Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: jAHKAlSmfFo2kfpQ+opGPN4lpwGPIqm4OxZ9xAiRwyA=
Subject key identifier: A3:AC:27:B5:72:2C:4F:87:CE:1E:C3:BF:79:9B:D7:80:A2:A3:F6:FC
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019D2704924AB5F3276C9B10E07FD7293D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 181E
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: va0neZYR+zJi5TmR0xajbJE4D91828zKXi6+BTd6dw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:92:4a:b5:f3:27:6c:9b:10:e0:7f:d7:29:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=a3ac27b5722c4f87ce1ec3bf799bd780a2a3f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:cf:ca:b6:78:88:22:07:d7:22:9a:22:13:
04:4f:cb:37:dd:64:c2:d8:ab:58:04:a6:36:86:f3:
45:f7:e7:a7:71:1b:78:2f:4b:f6:50:27:49:5c:32:
eb:fa:ae:6d:6d:24:52:24:2c:10:29:30:af:67:2b:
50:34:60:c2:f4:e8:5f:e3:ac:4a:bd:66:02:31:32:
a6:be:e6:cf:c2:e2:f7:d0:bd:8b:75:6d:09:90:9e:
1b:51:05:8f:d7:48:c8:8a:97:26:13:8f:57:16:2b:
fb:57:01:99:c5:73:98:30:5f:68:00:f6:a6:e4:9d:
7d:41:e7:1a:7d:a9:c8:23:64:80:24:62:30:bc:0a:
e2:42:11:48:3c:be:28:39:30:0f:6a:0f:37:cc:5b:
c2:26:37:c5:2e:70:69:ae:41:6f:42:87:1a:6a:aa:
5f:df:ac:6a:54:8a:04:f6:a6:2c:d0:a6:08:44:94:
e8:fa:71:da:40:ac:7e:a6:11:36:32:13:37:04:df:
c4:cb:34:c3:6f:59:fb:c5:3b:91:21:cf:4c:9b:6d:
72:fa:e5:da:0a:91:25:ab:f0:bd:14:a7:fa:04:5c:
ac:07:bb:fa:1b:2e:0d:73:ef:34:cc:79:c7:ff:23:
77:5a:59:57:ca:5d:2c:75:c8:10:0f:83:80:0d:ce:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:27:B5:72:2C:4F:87:CE:1E:C3:BF:79:9B:D7:80:A2:A3:F6:FC
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:7c:0f:b2:9a:b3:2d:0e:a0:95:9e:c3:a1:84:d1:92:64:
66:fe:b2:a5:b4:aa:9c:34:3d:7e:43:30:fb:0d:69:d4:11:9c:
8c:97:6d:c4:f1:3e:3f:57:f1:97:39:80:8a:ef:90:e6:4b:a5:
01:ac:47:70:b1:e7:38:a5:26:61:9c:1b:53:8c:dc:1c:c1:c8:
3b:db:9d:ac:16:8b:cf:9b:2e:d2:c1:36:9f:e5:3a:12:77:ec:
52:bd:a6:8e:ad:02:cf:b9:56:76:62:f6:dc:7b:11:2b:76:87:
dc:ff:3e:ed:80:a3:ff:b0:66:c0:b9:3e:7f:b7:81:23:7b:e9:
bc:0a:dd:c0:28:fc:b6:aa:39:76:2b:cc:ba:7f:e3:3a:c0:36:
da:a2:83:49:6c:2c:91:1c:05:c3:0f:eb:2a:14:29:a6:03:a1:
d8:5f:7e:3d:16:31:e3:17:74:7b:e0:e0:54:a4:f6:c9:a6:29:
0e:5a:5b:67:d2:2a:c1:16:ac:ab:48:62:e8:2c:3a:44:50:36:
86:c1:b3:a0:be:3d:79:dd:1e:67:72:e1:ff:a2:58:12:d1:ee:
a6:ed:f7:17:c6:87:57:0c:4d:a9:6b:4c:07:3e:ae:25:0d:19:
69:0c:71:8f:97:91:b5:81:7e:9f:cd:69:a2:a7:ca:dd:02:a6:
55:8a:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:03 2026 by rpki-client