Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: nhjl5ZuBlZBjcDJNP0DVPlPstaTJtTymvxzaBoxaxlI=
Subject key identifier: 0C:3B:FD:9B:F5:E5:6A:4E:FD:49:6A:6E:48:CB:68:BB:84:D5:33:C6
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019D2695B6D904B632E79F8177D8E203AC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 02F1
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: 4diahVLzyWADsafzMMkqiTBhFG0.roa (hash: riwko2/K4Xljlw5gsbraTspcz3PMLisMleLPiCJZSh0=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: p7sbRiTTZsnpQ8VKhHL/1re0x7v7nvR2qYpCWJxiV88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:b6:d9:04:b6:32:e7:9f:81:77:d8:e2:03:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=0c3bfd9bf5e56a4efd496a6e48cb68bb84d533c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:6e:5d:ee:64:9f:e7:d4:a3:5b:89:41:3d:
8b:96:ec:cf:08:16:79:38:7a:4a:0d:df:33:d9:12:
a1:4d:aa:ef:69:8b:d5:de:7e:ab:3e:84:91:a5:70:
b5:42:09:a0:0d:b3:89:0e:92:e9:f2:98:80:88:f5:
da:0f:e7:a0:1f:8d:95:51:ce:1f:49:21:3f:d0:d8:
40:65:d9:0b:d7:42:c6:a0:f2:b9:d5:71:5b:c8:f2:
9d:b7:52:47:ad:98:76:d1:1c:f7:da:47:96:f5:0e:
a7:07:89:7b:4f:18:cd:1b:90:f3:be:f9:11:09:de:
df:71:86:a1:d0:29:df:08:88:19:3b:2a:86:ca:56:
c6:93:f4:29:05:c9:20:c0:86:5c:f7:d2:14:4a:17:
3b:7d:f0:c8:a2:a1:ec:91:1f:79:64:04:a7:b4:6e:
81:c3:3a:97:2d:69:2e:24:d0:a2:de:6b:88:ae:5f:
8b:3c:1e:6a:2e:08:45:29:d2:c8:54:26:f4:9e:d0:
36:92:00:f0:ee:ef:83:26:66:be:01:dd:bf:34:45:
23:fa:62:8e:a0:e6:5c:da:96:80:da:cc:39:50:e3:
54:89:ee:18:04:f2:99:ed:f1:56:33:5a:45:dc:97:
6d:cc:06:a7:94:20:56:2a:61:9d:03:28:97:c2:3b:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3B:FD:9B:F5:E5:6A:4E:FD:49:6A:6E:48:CB:68:BB:84:D5:33:C6
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e3:6d:57:a7:10:04:35:fb:ed:e2:15:81:d4:1b:c7:22:d1:
be:95:63:ae:ad:54:ff:cc:19:8a:90:73:8c:16:41:46:20:4e:
30:b2:5f:0f:88:36:4d:f7:42:2f:cf:28:77:07:df:f3:0d:19:
10:6a:87:16:ee:c4:b9:c6:66:68:2f:41:02:3f:60:8d:f5:51:
bc:e9:8c:30:af:31:4a:20:45:72:92:86:49:ec:ec:88:40:a2:
06:3d:67:f1:d4:9f:11:df:05:2f:11:c5:0f:b6:2b:a4:c5:62:
13:8f:ab:92:3a:c8:04:4d:16:70:ec:d5:e0:53:34:24:18:82:
57:18:b4:b5:e6:9d:7b:82:e3:5b:47:b7:12:32:90:6c:4f:96:
8f:02:7d:b9:3b:43:b1:ba:64:31:92:e6:a4:5a:3b:80:af:7b:
54:bc:f8:26:39:a0:e9:45:3f:25:14:67:3f:8c:37:6b:3c:f3:
11:65:a7:ca:24:73:a1:19:69:3c:d4:10:11:95:cb:cd:d7:2e:
03:1d:b8:b8:35:da:e5:7c:73:52:9d:da:8d:83:46:61:7d:80:
8e:49:ec:fd:b1:63:f3:5b:a6:4a:e9:5f:e2:ae:2c:5a:41:f5:
cc:f5:0b:42:54:c6:63:47:ac:39:3c:ff:bb:f2:18:ce:6d:b7:
8e:32:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:22 2026 by rpki-client