Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: 1FDatncKWryOS3lsg7AZP8cIR5rNGswq8jroU+OvVto=
Subject key identifier: AB:0C:43:8C:12:B5:83:D9:BB:1C:F0:CA:46:93:98:42:38:73:71:41
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01A0CFA4C9D932394831DF9F3E79CCA774A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 1336
Signing time: Wed 23 Sep 2026 19:01:18 +0000
Manifest this update: Wed 23 Sep 2026 19:01:18 +0000
Manifest next update: Thu 24 Sep 2026 19:01:18 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: tyzg8on76Slr1dWh+6rsFMH5o9Ab9Saj9eBigR/Rv3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:c9:d9:32:39:48:31:df:9f:3e:79:cc:a7:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Sep 23 19:01:18 2026 GMT
Not After : Sep 24 19:01:18 2026 GMT
Subject: CN=ab0c438c12b583d9bb1cf0ca4693984238737141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:07:71:d3:ad:49:bc:ed:c4:40:dc:83:7b:
f3:bb:ec:57:ed:84:6b:56:5f:63:30:7d:ea:15:96:
1b:11:e9:84:29:d9:ae:36:81:14:fc:51:0c:3f:63:
e2:5e:af:00:e5:7d:b5:e8:23:8c:c0:7c:9e:1e:b2:
7f:ce:be:57:51:4a:0a:52:8a:72:3a:4d:8f:cc:d2:
19:25:ac:42:2b:70:ae:38:02:d5:4a:84:cb:f9:45:
6f:2e:70:1c:71:02:f0:94:f6:6f:c5:79:e4:77:75:
1c:3b:30:cd:f5:de:93:dd:ef:a3:d1:3a:84:54:e4:
9e:e8:a5:b3:50:6e:3c:a6:7c:12:0d:3e:65:96:8e:
89:a3:20:8c:82:8f:23:3a:10:70:60:d8:a7:0b:80:
20:bb:43:32:43:cc:ea:73:d6:9b:7d:e5:69:ae:4c:
b6:05:bd:eb:b2:c0:04:54:32:a4:96:40:df:aa:9e:
75:ee:b3:ed:73:28:1e:65:3b:cb:26:e5:d8:a8:e5:
84:d4:a9:0a:ca:b2:ec:d3:eb:96:38:fd:96:14:73:
9e:50:25:a7:41:66:c1:c2:fc:fc:fa:1a:fb:5f:c3:
eb:b4:6d:89:fd:7e:f0:e8:f0:12:d1:7c:39:61:ed:
2a:01:07:21:f2:a3:f5:ad:8b:7c:4d:65:70:9d:30:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:43:8C:12:B5:83:D9:BB:1C:F0:CA:46:93:98:42:38:73:71:41
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:74:88:94:2f:41:06:27:61:36:da:0b:d9:ad:fb:8c:96:
08:dd:2c:8c:e0:08:a0:eb:bc:b0:3e:9d:f6:74:1f:7c:29:82:
9e:99:20:9a:4d:1e:d4:87:b7:36:04:4d:13:60:c8:c7:68:43:
4b:59:d3:1f:60:a0:2e:37:26:6a:d8:43:60:a3:75:21:84:53:
b1:97:1c:3c:63:50:7d:52:71:38:8c:2c:5f:31:12:95:72:6b:
c6:01:0f:ef:d9:29:58:0f:bc:8a:61:a2:55:0b:69:eb:80:a8:
63:78:96:a5:b4:de:ac:6c:69:cd:0b:39:64:1d:41:17:9d:5a:
bc:4d:e6:e7:ed:25:ab:2d:82:63:20:63:84:26:50:4a:9a:2a:
f8:76:b6:b8:bc:c5:a6:cf:f3:6a:45:dd:d4:d9:c6:e7:4e:e6:
50:f6:00:d4:27:ca:11:dd:e0:2f:91:9c:1d:67:a7:47:0f:06:
5a:d6:99:69:46:6f:87:73:4e:79:66:ef:5b:42:ec:a7:c3:0d:
0c:63:e0:00:f7:c8:19:bc:97:cc:3c:2f:c1:4a:05:5c:1b:06:
99:33:08:0f:bf:2d:94:20:ce:57:8b:87:03:77:e0:ac:a7:04:
0d:78:3a:4c:6d:76:ad:58:95:0d:94:db:65:e0:2d:1c:f8:1b:
2f:f1:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:02:31 2026 by rpki-client