Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: oISQE0caLuiOLEvHETBVKfuMqp3iapHaVCCWu4wYtY4=
Subject key identifier: 85:FF:B4:32:00:41:97:34:0F:F1:D3:88:6A:C1:1B:C5:4C:08:3A:CE
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019CAB6B13D9234AFDAE35642C76EFBDFCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 0FCA
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: +aYILdLDUWd6tHnSzpq/DZVXzCVxNMaOyB6VcaiWbv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:13:d9:23:4a:fd:ae:35:64:2c:76:ef:bd:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=85ffb432004197340ff1d3886ac11bc54c083ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:71:c3:cf:f0:aa:e5:7a:31:42:f9:51:32:
c4:9b:cd:41:30:8b:e5:0b:5f:a1:97:5c:eb:6d:ff:
bb:50:48:4d:57:ad:b3:c8:4e:1b:3c:80:1a:9b:3e:
1b:81:11:03:72:9c:95:e9:57:01:59:44:91:f9:09:
9b:41:d4:58:e1:a6:22:c7:4b:3d:a1:df:e6:6d:33:
ba:e5:91:dd:cb:e6:00:eb:e2:35:6e:48:3b:10:e9:
32:bd:f5:0a:de:1d:92:ff:86:83:2d:5e:b2:c4:7d:
8c:77:37:19:53:99:43:92:39:ff:22:01:9a:cf:41:
64:4e:f0:f6:c3:22:45:d4:be:6f:6e:ed:0a:25:da:
d2:4f:af:f7:ec:80:23:9c:d9:98:1f:59:c5:4d:11:
f4:8a:ab:54:0c:7b:61:7f:e3:68:a7:62:4d:1b:34:
d4:c5:2d:3a:9a:87:ed:7a:aa:20:11:46:a0:ea:2b:
af:75:4d:33:8d:1f:21:3f:a8:1c:23:7c:16:47:98:
e5:e7:40:17:e7:ef:b3:a1:fb:ee:dd:4e:9d:4a:40:
14:33:0c:ff:78:c6:42:a0:44:fe:ac:ff:e0:a3:68:
9d:bc:74:bb:cd:38:a4:f4:8e:2d:c3:af:6f:90:75:
1b:84:f0:40:d7:7b:ac:52:25:fe:e4:de:3f:27:0c:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:B4:32:00:41:97:34:0F:F1:D3:88:6A:C1:1B:C5:4C:08:3A:CE
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:dd:2f:c6:7a:b2:e4:b2:96:6d:d3:3a:ea:8b:24:08:9c:
b3:49:15:9d:e8:cc:ae:0f:dd:48:fa:e4:e7:25:53:dd:e4:22:
3c:f7:72:f5:e3:96:e5:50:de:18:53:a8:e8:75:fd:77:0a:53:
70:37:83:5e:16:f2:47:df:e0:d8:fc:dd:0f:99:55:a0:5e:4e:
10:92:6b:a7:b4:e4:cc:88:c9:71:1f:08:01:13:b6:a1:e6:13:
5f:c7:01:2e:bc:dd:51:3d:53:87:21:cc:d2:96:fd:a0:4d:e6:
24:2d:ff:1c:80:59:f3:83:03:dc:b2:d1:54:1c:c9:0f:a7:ce:
9a:bc:84:57:dc:9f:c6:14:74:cb:3d:09:1f:71:1b:af:69:fd:
aa:bb:ab:72:75:cd:6b:72:9e:be:46:d8:f1:c7:02:90:33:92:
3f:8a:35:31:75:94:eb:84:cf:4a:ce:9b:c2:10:c2:87:f7:5d:
d8:68:f8:11:ba:48:f7:24:bf:6e:34:9e:b8:4c:a5:7a:d9:90:
b1:c0:15:76:0e:3a:ba:86:2b:05:4f:86:74:cd:a2:58:f2:a8:
96:97:25:c4:0e:b2:dc:73:cd:ed:3a:e2:3f:5d:b7:46:5a:bf:
48:2d:20:95:17:38:8d:24:8a:d5:08:15:bf:03:96:a9:9f:7d:
49:ca:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:16 2026 by rpki-client