
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier: OI9a+FHdKf+R7sZ78sbemgYvzduKyEMeONA7FlGQ5I0=
Subject key identifier: CE:0B:B4:1B:FC:CB:98:9F:29:A9:DC:DA:41:82:B0:B1:10:6E:39:DA
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial: 019D27A943F91F946B8CFE46C9B245560B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number: 0807
Signing time: Thu 26 Mar 2026 01:01:37 +0000
Manifest this update: Thu 26 Mar 2026 01:01:37 +0000
Manifest next update: Fri 27 Mar 2026 01:01:37 +0000
Files and hashes: 1: C9A49XShrpT2L1lbu5v6tyyqxGE.roa (hash: Z6iZSfPjsI83CHUl8Gu4u2Ux8v9NUtJP/iskQ5nB/10=)
2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: /FaSXXIivJsYPJNfPIoWxomm6LsQmBH3p5wEv0POB+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:43:f9:1f:94:6b:8c:fe:46:c9:b2:45:56:0b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Validity
Not Before: Mar 26 01:01:37 2026 GMT
Not After : Mar 27 01:01:37 2026 GMT
Subject: CN=ce0bb41bfccb989f29a9dcda4182b0b1106e39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:c5:7f:e8:2b:97:c1:47:08:16:d7:89:42:
5f:3a:78:46:8c:87:d4:e3:d8:48:91:f6:dc:2d:8a:
fd:33:48:1c:5b:85:d1:24:6a:cd:3c:91:81:24:b0:
6b:ea:e2:bc:8b:ac:99:a9:ce:92:5f:5f:d4:8a:07:
b7:7a:0c:2d:01:fe:b8:b8:86:b3:2e:50:2a:d4:d2:
29:06:67:47:13:83:6d:0b:fa:38:44:3c:d1:7d:d1:
21:ae:1c:ab:67:63:0e:15:0b:0a:d5:22:c9:2f:99:
39:62:d0:cf:33:77:59:5c:04:26:dc:8b:e0:b6:a6:
4d:f0:2a:3b:9a:e1:a5:ce:07:16:3a:4c:1e:52:af:
cf:92:0e:d0:52:2a:08:c9:89:61:73:77:e9:f5:1d:
cd:01:4f:4e:e8:65:6c:d5:b9:df:66:24:40:62:d9:
95:ee:e6:f6:80:3d:7c:02:7b:28:53:04:41:02:ff:
b8:9f:d8:45:41:6e:a4:47:3f:56:4e:f3:74:28:f7:
ef:aa:59:de:5b:fe:76:bb:0c:05:e3:70:37:8d:e4:
5a:71:e6:d4:96:15:a9:5f:f8:f8:09:2b:2f:80:49:
2f:86:97:51:5f:20:f4:d1:dd:78:64:74:ca:9a:b5:
35:e5:8a:9a:6e:69:97:98:9c:6d:90:3e:d4:50:bb:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:B4:1B:FC:CB:98:9F:29:A9:DC:DA:41:82:B0:B1:10:6E:39:DA
X509v3 Authority Key Identifier:
keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d2:bc:1a:da:59:90:58:f1:59:e1:43:31:ed:b4:0b:01:6f:
4c:58:20:8c:6a:9b:ec:a5:a5:65:c8:db:41:0d:be:dc:33:89:
f6:0c:ad:b6:8e:26:91:7f:e0:76:4b:19:67:1e:90:f0:63:b7:
7a:b2:b5:2d:1a:20:c9:2e:28:33:6e:79:f8:00:b8:7d:84:3f:
9f:3c:e4:24:7b:43:b6:ac:4e:43:9d:d5:57:91:29:0b:d7:a7:
f7:1f:d4:b4:2a:5b:6c:74:5c:78:89:13:c5:13:34:83:53:bf:
b0:c4:a8:16:5c:57:45:39:9d:05:61:97:e3:31:18:e7:cd:ce:
f4:bb:d9:15:61:83:6d:89:21:5f:c6:51:f9:06:0b:8b:a2:43:
31:6c:27:48:55:c3:b5:10:03:e5:82:db:ba:af:e1:1d:1e:d2:
bf:eb:e9:6b:5a:af:93:fa:b1:ca:1b:30:ea:4a:0a:b0:63:c2:
ed:ed:70:3c:17:97:90:a1:02:8c:0c:91:99:c8:39:9c:20:59:
28:96:81:9a:7d:23:70:14:f4:df:4d:e8:58:05:01:cc:48:4c:
d8:9a:e5:6b:01:42:29:9a:8d:08:40:32:d7:5d:a9:9c:76:25:
54:96:3d:01:87:80:e8:5e:97:46:97:d0:b9:2b:29:5b:97:a3:
70:28:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:09 2026 by rpki-client