Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: wpNokQc2Io6BtW6Lbhpxe3jiJwVIIsRvL7DxGcNlHvA=
Subject key identifier: 8C:FF:92:25:C6:0F:6F:1D:BA:05:42:8B:63:BE:17:54:CB:64:B0:97
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019CAC7E3E3747FEC9FA712B2616601A60B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0E4F
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: GEpmX/qRno8LSk/j9OUM+RYMM8oJ5wK68VvzhI7+uys=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3e:37:47:fe:c9:fa:71:2b:26:16:60:1a:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=8cff9225c60f6f1dba05428b63be1754cb64b097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:48:73:05:30:c8:47:1e:0c:34:6d:cf:80:
42:92:50:c8:16:23:91:31:00:61:7e:54:df:3b:48:
79:cb:d3:89:0f:1f:52:55:94:c3:aa:30:fa:4e:13:
7a:13:3a:f1:24:ac:de:bb:dd:06:ff:ee:a1:e3:69:
65:81:f4:5c:dd:73:62:27:a3:fb:e0:59:9b:be:82:
62:f6:6b:08:c0:11:61:b6:cb:ed:cc:78:b0:8d:fe:
4a:4d:6f:b9:8f:1e:e0:a9:b2:fd:e9:18:2f:3d:3e:
b4:23:08:0c:5e:69:ff:ba:d2:6b:22:a2:e4:9b:bd:
b8:2f:69:ba:eb:47:dc:86:da:c1:45:4c:39:53:f8:
b5:b3:1d:92:9b:94:b8:7b:15:2a:d8:29:fe:1e:e8:
f9:c9:9c:ad:5c:e8:ba:fb:c0:ad:23:96:c2:03:1a:
8d:92:3e:f1:f8:54:c1:57:cf:79:73:0b:dc:a9:73:
fa:54:0c:1d:0c:07:b8:fc:8f:11:f6:f0:e4:ea:9e:
05:96:06:61:b1:29:bc:93:d5:f6:15:d4:ba:8b:01:
c7:8a:ac:9f:9b:7e:6d:bb:41:c6:ab:30:dd:d0:8b:
6d:2d:e4:b0:02:9f:7f:4a:89:c8:18:d7:d3:fd:2d:
91:1f:90:f6:64:db:f8:fc:16:b8:79:27:b2:49:d6:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:92:25:C6:0F:6F:1D:BA:05:42:8B:63:BE:17:54:CB:64:B0:97
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:68:1b:21:e2:ff:e4:cf:a1:3f:b6:0c:03:d2:81:95:f9:43:
08:c2:08:09:a9:b3:8e:82:df:c2:20:28:fe:44:e5:bb:67:3c:
f8:81:a2:98:54:e7:05:fa:42:c9:4c:0e:30:cd:72:76:05:ff:
d9:b0:3e:1c:f3:ca:dd:31:4a:dd:52:e4:26:bb:62:03:1b:02:
3a:50:5e:e6:a2:e8:2b:68:47:16:ad:c8:3d:91:b3:3b:6e:36:
52:b9:9a:9d:69:10:9a:22:e7:ea:6c:78:4f:50:04:31:fa:c2:
c9:1a:2a:17:e1:6e:b3:34:4b:d5:0c:77:ce:92:98:f3:18:ad:
66:ce:60:e6:a6:0f:38:83:0b:22:46:af:34:4f:ec:e3:0d:b2:
11:99:d2:54:1a:23:b0:26:00:0b:17:ca:6d:3a:f9:27:54:36:
9c:ac:13:9b:d6:69:c2:16:02:8e:fe:39:89:3f:2d:d9:1c:2e:
17:95:cf:8e:0c:65:af:6a:dc:29:b2:7b:a3:97:4a:49:e8:25:
ca:bf:13:c7:98:be:4f:1c:f7:11:53:cd:81:4c:16:0d:93:9d:
69:2b:d3:f2:bf:11:37:82:53:e2:1e:7c:d5:58:5f:8d:12:b5:
11:cf:ee:e0:c9:1b:25:46:38:42:ea:00:8b:fd:c2:3b:a0:89:
e4:93:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:30 2026 by rpki-client