Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: O2TQfrWkM3/2Jnqs+sm8ioGv5PZKKo9KveNpW5BjxkE=
Subject key identifier: EA:C5:56:88:C9:D9:88:74:A4:25:AE:AE:C1:2C:34:C0:D1:0B:3C:39
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 019D27A8F0EB1A838832899E194C147C20D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: Sp4g6nY89phj8q6FF33E2JH3Zf9HPR4lHgq4DYJJBEg=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f0:eb:1a:83:88:32:89:9e:19:4c:14:7c:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=eac55688c9d98874a425aeaec12c34c0d10b3c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:66:fc:98:26:23:26:ac:98:95:6d:c5:1b:
5d:09:df:42:51:0b:f3:2d:1b:6f:63:f9:bf:a9:99:
ed:a1:55:fd:4d:4f:d0:8d:03:94:16:99:aa:42:31:
f7:ae:34:d4:ee:15:ee:93:a9:6f:ea:64:15:5d:5c:
b7:56:32:eb:b5:cf:56:0e:30:88:8f:51:d8:0e:05:
9f:5c:6b:88:2e:e6:ab:5a:e0:cd:c1:5b:3f:52:d0:
18:a2:38:47:76:79:9b:83:f5:f8:93:d4:69:31:a3:
30:d2:a0:14:72:19:d6:e7:5f:4a:8c:2f:05:6f:68:
f7:a5:f3:52:8c:64:bb:35:a9:c6:98:9a:1e:2d:9e:
5d:ac:49:02:18:62:84:24:b4:23:e6:1c:25:1e:38:
1e:90:c8:cb:4f:87:d8:34:70:bb:ab:12:66:3e:8a:
44:3f:7c:86:df:7e:a1:17:f7:1a:b4:c0:30:ed:9c:
27:29:82:12:ed:c1:ce:1c:da:e9:9d:cb:8e:ae:40:
1a:be:8e:71:14:97:b0:87:a3:b9:db:7a:e9:f0:ae:
8a:0c:57:ba:12:9c:43:e9:e3:ec:8c:46:e1:a7:4f:
8d:0c:31:0c:fb:4a:83:39:ef:f2:9e:d0:ef:ee:d5:
1a:da:16:88:14:4d:a5:28:15:a9:f9:de:dc:27:6f:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C5:56:88:C9:D9:88:74:A4:25:AE:AE:C1:2C:34:C0:D1:0B:3C:39
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:02:c0:55:c5:df:e9:76:4a:dd:57:c8:36:86:b4:35:30:
3f:ef:f4:be:54:83:9d:91:7b:8b:54:25:19:9c:17:d1:94:64:
ff:d4:d7:11:dc:b0:22:1d:b2:d5:0f:be:71:ad:a7:1a:aa:7d:
76:76:1f:77:8b:f3:e4:87:bf:bb:c2:ea:e8:f7:19:5a:bc:d3:
00:9d:7d:c3:fe:a1:64:66:2f:42:a6:03:f7:2d:d0:34:87:8a:
6c:a9:a0:a6:56:21:a8:e5:a0:cf:d5:52:3f:53:69:d2:f1:89:
7b:bf:25:37:c4:ec:a3:ea:21:a9:ce:fc:fb:f0:b1:33:dc:39:
89:12:a3:71:11:4c:1b:28:50:7f:59:65:ea:37:e7:91:99:97:
37:1c:ae:c8:4f:7e:bd:3d:e8:7e:ef:96:33:06:d7:43:bc:ea:
96:f1:02:d3:8c:4d:15:3f:a7:3b:24:01:45:c1:04:6d:b7:a6:
92:23:7e:84:9b:ed:e1:08:d8:dd:08:5c:9d:bf:0b:6e:2d:e1:
8f:e2:4e:d4:b5:27:80:7d:59:49:1e:00:85:40:1f:3d:f1:3c:
a2:a3:3a:62:b4:a5:ca:ff:62:f7:25:e8:e0:87:20:6c:f0:50:
13:fe:9a:ec:66:23:6a:27:18:c9:0e:06:18:e3:fe:24:1b:de:
18:dc:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:41 2026 by rpki-client