Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: UaCYrmzpCP520e+GDn7TevyqQGh7BKeYiZXG5I0AWow=
Subject key identifier: 31:36:A0:58:69:7B:DE:38:AA:AB:D4:1A:8E:94:88:41:B4:AC:30:FC
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019CACEBB5D17E5AC398960B8FECD3208E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 12F1
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: x69rnyNojWtpW8N/TGmVvOJ44ZT+042IMWAnQjP8cD4=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b5:d1:7e:5a:c3:98:96:0b:8f:ec:d3:20:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=3136a058697bde38aaabd41a8e948841b4ac30fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:bb:8d:d8:d7:75:de:72:b0:02:84:2c:39:
c5:ff:54:91:aa:c4:ca:e8:53:f7:06:be:21:2f:02:
4b:36:f8:e5:4f:10:9a:aa:c6:15:63:fc:2d:f3:61:
91:03:ff:7b:89:8a:7c:c1:ba:55:84:2e:73:70:6a:
07:26:b7:b4:f0:38:88:e1:db:de:f5:ab:32:f6:98:
b5:15:1c:94:8a:88:15:93:a3:8d:62:88:f0:57:10:
89:51:d9:83:89:a9:55:6a:5f:63:47:e5:44:30:59:
90:1a:76:e9:d5:24:90:c1:c0:5d:fa:94:ff:ce:d3:
11:4a:0d:59:cd:ed:fa:82:3a:e5:75:f7:e2:5a:e9:
e1:24:e6:ae:ec:3a:24:c6:d7:84:9d:07:0d:21:f0:
82:75:b2:56:49:7c:af:6a:5b:bf:65:d0:a4:ad:15:
c1:19:a4:4d:61:1a:17:14:25:81:b1:10:0d:01:0d:
69:27:9e:c6:70:9d:65:8a:b7:e4:93:dd:d0:e2:ed:
9b:53:9a:01:a6:ad:9c:9c:0d:41:ca:e6:0b:9e:91:
7e:34:f0:27:33:52:74:47:5b:69:1e:d7:04:cb:9e:
bf:18:05:3f:62:92:a8:94:ca:47:94:f6:48:22:57:
1e:7d:16:ab:70:44:f2:98:5d:8a:17:03:28:2a:9f:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:A0:58:69:7B:DE:38:AA:AB:D4:1A:8E:94:88:41:B4:AC:30:FC
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:8d:88:4b:bd:53:b4:74:6d:e1:26:dc:2c:a2:8b:82:a5:c6:
70:47:b0:14:96:6b:56:79:dd:be:96:9b:ac:8c:db:78:7c:02:
50:d5:31:75:49:69:d2:2c:73:cb:4e:a4:62:aa:89:06:b0:69:
ce:4f:9c:50:b4:2f:ef:1d:1c:fa:e7:f4:d7:7e:34:bb:93:f1:
59:96:19:0f:d2:00:8a:e7:4a:b3:78:ad:82:0b:9d:c7:28:a0:
84:f7:62:f4:d1:2a:65:f3:1f:e8:59:77:a0:a8:b0:29:cc:8d:
7b:44:dd:b9:3f:33:79:b6:ad:fa:fb:f1:6a:3a:63:c1:c1:42:
f7:9f:2d:1e:c3:70:5e:97:1a:58:e0:45:e0:84:50:43:11:bd:
18:9a:a2:c5:07:16:a6:51:f5:67:4c:7d:77:bb:9f:04:e8:78:
f3:cc:e2:ef:40:cd:e3:a0:1a:13:0f:3c:64:63:e1:6b:1b:5f:
12:7d:2a:43:4a:3d:ef:b0:eb:0b:11:09:d8:89:37:13:df:db:
1e:4b:73:e4:a6:27:f4:09:5c:bb:aa:1b:a6:7b:23:15:f2:0d:
ff:6d:a7:13:ce:b6:58:06:49:ba:c3:ce:ce:d8:0f:e2:cc:56:
68:62:d4:23:43:05:5c:b5:c4:4f:aa:37:44:ea:b5:cf:60:19:
c5:83:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:17 2026 by rpki-client