Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: MRA5jCE4HifWNhErM9kDd6onkSuEbrCTrH2NQeIYzG4=
Subject key identifier: 29:68:D2:F9:B0:6C:7C:C3:DF:BB:6B:12:D9:C8:2A:00:43:7D:6A:AA
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019D27DF881ACA241BDBEA1EA2FB9DAFD672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 13C9
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: NuBEoj5fZis5djTtXUAG3H1ZbLk8fqRV19s7SNZlna0=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:88:1a:ca:24:1b:db:ea:1e:a2:fb:9d:af:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=2968d2f9b06c7cc3dfbb6b12d9c82a00437d6aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:e3:c3:6c:61:ea:f9:79:60:8c:9f:69:9d:
c7:34:20:ed:9c:8b:ce:18:39:13:d2:77:12:44:9d:
f8:e4:02:c6:81:83:70:9a:aa:22:0f:dd:a3:d3:29:
ad:66:04:46:65:b4:06:3c:ce:f9:30:8b:26:35:e9:
91:fb:34:b6:ec:f7:09:6e:d7:89:8a:4c:3d:2e:1e:
81:70:30:a4:61:b1:46:e9:3a:03:02:24:d0:53:11:
16:3a:82:72:d2:a3:d5:b9:fa:91:d4:15:91:e2:11:
1b:2e:de:08:83:49:69:dd:90:b4:44:2b:22:d3:e0:
3b:da:86:78:fc:ef:cc:c2:1a:3b:9e:f5:d7:bd:2f:
86:0e:13:5f:d5:17:a9:02:7e:e3:77:3c:bf:7f:34:
4d:08:e7:8d:91:3a:84:fa:19:d0:0a:c8:2c:4a:78:
e9:90:34:ea:19:3c:e1:0e:3d:26:b2:98:3c:47:1f:
70:8e:49:20:b0:48:f6:ae:c8:60:a8:01:e2:39:b1:
0c:19:63:14:5e:42:60:a8:7c:31:c9:89:dd:5d:52:
f6:55:56:cf:34:30:ef:ed:b7:63:d4:07:a5:90:c5:
88:46:04:52:4c:ce:bb:6c:68:8d:98:a0:20:c2:34:
4d:54:1b:e8:b9:4e:64:78:47:b4:25:00:fd:f6:32:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:D2:F9:B0:6C:7C:C3:DF:BB:6B:12:D9:C8:2A:00:43:7D:6A:AA
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:97:4c:21:90:0a:a1:5f:4c:76:76:bb:87:d9:9b:8d:d1:
75:c5:d8:24:15:2f:dc:95:d4:d2:c3:6b:1e:d9:90:a9:39:86:
ea:3c:b5:36:a3:82:17:b2:f0:79:c2:31:85:27:a4:08:21:84:
59:3c:d5:f7:a4:d2:d2:a4:e4:5d:51:0d:01:69:4e:2c:14:cc:
ee:ee:dd:d0:9d:cb:3a:aa:6d:d5:18:bb:13:4f:de:27:d6:ec:
c3:3e:24:d7:6e:29:b7:cd:b6:bb:70:52:51:48:f8:c2:56:48:
97:1e:41:79:79:cd:cc:0f:af:72:02:ad:9a:93:0e:d6:3d:02:
9d:29:8a:ab:7b:9f:37:e3:fe:f6:bb:1d:51:cd:44:02:0e:c5:
05:13:e6:80:01:55:a8:f9:31:42:b1:33:b5:3a:a8:bd:fb:8a:
d1:aa:44:b6:fc:44:4e:ef:a8:93:c7:70:99:49:c0:74:b0:47:
c4:bd:20:5d:81:bc:9b:75:1f:67:3d:3a:96:6e:1d:3a:46:0e:
18:1e:7d:5d:42:9f:00:88:9d:f1:3e:d6:40:53:cf:ee:9e:1e:
db:6f:db:0d:88:91:b5:86:d2:e9:52:48:c8:13:f9:c2:8d:89:
e9:67:21:f8:c1:43:3a:5f:ea:d9:30:8e:c9:1f:2e:cb:32:37:
11:e9:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:55 2026 by rpki-client