Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: UEmIZgb1oSmrJgJ38M/V/WgQLMhntAGMhI8g+FixWNI=
Subject key identifier: E7:EE:20:40:93:96:E3:B7:02:C1:AF:EA:D1:4D:0A:D5:90:C4:61:BD
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 019D32636AFD3E2D828115532FDEBCEE11E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0CDD
Signing time: Sat 28 Mar 2026 03:01:09 +0000
Manifest this update: Sat 28 Mar 2026 03:01:09 +0000
Manifest next update: Sun 29 Mar 2026 03:01:09 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: qD0+LZAY7Pf6PamQstH22xQwa1qT1V1J1UMCx3AisH8=)
2: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (hash: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:6a:fd:3e:2d:82:81:15:53:2f:de:bc:ee:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Mar 28 03:01:09 2026 GMT
Not After : Mar 29 03:01:09 2026 GMT
Subject: CN=e7ee20409396e3b702c1afead14d0ad590c461bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bb:5a:c0:a6:c7:fd:0c:16:b9:55:c3:2b:63:
5c:45:04:05:fa:8a:73:35:fa:e0:cf:34:a4:65:2b:
35:5c:08:d6:f3:25:ab:73:a7:dd:27:75:f9:df:dc:
cc:0b:95:5e:32:aa:ce:7a:3d:86:6c:ec:8e:f2:8e:
bc:19:17:e8:75:79:28:26:7a:39:cc:21:e6:ab:be:
65:b8:56:f2:f2:59:03:04:f9:77:c5:f8:c7:53:9f:
ae:90:42:99:32:36:2f:1f:4b:d3:04:59:39:62:08:
71:a7:05:ec:ef:d5:5b:d3:87:b2:95:b3:0c:de:07:
77:3a:27:c5:a3:27:70:a7:11:da:4e:f7:3f:38:0f:
89:46:e2:8d:30:5c:ca:27:11:85:b9:90:cb:c6:8a:
9c:27:51:37:f4:a7:29:83:f0:67:b3:bc:af:05:d2:
da:59:de:b7:89:64:d4:5d:4e:8f:66:7d:27:be:09:
21:d0:36:65:25:49:fb:ad:2d:43:53:b6:7e:e0:c0:
c9:e5:b3:09:c7:93:60:4a:3a:30:20:79:48:b2:6e:
43:bf:dc:dd:ae:ba:ef:36:15:74:34:3e:88:00:75:
1d:37:c4:75:5d:71:67:ac:f1:4e:2c:8f:91:b8:eb:
de:75:06:77:3b:6b:ac:b4:41:bc:53:b9:8a:bc:1b:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:20:40:93:96:E3:B7:02:C1:AF:EA:D1:4D:0A:D5:90:C4:61:BD
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:12:bc:a4:a8:de:fc:8f:01:4d:a5:73:10:82:3f:e3:a1:61:
0c:eb:38:75:3d:ab:f9:0d:02:88:99:1c:0c:fd:75:02:07:44:
31:a9:42:ed:f9:54:12:82:03:10:1e:54:45:e4:74:2c:75:dd:
4d:6d:5e:64:67:f7:ab:34:74:3e:f1:84:b9:e9:f4:e4:2d:69:
0a:1a:64:5c:b5:9c:97:5f:32:11:9c:cc:18:8b:05:14:24:ab:
3f:17:2f:01:cb:dd:f0:5c:8c:fc:82:2c:63:54:a3:15:54:66:
a2:5e:cf:f7:a2:a4:9f:fd:29:a1:a7:62:80:28:43:ff:a1:65:
0d:9b:2b:e3:3d:57:ae:77:ca:5f:81:f5:e9:f5:75:88:2d:a3:
50:0e:4b:60:c7:c1:e7:ed:28:41:b0:39:42:ba:1c:60:5f:a9:
92:10:0b:8b:1a:6f:f6:70:eb:13:32:f9:c6:37:d8:ac:ef:2f:
a1:24:77:39:65:b6:00:fe:c1:d6:87:c8:41:d1:ec:7b:40:db:
ca:a2:51:5c:0b:2a:16:b0:19:6f:4c:5d:43:a4:21:5a:62:5b:
fc:a2:4a:0a:a6:a3:ce:68:0a:01:96:34:d1:4b:b7:45:93:31:
7e:85:0b:24:03:f0:a4:a0:60:27:fa:b9:94:6d:ea:6b:9b:39:
cd:18:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:43 2026 by rpki-client