Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: HT1GjQatV09FuBPnC9/MHlVOV4ZRpGTLkpoNxzmKcDY=
Subject key identifier: EE:E2:7E:04:34:C8:BD:BD:61:02:9F:5E:B7:40:F5:8D:DC:96:A8:C4
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019CADC84DBCF94B0EA4BDBAEE9EE8CE7656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 05C6
Signing time: Mon 02 Mar 2026 09:01:51 +0000
Manifest this update: Mon 02 Mar 2026 09:01:51 +0000
Manifest next update: Tue 03 Mar 2026 09:01:51 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: xWTZKzztvHdpFh2uxwXOT6nOVnEPL0mSUInNPgJyNbA=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:4d:bc:f9:4b:0e:a4:bd:ba:ee:9e:e8:ce:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Mar 2 09:01:51 2026 GMT
Not After : Mar 3 09:01:51 2026 GMT
Subject: CN=eee27e0434c8bdbd61029f5eb740f58ddc96a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:17:2b:1b:30:88:25:c6:a5:97:ab:cb:ef:
2a:30:42:2d:31:10:86:68:6f:59:2c:ce:57:cd:ec:
22:97:49:a9:b1:41:fd:60:ed:58:97:06:8f:d7:9f:
81:55:f9:9c:ac:5d:80:40:d8:b2:fa:2f:e2:f3:4b:
18:4d:b3:79:b7:a3:44:17:c3:8d:21:a2:5c:b4:af:
b3:5e:bb:de:1b:b7:50:87:9b:69:ca:da:99:2e:07:
e7:02:a1:db:d0:e5:d9:15:c8:e2:60:b7:55:a3:79:
2a:3b:48:b0:b0:76:b7:a9:01:68:87:36:60:54:f3:
14:47:4d:e1:af:3b:c3:13:33:3f:04:a3:a2:91:c5:
3b:c4:52:f3:50:de:30:cc:d2:f7:51:1e:7b:30:8c:
fb:16:f5:20:83:7f:d2:3d:72:01:e4:90:45:1c:ba:
01:57:b2:fe:87:63:58:0b:ca:e0:57:74:60:ac:fd:
b2:14:13:c6:0d:1a:56:cb:89:e5:0a:d3:93:19:72:
c0:8b:a2:04:e7:64:b3:fb:58:1b:1b:d3:20:05:45:
91:ab:b0:62:f8:04:db:2a:c9:62:49:55:33:3e:21:
60:31:a3:72:0c:4e:02:c9:91:a3:b7:70:3f:00:ff:
6d:8d:2f:12:32:2b:59:d2:83:1f:4f:4a:01:f8:7f:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:7E:04:34:C8:BD:BD:61:02:9F:5E:B7:40:F5:8D:DC:96:A8:C4
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:69:b0:17:34:2f:21:80:03:1c:ea:25:97:76:2c:1c:4d:7d:
29:72:2d:f9:ee:6e:e1:4f:bc:d7:82:9c:9a:c7:a8:f6:d5:3d:
f1:e8:81:ef:1d:31:20:ff:38:1e:4e:72:0f:4b:56:ed:34:99:
b8:fa:88:c4:b0:06:e4:71:a5:44:d8:49:be:d4:f4:a9:76:34:
19:72:e7:6c:6a:57:13:03:fb:1c:f1:cb:c9:e5:ad:9f:da:73:
68:3f:e0:cf:32:a7:4b:18:f5:c9:bc:d1:3a:39:92:a5:d7:8f:
06:df:02:a7:47:68:32:49:fc:f9:c1:bd:fe:82:3f:1e:61:58:
99:33:fc:ce:cd:ff:f6:87:4f:65:25:dc:99:ad:84:ce:cd:fe:
95:b1:a5:71:9a:71:2b:c0:66:86:f7:72:ac:52:e6:9f:2c:74:
c4:17:63:c5:fe:bc:2b:82:ae:af:0f:f4:8f:46:88:f2:7c:23:
f3:f5:56:cb:48:05:74:c8:c6:1b:a3:79:9f:23:75:4f:12:02:
ef:ad:5d:3f:46:37:1a:4a:e8:53:ee:26:2a:c8:1e:c5:d1:98:
cd:b2:77:ea:44:e7:15:89:c9:09:da:a9:19:1d:a7:51:50:45:
7b:41:30:80:6e:10:fe:bd:16:28:0c:f5:63:b5:fd:84:ee:94:
25:cc:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:28 2026 by rpki-client