Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: IvDTlIgfPcl9aSlbczFMrOqgc6tiUaplyeikFIAhXmk=
Subject key identifier: F4:7A:18:39:09:4D:B4:F4:41:CD:13:1D:C2:D7:4E:7C:89:FD:BD:0D
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019D2A72E0875A06995F9A7866FD6AB6DC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 02B3
Signing time: Thu 26 Mar 2026 14:01:04 +0000
Manifest this update: Thu 26 Mar 2026 14:01:04 +0000
Manifest next update: Fri 27 Mar 2026 14:01:04 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: CnP/Oik6VBeMwlb52eb1eABrZ8s8lWLWDeQzQxcjBM4=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e0:87:5a:06:99:5f:9a:78:66:fd:6a:b6:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Mar 26 14:01:04 2026 GMT
Not After : Mar 27 14:01:04 2026 GMT
Subject: CN=f47a1839094db4f441cd131dc2d74e7c89fdbd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:3e:0e:23:5b:7a:bd:6b:55:05:75:da:a8:
a7:72:36:ca:7c:0a:bc:c5:f8:3b:e8:cd:9e:54:7b:
f4:b2:63:67:eb:35:e2:35:68:71:ac:42:54:83:dc:
58:9f:7a:6d:c5:8d:a4:a7:87:91:f9:01:2d:73:2d:
b9:41:6e:f3:ab:b2:ce:fc:a4:fc:2b:67:33:bc:5d:
fd:d1:04:81:4a:e5:eb:da:2c:93:2d:53:2e:e7:d4:
78:73:be:12:e7:d8:e3:04:bb:2c:c4:1a:da:7a:b6:
11:ba:1b:66:5e:04:0f:3f:01:6b:f0:8d:76:a6:a5:
fa:2f:fb:5f:a5:85:01:3a:04:80:21:d1:6d:b1:ec:
38:8c:a9:9a:9f:c8:11:24:94:81:95:f2:f1:2f:ae:
82:11:6a:1f:86:e5:47:30:1a:bd:03:94:eb:51:e6:
98:3d:b2:59:1a:1e:7e:57:c4:ec:df:a5:27:e0:19:
d2:00:32:c9:b8:02:56:e8:4e:38:75:7e:4a:7f:f4:
48:33:d6:72:38:ea:e9:43:6a:3d:53:28:da:75:b3:
e6:46:54:a5:e6:66:3b:b6:6b:5b:ee:2f:fa:cc:ae:
6f:4b:64:c7:20:46:90:18:6c:95:96:dc:1f:ff:16:
8e:12:6d:c1:b1:48:13:5b:70:c4:58:08:23:80:e3:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:18:39:09:4D:B4:F4:41:CD:13:1D:C2:D7:4E:7C:89:FD:BD:0D
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:cb:90:3d:4d:26:c7:e4:8f:60:a0:00:e0:39:17:42:1d:
2e:cc:4d:d0:7b:d5:43:23:91:52:d5:8d:90:da:19:ea:52:ad:
e7:d7:fe:f8:7e:36:e1:1f:c4:84:ee:f5:ac:a3:b7:a2:47:88:
d0:ea:51:ae:37:69:b7:3e:ee:c6:19:78:70:a6:6b:10:7e:81:
b7:12:b1:d6:a0:24:50:13:11:b8:bc:69:6a:7a:b8:2e:de:a9:
b2:40:7d:86:44:3a:71:3a:75:04:1b:01:83:6b:b5:fa:d1:1d:
b9:ac:14:16:4f:c1:d8:4f:b6:f4:ee:94:6f:6a:03:21:ab:c3:
c9:72:24:2e:cd:c9:39:1d:ce:72:10:cb:d1:12:62:26:f1:b6:
65:a4:ac:b9:24:c1:a7:3b:4f:61:42:fb:75:89:1e:7c:bc:db:
79:c4:70:eb:d9:fc:ae:93:b7:d0:47:1b:41:f6:fe:51:4d:0d:
8a:f7:52:60:74:ff:70:a5:4d:e2:e5:31:8c:99:cd:50:2b:1a:
24:b6:78:cc:33:01:81:13:73:5e:19:81:92:81:0c:d9:25:ed:
81:99:9d:33:7f:36:51:70:c9:de:0e:fd:87:97:cb:5c:b9:4d:
49:73:84:50:f1:39:61:16:19:ee:08:02:6b:6c:9e:27:fd:bb:
bb:6e:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:36 2026 by rpki-client