Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: RbvMHS7hmi/c9LOoNYsD4IrbmMQs0nd77hgWl89MgtQ=
Subject key identifier: 0C:68:61:3E:9E:50:F3:85:34:60:12:B6:10:49:F7:3C:EE:E9:9D:49
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 019D26CD8DC6F5CFA7E108A2DE6AECCBDB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: 9gGSBVdoMqiDjRpMvCx2xmyD74c.roa (hash: NKCr7+PeOZuiE60zEjyMYDN68eBiZ4Wy2UIX8ZkkZo4=)
2: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: p14W8jP5CzL2+rYJG35reZlOM8uEzpQltpX3829c6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8d:c6:f5:cf:a7:e1:08:a2:de:6a:ec:cb:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=0c68613e9e50f385346012b61049f73ceee99d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:e5:3f:6c:e9:65:b5:31:8d:74:b3:7f:30:
ab:e9:42:ab:ac:3e:44:7f:e6:37:f2:5d:bf:ab:30:
59:8d:b1:a5:70:ae:6e:5b:3c:87:67:78:ec:b2:7a:
6e:eb:57:5c:ee:e6:c6:d7:d4:0b:06:2a:72:a7:e1:
9e:ec:6d:50:32:a9:9f:bb:94:70:0b:8c:ad:6c:b1:
b4:f2:0c:d6:8e:0d:00:ca:25:bd:55:c0:99:5b:bb:
f5:02:a7:f5:fd:b6:2d:59:3c:60:15:7c:be:37:70:
0e:a3:d4:01:37:14:60:1b:ed:bf:6d:1c:5c:38:77:
66:62:70:72:ae:4b:4e:fb:fd:88:3c:8d:ce:5b:2b:
32:bb:a7:3e:f6:cf:67:b5:bf:b6:96:c0:42:95:c0:
bc:f8:ee:d5:17:70:59:e7:eb:2a:76:5f:a3:4c:2f:
75:bf:82:dd:d0:cd:88:3b:a3:67:25:7d:a0:81:90:
67:ef:46:99:1a:d1:d0:67:b3:59:69:26:58:37:90:
bc:93:9e:81:f0:ec:82:00:28:47:68:ca:96:84:ad:
d7:35:9e:76:22:5e:9e:4a:ef:75:ef:84:2b:cc:ce:
8f:38:05:17:e0:04:1b:33:00:36:48:7d:c2:a7:42:
20:93:0d:3b:8a:95:4c:eb:a9:37:95:eb:f5:26:e3:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:61:3E:9E:50:F3:85:34:60:12:B6:10:49:F7:3C:EE:E9:9D:49
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:cf:c4:90:e5:c2:62:88:3c:63:31:68:85:ae:f3:fe:e1:
5c:19:75:7d:20:d7:93:b3:c0:1b:f9:26:86:49:5c:8b:b2:de:
b2:6a:02:c9:bf:1b:55:a7:c8:a7:90:f2:25:7b:1f:fc:3e:78:
af:c9:8e:6b:07:99:4d:ad:ba:cf:48:b2:63:06:7a:35:4a:ee:
e2:18:45:19:e8:fc:bf:5b:21:9e:a2:01:98:b4:ae:a9:dc:32:
4b:b2:cb:c4:8f:92:7b:08:fd:b9:ed:1c:43:7e:f3:d5:37:32:
54:a1:3e:83:65:e8:fe:73:93:9d:99:68:49:0e:8c:43:07:8c:
55:49:80:fd:0e:27:5d:42:86:c0:2d:8f:6b:37:c4:8b:19:2a:
66:93:65:21:c4:ec:b9:0d:0d:fa:04:75:24:1e:4b:5e:25:b8:
96:97:91:4e:4a:6c:02:e5:72:a0:9d:93:35:a1:09:72:41:dc:
e0:1e:d5:16:6f:87:79:c0:b5:9d:20:d6:93:38:cf:d7:9f:6d:
f3:a0:b1:f7:36:25:d3:13:9d:cf:f2:c6:5c:85:77:1e:51:61:
12:c9:c2:1e:ba:f2:3a:38:60:36:5b:b0:d8:d9:74:02:df:c8:
76:4e:9a:de:53:d5:de:d8:35:a4:12:4a:c7:21:ca:88:8d:3d:
d0:ab:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:44:34 2026 by rpki-client