:f1:ee:f9:1d:a2:62:17:da:62:18:47:45:e3:30:d8:33:
95:f2:23:d6:f5:c1:55:a3:84:3c:d3:5a:2f:f7:fe:a5:7c:ef:
61:b7:57:03:23:9d:2b:a0:01:63:da:3a:70:4a:f9:15:58:1c:
54:3a:8b:97:59:79:e7:41:18:bd:39:ae:c3:27:aa:59:41:32:
20:3b:3d:cf:3a:3b:c2:d0:3a:d7:57:6f:48:56:fa:31:63:77:
74:d3:ef:2d:0d:4b:01:0f:90:8d:c5:a7:44:4d:e0:2b:9a:72:
20:bc:c9:07:1f:65:fe:c8:05:9f:7b:81:93:2d:f5:c1:93:c6:
3e:7e:0a:60:23:c3:5a:ec:8c:f7:5c:84:e3:58:c3:a1:3e:b1:
8e:b2:fb:6d:1c:1e:ce:0f:65:31:b2:86:29:ed:e7:27:8e:a9:
c8:16:1a:0b:0d:86:c1:8c:cc:2f:c9:25:1e:78:89:cf:68:bc:
10:88:66:c8:84:71:1b:6a:0c:54:13:da:5d:96:46:5d:c6:35:
33:cc:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:40 2026 by rpki-client