Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: 8IOCP/FYU6zDEbgeUFPUK8EVRw9oS3a2RipHleFFIhY=
Subject key identifier: A0:AD:42:C7:86:16:E4:D2:D6:81:34:84:8F:F2:5D:6C:40:0D:59:E7
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019D281707D98FFD0EC94C7B97DE7F334DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0F13
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: /JwVDs1K6qJTaDuzkNCgux9/SnskMmIBX7BL3BT7Qns=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:07:d9:8f:fd:0e:c9:4c:7b:97:de:7f:33:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=a0ad42c78616e4d2d68134848ff25d6c400d59e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:72:ca:14:0b:06:ce:ec:75:0b:a8:a1:42:
07:e4:52:23:c5:11:a1:30:81:2d:4e:b3:ea:a8:34:
9a:bb:44:14:bc:9b:c3:61:07:29:6a:fc:74:56:39:
ce:32:2b:60:d1:32:c9:57:0b:21:14:ec:c9:58:24:
b4:9d:cb:98:68:61:5c:11:57:b8:62:d3:9e:eb:44:
13:58:3c:97:d7:ee:94:49:0a:26:73:4e:84:00:f4:
43:0a:f1:7b:02:b5:4d:f4:f8:91:05:76:88:ee:a6:
b4:47:39:50:d3:68:4b:89:3d:be:ab:f1:6d:78:c1:
5b:96:f4:4c:b7:9e:26:63:be:85:3b:dd:92:10:b9:
fb:2e:c0:8a:6d:86:a0:30:94:f6:c5:b0:e6:17:59:
43:02:49:8f:80:e4:64:8b:9e:a3:12:f5:39:28:fe:
01:83:eb:39:0f:bf:46:9b:88:e8:fe:68:56:a4:b8:
68:10:de:b8:45:46:85:74:71:b7:7f:6e:0c:96:b7:
73:6e:6c:ef:14:6b:9d:46:4a:cf:fb:6a:6f:12:cf:
c7:0b:91:8c:6b:68:69:99:a2:e1:37:76:4e:ae:d7:
b5:a0:99:71:a7:92:f1:ed:45:19:48:6e:6d:d8:cd:
49:0e:77:02:5a:3e:89:0d:af:ca:d7:21:be:a1:25:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AD:42:C7:86:16:E4:D2:D6:81:34:84:8F:F2:5D:6C:40:0D:59:E7
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:ac:8f:d6:ba:ff:72:b6:af:ad:02:69:b0:6c:f5:2f:6e:
fd:e8:3a:2a:20:23:ce:3e:52:f2:79:4f:69:55:03:c2:f2:cd:
8a:59:9f:83:06:28:7a:67:dc:9a:aa:0b:78:46:99:ac:07:c0:
3d:66:dd:74:24:4f:d9:9a:a0:e5:37:15:d7:74:70:39:83:a7:
66:22:75:dd:1e:d3:32:50:0e:68:26:ba:8a:33:8e:f2:c9:1f:
7c:0a:76:5d:8c:a8:1a:83:ba:cf:d3:40:7b:23:8b:27:9c:9d:
fc:03:5b:2a:89:e3:d7:eb:1a:80:69:9a:30:05:97:49:02:19:
d4:6c:ac:46:c1:59:de:75:0d:e2:f3:90:92:fb:af:f4:61:b8:
2e:4f:bf:ee:58:13:41:6b:61:e6:43:a3:65:d9:1a:ec:b0:02:
4b:af:c6:d5:fa:0b:56:87:16:a9:2f:29:e2:f2:df:4f:17:22:
3b:42:d2:22:67:d8:05:e5:14:1f:d7:98:71:71:50:93:8f:de:
bb:82:51:70:68:7d:de:aa:80:13:8a:58:f3:da:2b:93:92:70:
d0:26:6b:27:17:8a:da:65:6b:5a:ed:6d:30:af:43:72:73:09:
d6:94:de:1c:cf:9c:83:0c:69:0d:a2:55:99:08:01:ab:9f:77:
9a:55:df:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFwfZj/0OyUx7l95/M026MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex
MmQ3YWIwHhcNMjYwMzI2MDMwMTMwWhcNMjYwMzI3MDMwMTMwWjAzMTEwLwYDVQQD
EyhhMGFkNDJjNzg2MTZlNGQyZDY4MTM0ODQ4ZmYyNWQ2YzQwMGQ1OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1dyyhQLBs7sdQuooUIH5FIjxRGh
MIEtTrPqqDSau0QUvJvDYQcpavx0VjnOMitg0TLJVwshFOzJWCS0ncuYaGFcEVe4
YtOe60QTWDyX1+6USQomc06EAPRDCvF7ArVN9PiRBXaI7qa0RzlQ02hLiT2+q/Ft
eMFblvRMt54mY76FO92SELn7LsCKbYagMJT2xbDmF1lDAkmPgORki56jEvU5KP4B
g+s5D79Gm4jo/mhWpLhoEN64RUaFdHG3f24MlrdzbmzvFGudRkrP+2pvEs/HC5GM
a2hpmaLhN3ZOrte1oJlxp5Lx7UUZSG5t2M1JDncCWj6JDa/K1yG+oSW4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCtQseGFuTS1oE0hI/yXWxADVnnMB8GA1UdIwQY
MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt
NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1
LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrqsj9a6
/3K2r60CabBs9S9u/eg6KiAjzj5S8nlPaVUDwvLNilmfgwYoemfcmqoLeEaZrAfA
PWbddCRP2Zqg5TcV13RwOYOnZiJ13R7TMlAOaCa6ijOO8skffAp2XYyoGoO6z9NA
eyOLJ5yd/ANbKonj1+sagGmaMAWXSQIZ1GysRsFZ3nUN4vOQkvuv9GG4Lk+/7lgT
QWth5kOjZdka7LACS6/G1foLVocWqS8p4vLfTxciO0LSImfYBeUUH9eYcXFQk4/e
u4JRcGh93qqAE4pY89ork5Jw0CZrJxeK2mVrWu1tMK9DcnMJ1pTeHM+cgwxpDaJV
mQgBq593mlXfpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:00 2026 by rpki-client