Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: ThUoUdZHcItUwZeVwRJBpnAs6rS8Cr+vlJr692PpdNw=
Subject key identifier: BA:3A:5A:DB:95:01:9C:33:63:7B:A7:AC:CA:E9:D4:7E:2B:F7:88:67
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019E1F7E9E0B6D8E262427BABEEE39121454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 121E
Signing time: Wed 13 May 2026 04:00:51 +0000
Manifest this update: Wed 13 May 2026 04:00:51 +0000
Manifest next update: Thu 14 May 2026 04:00:51 +0000
Files and hashes: 1: bgpnt5ibenfPpBkC5ed1S0aPSHU.roa (hash: S5fBLUnI7/aLMxt/ortotYg/YTHmJIqk2MiL/kErwvI=)
2: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: Ld4AvksTh7wqBoAIKeQjOnGPUswBq6Or6u+Z4YpQJKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:9e:0b:6d:8e:26:24:27:ba:be:ee:39:12:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: May 13 04:00:51 2026 GMT
Not After : May 14 04:00:51 2026 GMT
Subject: CN=ba3a5adb95019c33637ba7accae9d47e2bf78867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:f5:a5:2f:47:6a:2d:c4:37:0b:e3:b5:30:
ac:0f:d8:dd:5b:43:fd:c0:5e:e8:3b:2f:07:cc:10:
e9:79:55:3b:b6:3d:2d:ce:00:60:26:bd:40:34:79:
36:8d:0a:47:80:d6:d7:92:46:58:6f:1a:f1:d9:74:
dd:da:10:0d:ca:9c:60:8b:14:6c:45:c6:36:b4:3a:
32:56:28:81:93:00:3e:f1:67:eb:9c:ff:9e:3f:da:
a7:51:13:4c:f7:33:38:65:8d:f0:37:f9:40:f4:78:
62:5a:d3:41:ca:b4:18:fa:77:d7:68:e9:e5:fd:15:
d3:31:81:2f:62:d3:6d:83:f6:26:8e:36:92:ff:58:
51:24:a2:74:e0:23:8a:e1:0a:0e:6f:f7:d9:82:e7:
99:f3:88:7a:63:89:00:9c:1b:98:96:b7:eb:14:86:
75:2b:a0:db:97:24:56:b1:9f:85:c2:a5:d7:c3:33:
88:42:3a:ea:c3:70:24:22:89:2e:73:d6:ff:9e:29:
7a:37:ef:52:54:05:11:c5:4e:0e:92:09:36:6a:31:
f9:df:38:a1:ed:0d:6c:0a:be:8b:b9:c3:de:5e:76:
a6:79:c7:21:e5:df:fd:e1:f8:ed:b8:51:9f:b7:6f:
7e:ae:b6:66:29:7b:c2:c5:b8:d4:58:b3:f1:64:51:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:5A:DB:95:01:9C:33:63:7B:A7:AC:CA:E9:D4:7E:2B:F7:88:67
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:74:00:6f:93:ce:b2:95:fe:a8:02:e4:44:74:84:ad:57:
96:4f:87:98:3a:07:08:3b:25:62:6c:cb:84:c5:41:f9:d2:02:
88:79:bb:b9:66:79:48:dd:4c:d8:5f:3b:eb:b3:5e:9c:d9:0c:
55:07:a4:ac:db:a9:1d:3b:4d:94:a0:0c:91:5d:4f:04:7b:0d:
ff:89:d6:87:2f:ab:0d:c5:24:f8:dd:27:68:52:7d:ca:d0:f3:
b0:6e:01:db:41:c9:da:0c:f9:a8:66:10:03:62:78:d3:73:73:
3a:a5:8b:68:1d:92:81:47:2f:a0:51:bf:09:e7:2b:28:40:bf:
40:6d:54:8b:af:d0:c3:3d:b5:c0:10:a3:23:56:54:2b:5c:2b:
ce:30:3b:3c:86:c2:69:55:54:84:f4:7c:0f:5a:04:54:b2:06:
64:31:58:52:4e:1e:c7:0b:49:d6:ad:73:51:b4:fb:e9:32:b8:
06:72:da:0a:9c:d4:33:b1:1e:7b:12:40:3b:7a:67:fc:3e:16:
f2:90:45:6f:a3:de:45:4e:57:e5:02:84:52:56:77:59:7b:27:
1e:81:7b:c9:11:a1:87:17:3b:2e:d2:b5:10:6e:61:7e:42:56:
2a:9b:40:09:2f:d9:a8:b2:06:06:30:95:1e:5f:48:fb:ab:6c:
1d:bf:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:42 2026 by rpki-client