Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: gNZ+9LiP6nS/dmL9MzchtYO0wlM+5KRqfTxq6nBbebM=
Subject key identifier: D3:3D:31:2A:A1:5F:E6:A7:8E:64:23:AF:0E:0E:13:C1:C2:15:8D:88
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019D265FE68E9BF081FAF0D73D01C048AC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:52 +0000
Manifest this update: Wed 25 Mar 2026 19:01:52 +0000
Manifest next update: Thu 26 Mar 2026 19:01:52 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: ONLCiYoBZO3AbL19menRrUwLtScLuUPedljuaH3y9Yg=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e6:8e:9b:f0:81:fa:f0:d7:3d:01:c0:48:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Mar 25 19:01:52 2026 GMT
Not After : Mar 26 19:01:52 2026 GMT
Subject: CN=d33d312aa15fe6a78e6423af0e0e13c1c2158d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:5d:14:33:e0:24:7b:ba:6e:44:4d:db:63:
94:d1:97:63:bb:b1:c8:69:7f:98:54:a2:31:83:dd:
6f:78:ad:56:dd:76:27:55:ee:49:dd:69:bc:ad:4e:
45:d4:25:d7:e9:fb:9c:83:a3:4f:04:a6:33:22:4c:
d2:74:cc:b1:c3:e9:9c:ee:54:17:38:6c:96:d1:a9:
16:58:72:62:7e:f4:d4:03:6c:ed:11:d5:4d:28:81:
49:73:91:28:a7:a4:bb:b6:c3:39:d6:d0:3c:0d:e0:
c4:4f:3e:86:aa:56:a5:6b:d9:f2:eb:74:4d:50:2b:
69:ef:1b:b2:9f:38:5b:97:fe:c8:00:1b:71:09:c5:
eb:a5:a0:b2:0e:9e:f2:5f:ef:51:af:a4:c9:bf:a6:
8c:6a:d9:1b:b5:0e:56:4f:14:51:4b:ca:a5:ab:8a:
3a:f2:b5:74:49:24:42:22:d1:1e:83:35:fe:30:99:
18:d1:bd:8c:7e:a3:66:dc:e9:5e:4c:20:9f:b4:18:
13:a9:10:c5:57:69:48:ff:7f:99:79:cf:63:13:41:
d9:d9:d6:45:ce:45:25:ee:f5:2c:af:5f:3d:a2:ce:
cd:b2:81:a3:ba:0e:b0:5e:2a:10:c0:5b:bf:e9:97:
9e:4f:96:19:98:9b:fc:b2:96:59:8b:c9:8b:a7:ef:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:31:2A:A1:5F:E6:A7:8E:64:23:AF:0E:0E:13:C1:C2:15:8D:88
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:bb:19:a6:77:55:61:bb:eb:63:48:41:36:01:7e:37:ca:
5e:b4:a1:79:c6:61:b4:5e:d3:54:d3:39:a5:09:c7:48:b2:bb:
d5:60:a6:52:08:8f:b6:57:49:5f:70:77:af:3d:b8:bf:6e:7f:
f8:10:a8:68:47:9a:19:75:61:55:ef:5d:1f:e2:ab:db:79:ae:
82:5a:c9:11:ae:33:8d:71:e1:56:83:64:79:20:e3:99:30:3d:
3b:b4:83:31:b1:ae:d7:66:72:7f:79:cd:32:d2:16:95:88:7d:
c3:6b:fc:6e:ac:e6:59:7a:be:61:e7:4b:63:90:5d:09:d9:89:
95:9f:4b:a5:ae:13:82:67:4c:e7:d0:5a:c7:c4:ab:41:b7:fd:
27:00:bf:df:2c:ca:80:8e:46:a9:df:01:77:48:7c:18:5b:00:
1d:3c:ec:ae:b2:3d:ee:35:a7:45:32:28:00:cb:ae:8d:e9:5e:
5b:86:aa:fb:59:72:91:e9:f0:9a:5d:bc:a7:74:60:ac:4a:86:
8b:0f:27:57:4f:19:2b:b2:9e:0a:72:7b:31:33:4b:80:f7:be:
92:f4:e6:5e:86:6f:17:c2:a4:b6:0a:c3:83:c7:f8:24:29:2f:
f9:44:c2:30:e8:18:07:4f:d1:70:f1:cd:af:1f:90:ab:d0:87:
a4:2a:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:09 2026 by rpki-client