
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: sgJLu2iLuqIVcSrmCPGqg03e0H5tSNxJrsF98sswiNo=
Subject key identifier: C2:7D:F5:95:EE:5F:07:B7:14:07:56:B1:99:68:F7:01:85:23:0F:EA
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019E1E34E088E9749C6972D1ABBDCF294787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 11D1
Signing time: Tue 12 May 2026 22:00:42 +0000
Manifest this update: Tue 12 May 2026 22:00:42 +0000
Manifest next update: Wed 13 May 2026 22:00:42 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: PSlMLwYzpOE7cADVq1tLwu7jyvbv5W9s9qJqO+zxtFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e0:88:e9:74:9c:69:72:d1:ab:bd:cf:29:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: May 12 22:00:42 2026 GMT
Not After : May 13 22:00:42 2026 GMT
Subject: CN=c27df595ee5f07b7140756b19968f70185230fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:36:7d:d7:30:61:6d:79:4c:46:0c:0c:12:
e8:0b:47:4b:6c:ae:3d:9b:fa:ce:b6:56:36:e9:d5:
c1:1c:2f:1b:a7:94:9b:a3:e0:00:12:5d:1c:96:34:
6a:a2:73:fb:48:82:2a:97:7c:04:ba:6f:8f:98:b2:
bc:00:27:dc:48:56:64:57:93:5b:91:08:d6:c3:a0:
1d:a6:a7:69:87:d4:b0:d4:9a:bb:a2:71:30:66:fc:
1a:61:8e:27:30:84:36:1f:a9:bd:33:e0:4a:81:d1:
0c:8e:e7:7f:b6:98:9d:3d:db:98:64:ca:1e:ee:87:
ed:e8:33:ef:61:77:e0:72:fd:7c:23:3b:3c:3e:53:
2e:97:8a:ff:62:b7:57:c3:c6:72:b7:79:99:bc:dd:
b9:f9:ab:ad:c6:19:50:99:79:f1:bb:6d:2b:70:38:
3d:69:d0:42:8c:e6:92:78:36:d9:15:bc:2e:9a:b8:
e2:e5:c1:5a:73:4c:63:89:97:90:97:84:8a:2a:b0:
74:a7:de:87:fb:14:ec:49:e3:0a:2b:73:69:94:5f:
16:57:33:67:d3:7b:06:01:54:fa:b1:ca:7d:86:9f:
ba:fd:e6:f5:f9:91:67:60:99:b5:60:78:7d:b3:3a:
2e:d4:dd:98:ec:2b:b0:53:29:12:55:69:bd:0f:09:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:F5:95:EE:5F:07:B7:14:07:56:B1:99:68:F7:01:85:23:0F:EA
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:cc:24:ad:7a:11:8a:0a:8d:20:0a:24:41:11:d8:ac:3e:
d0:c8:d8:9a:d3:33:5e:40:25:b5:d0:7d:e3:cf:fa:fb:e9:a0:
44:e1:c9:93:95:db:59:16:f9:75:a9:2f:6c:9c:e2:ba:a1:13:
cc:dc:14:e5:e2:f7:ef:6d:30:89:98:9e:be:62:27:50:9e:37:
5e:0b:c0:d2:a8:73:b3:ac:79:d3:23:ab:f2:34:3c:57:38:c7:
86:35:1a:1c:a2:3a:1e:fb:0d:1a:6f:08:69:48:3e:af:db:1c:
6f:a7:79:e7:b3:02:54:3e:96:9a:45:36:33:5b:a6:a9:56:5f:
11:8c:4d:27:6a:f9:d1:81:74:b8:ca:29:b5:8f:89:96:b9:ff:
ae:ed:c0:32:5c:a8:38:c6:48:a5:4a:26:51:74:35:04:53:68:
11:08:1e:f8:2d:b6:cc:56:bb:81:1a:d5:a9:92:5f:ea:c6:a2:
75:d8:58:fd:01:e4:ef:87:ea:0b:3c:49:46:68:a5:cb:d7:2f:
90:08:03:b1:f0:ef:99:af:6a:f6:52:cb:c6:62:d3:48:0f:15:
4d:fe:54:13:2f:41:2a:b0:cd:86:c2:2a:22:5d:b3:8f:95:80:
d2:c6:71:8a:31:c4:26:8a:50:7a:a1:34:fa:a5:05:da:38:67:
22:a0:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:29 2026 by rpki-client