Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: HBLWKIeSAhgLPCRb+Xjp9IUxrakzr7DETSF8anM+Rfk=
Subject key identifier: 8D:83:10:2F:2E:8D:2A:DB:28:59:4D:B4:61:A9:3F:40:98:6A:F5:3F
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019E20246E632F63B1200DC802A2CC9C1C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 189F
Signing time: Wed 13 May 2026 07:01:58 +0000
Manifest this update: Wed 13 May 2026 07:01:58 +0000
Manifest next update: Thu 14 May 2026 07:01:58 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: 8oEXZeJKPNhTRckOFW4S/wsF6xCmOZTQIAwGfwJTknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:6e:63:2f:63:b1:20:0d:c8:02:a2:cc:9c:1c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: May 13 07:01:58 2026 GMT
Not After : May 14 07:01:58 2026 GMT
Subject: CN=8d83102f2e8d2adb28594db461a93f40986af53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f5:df:5d:d8:e3:16:41:70:80:ee:96:73:5b:
e2:36:d4:29:63:47:a9:55:eb:d6:6e:f5:e8:90:e4:
82:a9:81:e7:2b:9a:9c:c0:d6:cf:4e:93:f4:3d:d6:
5c:42:db:59:e0:14:5c:06:b2:cf:70:ee:f6:a2:4c:
fb:e2:51:f4:7a:99:df:b5:09:45:71:8b:78:fb:97:
d1:d2:6d:e7:1a:75:ce:16:98:d8:c2:f4:b3:a0:b3:
49:2c:fc:a1:59:2f:ef:50:cb:b4:05:d5:f1:21:73:
2e:f1:e0:8d:6e:84:ca:02:26:b9:27:d0:ee:cc:5a:
1e:04:6f:47:5b:bf:3e:61:dc:6a:e1:70:5b:9b:6d:
57:75:95:36:9a:79:c3:0c:b6:f8:2b:70:b4:1a:37:
33:ab:d7:b1:28:47:5c:83:4d:ba:d5:b1:ef:1e:9f:
19:1c:9b:1c:83:c6:55:cc:c8:75:6a:f3:74:55:06:
c8:57:91:54:d3:ab:de:2a:8c:9c:9b:de:1e:3e:be:
87:02:64:ee:d1:f9:d9:48:2f:4e:4e:cc:5a:d6:b8:
fb:eb:ba:b8:91:5d:9f:cf:bc:81:b7:07:19:c3:e4:
32:2a:0d:6d:4f:f8:5e:bc:0f:f7:58:3c:7f:76:23:
76:f3:5f:53:6b:28:28:1f:84:87:9c:d4:fd:09:4e:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:83:10:2F:2E:8D:2A:DB:28:59:4D:B4:61:A9:3F:40:98:6A:F5:3F
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c9:d3:19:f7:67:91:af:87:04:3d:4c:be:fd:1b:b0:20:ed:
6d:dc:9e:1e:d3:43:a9:d0:90:74:cb:ba:52:78:28:7b:4f:fb:
eb:e6:4a:26:da:04:6a:36:38:e6:9f:84:16:76:3c:8b:72:40:
dc:03:cd:10:27:82:22:23:83:ee:a0:5b:71:c8:75:3f:8d:e3:
ff:b4:79:d6:f3:65:d7:e5:b5:14:58:fc:b0:34:89:13:da:3c:
28:5a:4d:57:bd:2d:98:fb:eb:80:2f:16:d7:ea:7c:a4:8b:04:
72:5e:ee:7f:58:e1:9d:c5:00:a3:1e:aa:f8:07:35:a9:09:b3:
c6:f2:fa:fe:ff:15:81:bf:50:12:4a:99:88:9d:a2:2c:9e:a7:
c1:ce:41:74:ab:f8:f8:15:13:d9:96:b0:26:20:d3:12:9b:8f:
42:54:f7:c5:4a:6b:88:71:4f:b7:17:da:be:b9:0e:a7:13:aa:
96:8e:35:f7:a9:82:98:3a:63:90:f2:b0:36:e1:83:9f:01:eb:
f8:84:57:e3:f7:05:dc:bd:ce:bf:32:85:98:a1:8d:0e:e3:10:
f8:1b:b0:9e:0e:92:37:73:d6:fa:70:ab:4d:85:85:1e:6e:c2:
f5:ed:41:1b:d4:27:8c:3d:63:08:2f:4f:98:a8:49:0b:8b:c7:
7d:e3:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:23 2026 by rpki-client