Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: Wi2h1CX4bOP6EdZO/SRhItuCnro5Lwx1CAKBbvrZ3+I=
Subject key identifier: C3:02:CE:B0:2D:4E:43:82:1B:49:4D:D3:1E:EC:50:85:C7:E4:BA:8B
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019D2703E82CF16468512AC2DA66C2B4E826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: BBKWe+9RxOj36BebpyPJzMR/xv7jnOjKD22oCmqtl8E=)
2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e8:2c:f1:64:68:51:2a:c2:da:66:c2:b4:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=c302ceb02d4e43821b494dd31eec5085c7e4ba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:aa:f8:26:2a:e5:1b:b3:38:5d:75:ad:11:
99:69:bb:8d:70:3d:0a:b3:b6:12:71:46:dd:28:6f:
ea:81:93:30:09:af:52:25:a6:63:4d:d3:c0:e8:c3:
36:a2:7d:ce:34:ef:5b:a7:f8:6c:0c:62:93:06:02:
69:00:34:fa:75:0a:8f:3d:48:bc:9e:a2:4c:ee:9f:
92:54:63:f2:82:4a:34:65:2c:2e:51:c2:b9:e4:b2:
54:ea:0b:59:6a:61:9a:08:db:71:40:fe:d9:1c:8c:
c0:2e:a8:8a:d2:7f:23:05:2e:19:43:24:c7:88:b6:
48:69:ee:df:61:ad:02:5c:39:40:d4:38:b4:77:ad:
1a:01:3a:33:63:44:c2:cb:2b:d3:51:05:fa:93:ea:
b4:13:58:29:32:38:d2:04:2b:0d:7b:34:63:67:54:
03:b8:e2:a7:6e:da:b8:ea:23:ec:15:65:92:bb:42:
73:98:34:3d:5d:01:de:e7:99:19:59:68:89:f8:c7:
e3:68:50:e5:43:aa:32:97:2f:03:a3:7e:7c:5e:4f:
fd:7d:d5:bb:2e:41:af:a9:4b:ca:48:5f:3d:58:a3:
4d:33:42:ea:75:ef:95:ba:fb:3a:12:95:59:ed:3a:
5c:4a:c7:80:d4:29:df:bd:22:4b:92:fd:22:d8:92:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:CE:B0:2D:4E:43:82:1B:49:4D:D3:1E:EC:50:85:C7:E4:BA:8B
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:cb:ef:65:b4:a3:d3:fa:7d:ad:14:41:40:eb:c3:9a:f1:
85:64:9a:99:2c:79:a4:84:e3:87:ba:56:d3:b5:bc:23:83:64:
96:64:fc:2f:94:33:1e:5a:75:bd:2d:18:cb:c6:95:f0:1b:60:
30:19:7d:7b:c7:7c:d3:1d:ea:01:59:b8:89:e3:a5:dd:09:35:
ad:99:12:dd:2f:46:72:30:14:b9:73:33:a9:21:b8:41:37:c6:
88:58:34:6d:7a:72:f2:f4:21:20:df:a6:52:ba:13:03:7c:0f:
11:26:8d:0a:15:ed:f4:9a:b6:7d:19:7a:1c:9e:cc:69:8f:cc:
ca:35:1f:1f:cb:33:0e:45:13:31:c6:a5:81:98:8d:a4:a5:dc:
68:39:90:e1:15:ba:13:e5:13:c4:0a:89:5b:c3:ea:56:2e:c9:
14:aa:24:c3:4d:3a:b4:23:0b:95:21:06:ff:a0:9b:5e:d1:41:
78:2b:69:0c:5e:c3:d4:fc:7c:df:a0:20:dd:87:7e:5d:8e:7b:
5e:a9:b5:dc:cf:4a:fd:9a:b6:19:05:d3:0d:94:70:be:6a:a6:
92:4b:c7:d6:ab:23:94:48:37:09:6b:af:a3:91:8e:34:1b:10:
38:11:80:2e:41:04:8c:f8:c8:c5:28:f7:8a:8b:df:f7:08:3b:
00:83:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:48 2026 by rpki-client