Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: +Gzdmaa1l0dvf9pBAJ0HsnZ7WuUQnH9vf3OmutNBk+M=
Subject key identifier: 59:95:DE:22:09:4E:50:D4:3F:D0:CA:34:64:F3:DA:E6:98:D6:3A:1B
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019D2704152B28003A0BBA88A3E12879B730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 1151
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: 8ZoZdVzOtGMt/q1O/O4kADZdUjq5K8cR1ljscAincFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:15:2b:28:00:3a:0b:ba:88:a3:e1:28:79:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=5995de22094e50d43fd0ca3464f3dae698d63a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:3a:99:a7:bd:8b:1c:78:26:51:fe:07:34:
ba:27:67:90:ce:48:e4:78:a1:a0:9d:ea:11:09:7b:
ed:07:56:6c:49:fe:ca:51:ec:a0:b6:76:d1:e5:a8:
16:29:db:95:7c:43:26:84:cb:a8:84:7b:a3:ef:93:
3a:77:6e:68:75:ae:ce:69:0d:cb:e9:d2:a7:1a:79:
c4:e7:db:76:d6:20:b4:bb:10:6b:09:92:9f:90:d1:
7b:f7:d7:05:49:7e:e9:79:bc:d8:d7:1a:e0:69:e4:
50:87:c7:bc:63:51:7f:df:49:b3:b0:f5:ce:a7:ad:
28:bf:9b:b2:8f:45:88:59:73:ee:7a:51:0b:31:1d:
54:dd:7c:8e:d7:c8:ac:48:3d:8a:f7:34:b3:ce:de:
d3:ee:c7:d9:97:f2:34:16:4b:5e:9e:3c:b9:59:67:
69:86:8e:e8:7e:25:cb:93:2a:20:e8:47:eb:15:aa:
eb:30:0b:ca:13:fd:ff:ab:b7:bb:36:aa:67:ea:b8:
75:b2:42:20:d2:ad:28:a0:63:e4:a1:5b:bf:85:9e:
b2:1e:c0:65:cc:c2:be:10:95:a4:25:40:e9:e0:12:
3d:b2:fb:6a:32:5d:dc:15:67:ec:93:cb:a6:c4:ea:
ed:56:24:90:24:4d:57:54:f5:38:60:e4:8b:aa:fc:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:DE:22:09:4E:50:D4:3F:D0:CA:34:64:F3:DA:E6:98:D6:3A:1B
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:16:44:c1:b7:83:66:58:36:34:0c:4d:14:dd:07:d4:86:
5d:9f:16:44:6e:0d:e2:54:be:9a:e5:df:12:68:3c:af:e9:f6:
ea:67:5c:14:3d:2e:07:8a:68:c3:6f:79:b5:69:01:28:f1:2c:
f5:44:5a:76:8a:e1:d9:77:2c:ad:f9:16:6d:72:5e:43:3b:7e:
e5:08:12:bb:c0:39:e1:d2:30:de:2e:04:e6:34:d5:50:9b:53:
cb:29:62:62:33:fe:dd:f0:17:77:02:11:7b:1b:c5:7f:14:cb:
14:55:df:60:2a:05:c3:02:e3:79:ae:e9:a8:c4:39:60:29:67:
3f:97:4a:b9:83:be:20:a8:14:4d:34:b8:2e:85:fd:24:29:6c:
e0:3d:2a:89:36:e5:c7:98:f6:73:f7:a6:37:a9:19:1d:99:c9:
41:06:c9:7a:1c:1a:38:c0:74:8e:37:4e:b9:77:0b:0e:1f:91:
8b:fb:71:e4:05:fe:88:6e:12:5b:77:f8:f6:62:25:29:3d:2b:
4b:7e:9e:77:d5:e1:6d:35:5c:9e:e5:70:6e:da:bd:40:5d:f4:
47:42:da:0e:b3:27:41:fa:81:f6:a9:fb:4b:70:e7:8e:44:17:
04:1a:30:a5:61:2e:08:df:4d:39:16:69:c7:25:d0:ee:09:a0:
3d:ae:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:04 2026 by rpki-client