Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: DoB6JZCheXdBP4jw+lqmlfHTc18J1L8ruimDjYsxtxM=
Subject key identifier: C1:F1:6A:7F:05:5A:2D:E4:0D:B5:6B:31:B2:8D:95:E2:28:46:4A:8A
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 019D27E0370F198807F1A552413D6A51A00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 1109
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: tZQiLtEKjVPAjCz/KpPdlvfDWPyoQiaM6o0D0MfY3Fw=)
2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:37:0f:19:88:07:f1:a5:52:41:3d:6a:51:a0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=c1f16a7f055a2de40db56b31b28d95e228464a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:25:fa:89:53:6d:2e:5e:11:f3:1f:4b:7f:
93:91:6e:b5:c0:36:2c:d7:d2:04:5a:70:b0:82:d7:
7c:94:bf:91:ba:b9:c7:b3:d4:44:68:26:55:44:0e:
a7:54:6d:bc:4f:0b:9d:16:c3:38:3e:db:01:b3:f6:
93:74:dc:62:05:6e:e4:03:cc:f8:d5:fb:1f:a3:ee:
21:96:85:b2:4f:69:0d:27:ac:19:b4:71:e0:bd:98:
91:eb:89:22:04:a4:5f:4f:d7:e8:32:44:82:d2:55:
df:0a:36:4d:fb:4a:fa:dd:00:e3:5c:1c:11:76:b4:
d4:4e:f4:d4:b4:f4:a3:18:d7:1f:a8:5e:10:15:b1:
6a:26:61:3c:c7:14:a6:49:b3:87:f7:fd:c4:5f:c0:
78:f8:46:1a:98:32:b1:6b:04:6d:70:39:c7:84:45:
3a:32:ed:25:8c:69:ed:21:86:97:d7:8e:de:c6:e9:
e0:ea:ff:2d:41:95:ca:3e:d6:46:ce:fd:2f:7a:4f:
d7:6e:cc:ed:3f:ee:03:85:a5:67:bc:09:cd:d5:39:
c5:6f:68:9c:cf:50:19:48:9e:6f:d0:df:ad:72:ed:
a9:89:06:eb:83:43:b5:81:1a:c0:ed:fe:ee:4d:94:
8c:d6:54:d3:a6:88:9c:13:5a:a4:42:58:b7:89:4a:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:6A:7F:05:5A:2D:E4:0D:B5:6B:31:B2:8D:95:E2:28:46:4A:8A
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:6e:0e:60:5a:a0:d2:db:9f:5c:26:44:11:42:28:ce:c2:
1f:31:6a:8a:ee:46:c3:6e:ff:90:fd:41:12:94:03:bb:80:2e:
6a:e6:83:f6:fa:c9:70:2b:5b:90:6f:3b:57:0a:a5:96:fa:7c:
d0:95:d2:a7:8a:ae:dd:a0:7c:1b:eb:df:ca:2d:5a:67:41:1b:
42:ce:1f:1a:c6:83:3c:3f:ea:5e:43:51:4c:c1:23:6b:eb:3d:
1f:fc:98:75:8e:a1:e4:43:cd:ee:b8:d0:d8:19:e9:46:dd:3c:
21:86:38:f7:18:ce:66:78:f3:84:01:fc:25:c9:0d:21:71:c6:
3a:49:4d:57:b7:96:44:86:b3:b0:68:c6:0c:45:f9:b3:18:63:
4e:fc:73:24:62:98:3a:82:37:b1:1d:36:51:7d:86:12:9c:60:
58:f6:01:c5:8a:84:d5:84:00:3f:90:e3:6c:44:6f:1a:9a:8d:
14:7a:c7:81:ab:03:18:19:ae:50:00:cc:85:bf:ad:df:cb:43:
4a:ef:d8:72:d3:2c:b3:46:13:f0:6b:71:22:25:ac:7a:04:6a:
35:68:df:28:84:b7:59:ba:2d:63:e6:7f:cb:ee:14:93:d3:18:
37:cb:e2:2d:8e:7e:4b:e6:c1:fb:0c:ec:9a:b1:ea:c5:c1:81:
8e:13:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:31 2026 by rpki-client