Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: 4rgfhiaReT1pNbtDuxm/wuwfIFayiq2PHdW2ZXzoA2Y=
Subject key identifier: 43:87:51:C6:DC:DF:E8:D8:9E:9D:A3:99:4D:5E:81:FE:4C:4B:97:D5
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019E1D236F41AF96CC2D323905069E69618A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 1448
Signing time: Tue 12 May 2026 17:02:01 +0000
Manifest this update: Tue 12 May 2026 17:02:01 +0000
Manifest next update: Wed 13 May 2026 17:02:01 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: k5dY4387C/7ls0FbvdhCDXnMCI28XFrAn8zqv/PpZ3s=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:6f:41:af:96:cc:2d:32:39:05:06:9e:69:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: May 12 17:02:01 2026 GMT
Not After : May 13 17:02:01 2026 GMT
Subject: CN=438751c6dcdfe8d89e9da3994d5e81fe4c4b97d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:35:91:9e:99:f4:1f:e4:49:d6:f5:be:03:
b8:17:7d:1a:be:d0:d0:35:68:4a:c4:b9:c5:49:a1:
92:0b:1f:e1:95:ce:43:98:5a:e2:9e:b1:46:30:6b:
7f:4e:d3:c2:f8:ea:2e:7e:23:7a:6a:c1:39:ba:cc:
92:6c:6b:8f:71:18:cd:97:b1:ba:b6:f4:94:a5:3f:
95:11:13:5a:85:01:08:9b:ab:71:17:69:ae:6f:33:
ef:de:ea:0f:16:f7:df:e0:dc:40:e3:92:dd:66:88:
60:b5:54:44:b4:b8:6d:89:50:11:73:a0:f2:51:29:
36:91:f1:cd:3c:9d:4f:40:a8:87:e6:89:d9:eb:91:
c9:b7:e3:b2:e4:61:d7:3b:e4:d4:4c:a4:8f:b0:f3:
b3:ba:aa:fe:53:89:80:80:29:08:c5:0a:be:fa:67:
be:61:16:21:91:d2:73:bc:25:9e:5d:0e:96:35:70:
bd:1c:71:5f:75:73:12:16:d7:b2:36:2c:ce:34:97:
a4:5f:a3:8d:cd:9a:b0:a1:8e:c4:84:3d:55:bb:b3:
58:87:b0:10:ec:a0:6c:b5:08:fe:ca:fb:cc:a3:d7:
92:18:6b:8f:99:e0:b9:d3:ef:e5:42:54:6e:40:c7:
d7:bb:cc:2a:1a:96:9a:77:39:f5:6a:53:75:f2:8a:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:51:C6:DC:DF:E8:D8:9E:9D:A3:99:4D:5E:81:FE:4C:4B:97:D5
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:bf:6f:49:1c:d3:c0:17:d6:cc:51:f9:8e:c1:6a:ff:15:
e7:46:5f:a2:c7:db:eb:89:00:1f:ac:af:a8:a3:0e:54:b4:1a:
a6:6f:7f:f0:63:df:ac:f3:25:70:7b:da:05:39:80:34:e4:ba:
f8:b1:aa:15:5e:d8:0a:68:4c:d8:a4:9c:16:bb:c5:9d:3e:12:
bd:9d:e8:45:95:6c:e5:41:cc:72:c1:07:42:97:08:de:aa:9d:
38:90:62:80:aa:95:6c:96:02:4d:61:92:19:95:c9:27:19:be:
02:89:35:30:eb:5b:3c:db:30:ea:37:b1:52:ae:3f:e8:80:6e:
7a:77:d0:6b:39:c8:3b:ee:68:b7:d2:59:fb:c7:5f:ff:2f:7a:
85:cd:e7:80:14:bd:ef:89:d6:55:57:4f:ed:3d:79:ae:e4:4f:
58:dd:9f:eb:10:6d:92:71:ec:d3:93:67:bb:9a:0a:5e:b6:eb:
ab:2c:cc:c9:53:2a:52:f7:6e:e5:e7:50:2e:79:70:53:cf:eb:
60:96:cb:1a:ff:dd:e0:52:f5:7c:f9:bc:45:11:97:2d:cc:dd:
08:ba:19:8e:aa:03:55:6b:69:cc:a7:d0:44:70:83:50:40:cb:
b9:cb:d1:04:f1:91:34:19:6f:50:14:5f:b7:a7:7e:6e:ce:05:
f2:c4:47:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dI29Br5bMLTI5BQaeaWGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj
MTMyNDAwHhcNMjYwNTEyMTcwMjAxWhcNMjYwNTEzMTcwMjAxWjAzMTEwLwYDVQQD
Eyg0Mzg3NTFjNmRjZGZlOGQ4OWU5ZGEzOTk0ZDVlODFmZTRjNGI5N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPA1kZ6Z9B/kSdb1vgO4F30avtDQ
NWhKxLnFSaGSCx/hlc5DmFrinrFGMGt/TtPC+OoufiN6asE5usySbGuPcRjNl7G6
tvSUpT+VERNahQEIm6txF2mubzPv3uoPFvff4NxA45LdZohgtVREtLhtiVARc6Dy
USk2kfHNPJ1PQKiH5onZ65HJt+Oy5GHXO+TUTKSPsPOzuqr+U4mAgCkIxQq++me+
YRYhkdJzvCWeXQ6WNXC9HHFfdXMSFteyNizONJekX6ONzZqwoY7EhD1Vu7NYh7AQ
7KBstQj+yvvMo9eSGGuPmeC50+/lQlRuQMfXu8wqGpaadzn1alN18orwaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOHUcbc3+jYnp2jmU1egf5MS5fVMB8GA1UdIwQY
MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt
YTlmYWY2YTI2NDI2LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2
LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6e/b0kc
08AX1sxR+Y7Bav8V50Zfosfb64kAH6yvqKMOVLQapm9/8GPfrPMlcHvaBTmANOS6
+LGqFV7YCmhM2KScFrvFnT4SvZ3oRZVs5UHMcsEHQpcI3qqdOJBigKqVbJYCTWGS
GZXJJxm+Aok1MOtbPNsw6jexUq4/6IBuenfQaznIO+5ot9JZ+8df/y96hc3ngBS9
74nWVVdP7T15ruRPWN2f6xBtknHs05Nnu5oKXrbrqyzMyVMqUvdu5edQLnlwU8/r
YJbLGv/d4FL1fPm8RRGXLczdCLoZjqoDVWtpzKfQRHCDUEDLucvRBPGRNBlvUBRf
t6d+bs4F8sRHCg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:02:15 2026 by rpki-client