Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: PWDTb8EkvYpHTfce6KlApWA2j20obPqWgVhM6yfhEII=
Subject key identifier: 8C:7E:58:80:E4:67:96:4A:76:AA:B1:8F:80:3E:12:2E:85:6A:B1:FA
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019D28F2A4456086A8CF81B27AB5D9938071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0FFA
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: +mrels5S17XlChi+hBzmaZUGAwOkcyQ47v49pPTgY/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a4:45:60:86:a8:cf:81:b2:7a:b5:d9:93:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=8c7e5880e467964a76aab18f803e122e856ab1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:6c:e5:39:5e:02:d1:9f:7e:51:05:f8:7b:
51:80:60:2a:7a:e6:99:a6:77:75:7f:70:20:04:57:
71:34:3f:0f:7b:d4:2f:aa:5f:8d:ab:46:be:db:f8:
b9:f3:be:9f:28:6a:6c:3c:4a:a1:ff:7a:df:9e:03:
b0:19:ef:81:2e:9e:56:1c:94:14:25:2f:32:e0:31:
34:c4:58:b6:1b:8d:74:cf:72:51:8a:a3:f8:e3:92:
98:8e:0d:d6:a5:5f:86:1b:be:21:27:d2:e5:21:ea:
e2:76:31:72:c1:cd:7e:b5:79:85:0c:41:d9:97:83:
86:9a:6b:20:ef:8f:65:11:7d:15:10:0b:dc:db:d7:
32:dc:9d:37:02:37:3f:b5:b6:1f:70:d6:83:42:50:
9e:33:fe:dc:fe:f9:e6:77:23:ea:61:b9:4d:d3:bf:
2b:95:f3:f6:7d:06:ca:ed:33:ee:43:4c:1c:3e:07:
27:de:68:a7:5c:fb:ed:31:a8:82:a9:9e:4f:77:c8:
ae:fb:b7:a3:18:90:00:d9:df:02:6b:aa:ee:82:e8:
9c:75:ed:48:9b:4e:a8:1d:af:2d:56:27:18:3a:fe:
9a:e1:e9:75:0f:3d:7a:d9:46:f0:27:e5:0f:35:95:
db:64:c7:a1:5f:28:c4:ed:df:41:40:8e:75:77:72:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:58:80:E4:67:96:4A:76:AA:B1:8F:80:3E:12:2E:85:6A:B1:FA
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:7f:6c:c3:8c:8c:ba:e1:09:28:45:de:b9:6d:27:a8:2f:
ec:4b:ff:1e:85:cf:3d:60:31:b8:d7:37:ed:bb:7b:13:18:61:
32:32:bc:2d:cf:b2:e6:57:ba:14:ed:8c:8c:84:9b:f1:69:9b:
da:6f:d6:fc:f9:a5:68:73:d1:be:b2:43:b2:a5:d5:96:10:95:
e3:55:e6:39:20:ba:90:d9:ab:f4:33:b0:11:74:34:40:3a:cb:
72:4f:a3:af:58:6b:56:4e:7b:70:4d:63:fb:9e:78:f9:68:56:
cf:06:a2:0e:c2:64:b6:f5:42:a6:e2:06:3b:01:5f:ff:54:68:
23:50:ed:fd:01:a9:87:ba:ee:60:05:52:ba:8e:dc:1f:bf:cd:
f6:65:fe:7c:dc:39:72:08:ef:9e:7f:e7:f2:7f:de:fa:84:e1:
47:e4:b8:f8:02:5f:6b:d0:b9:f5:be:72:c1:de:fc:29:32:dd:
27:f0:19:cd:de:16:2b:20:2f:84:d3:90:d5:f0:eb:cb:07:7b:
92:b3:83:89:9b:40:d5:2a:5c:b9:56:6c:58:24:04:e8:4b:ab:
2a:13:e2:44:bf:2e:43:d0:48:6f:8a:36:ee:33:4f:42:e1:85:
f0:23:ca:49:6f:93:13:7c:d9:d9:f4:52:f1:09:88:36:2b:e1:
e4:88:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:25 2026 by rpki-client