Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: YahebEUfnZ49540YHqFW1CODkAHBSsZHlJsvPK9AuiM=
Subject key identifier: 2A:A3:E1:B6:DE:D4:98:4A:36:15:53:1F:10:36:5B:96:9E:3C:4E:A2
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019D284D39A94002D7DC6C7989884D108CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 119E
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: bgpnt5ibenfPpBkC5ed1S0aPSHU.roa (hash: S5fBLUnI7/aLMxt/ortotYg/YTHmJIqk2MiL/kErwvI=)
2: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: Zl63/L4pb7lxCQbuRYFDM/hj4LicE08ea51zFMwEsDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:39:a9:40:02:d7:dc:6c:79:89:88:4d:10:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=2aa3e1b6ded4984a3615531f10365b969e3c4ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:bf:1c:28:67:75:86:41:a8:f1:ef:a4:d7:
f0:92:1f:8a:5f:ef:b9:c9:7e:3b:4b:53:2c:2a:30:
f9:c5:4b:96:0f:cd:e1:26:d3:b1:02:27:e7:87:0f:
75:89:73:2f:2e:6a:03:f7:15:01:4d:84:97:3e:83:
bd:27:52:da:09:49:17:92:06:c1:db:e0:3c:69:ad:
72:0c:8d:20:bb:e2:b4:78:53:d2:7d:27:7b:af:1c:
4c:7c:b4:2f:63:bf:43:09:73:42:19:1d:e1:a3:8a:
b1:e9:71:8d:a5:be:a2:d7:fb:d2:4a:32:71:87:67:
b4:16:3e:2c:ff:d0:32:30:62:64:a3:97:ae:dc:38:
a4:6b:20:5e:d4:7e:a2:76:7f:97:03:f0:e3:0d:1c:
41:60:bd:5e:bc:61:98:de:11:06:92:af:35:20:e4:
90:ea:9f:f0:de:2a:c5:2d:a3:e1:85:45:f0:1c:cc:
a6:09:34:56:68:80:a6:4a:a3:b5:b5:cd:c7:dc:37:
f0:31:75:66:fc:58:5f:9b:ac:eb:cd:05:34:c3:1f:
e8:4b:d1:51:ac:be:22:51:16:c0:66:1e:52:4a:98:
28:ac:38:aa:4a:c4:12:75:64:e6:06:84:21:7a:ef:
7e:2b:37:a2:65:7d:07:22:ae:23:67:3d:67:05:8a:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:E1:B6:DE:D4:98:4A:36:15:53:1F:10:36:5B:96:9E:3C:4E:A2
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6f:85:87:ae:ee:f2:0a:7f:00:42:29:ae:a3:a4:5b:8d:31:
c6:78:98:c3:87:0a:81:4c:61:40:40:85:21:2a:f5:9d:ea:dc:
7d:4b:49:66:16:59:0f:81:1e:fa:06:f6:86:38:d1:2c:23:99:
01:d5:fd:3c:56:31:1a:d7:a7:91:24:f6:64:07:0d:fb:3b:cc:
09:0d:65:78:08:3f:94:94:7a:c2:7a:aa:7e:f1:12:07:1d:17:
cb:7f:fb:cb:f3:9a:24:13:1e:7b:f7:7b:6d:9b:88:60:0e:fd:
43:a2:a1:c7:22:f9:df:c0:06:f3:7d:fb:2a:ff:65:e4:9b:f9:
71:9b:50:9f:2c:19:a1:67:d0:f6:ed:1e:0e:64:be:0f:af:78:
a1:e6:28:2e:47:15:c7:8f:ba:e8:0a:f6:e9:9d:df:89:52:35:
4b:68:2a:ba:85:e4:51:1e:f6:5b:76:47:96:07:c0:43:00:ac:
27:59:95:5d:a4:3f:6b:e9:d7:da:ff:af:fd:a5:db:db:73:8e:
0f:c0:f7:52:8e:17:47:8e:04:17:81:5b:4d:b2:0b:57:53:9c:
ef:ef:cb:0a:51:6c:c9:0c:e0:22:d5:d0:d2:71:f5:98:8e:40:
a6:18:4e:a6:38:d6:24:02:d0:e5:f5:b4:24:ec:b0:0a:01:20:
2c:52:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:53:45 2026 by rpki-client