Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: rO0EVTOy++5vZGN7hg/i9mkhgNbiJsgj1jVdYQbwNjY=
Subject key identifier: 15:6D:95:25:41:75:6F:19:7B:76:D4:6B:6D:9F:DD:50:D8:C7:D0:B2
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 019D2996E2444BB6C4EC3B670E6F3D18A881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 080B
Signing time: Thu 26 Mar 2026 10:00:47 +0000
Manifest this update: Thu 26 Mar 2026 10:00:47 +0000
Manifest next update: Fri 27 Mar 2026 10:00:47 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: VdshHoGUmemRW0hdExW/2zk7IT5GHTzij62RQiBH61c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e2:44:4b:b6:c4:ec:3b:67:0e:6f:3d:18:a8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Mar 26 10:00:47 2026 GMT
Not After : Mar 27 10:00:47 2026 GMT
Subject: CN=156d952541756f197b76d46b6d9fdd50d8c7d0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:ea:52:75:a5:5c:64:fa:ea:12:4c:c8:d9:
dd:ff:05:01:89:fd:eb:f6:03:b4:5b:e3:da:c9:7a:
79:36:e4:09:19:27:a4:04:8a:f1:5a:67:05:9b:35:
46:42:94:1a:f9:72:86:61:56:9d:bd:07:1a:ae:b3:
4c:30:3b:c9:9d:ba:98:57:9f:ac:af:6f:78:f2:80:
ef:f1:95:58:a3:80:93:54:da:ed:72:31:bb:85:b4:
b7:27:04:2f:1a:ff:1d:b3:03:fd:ad:03:27:a5:ae:
a0:ed:3b:6a:dd:b5:20:3b:51:c8:75:fe:4b:82:b8:
07:c8:d5:cc:60:df:92:b4:6b:6c:03:f7:72:7e:d4:
53:42:68:dc:56:83:23:0f:80:78:f4:e6:1e:e6:3e:
f4:8b:69:f8:de:e0:7d:0d:79:ed:4d:ae:1f:0b:57:
22:d7:3f:35:b7:87:b6:c6:d4:45:e5:19:13:6f:e0:
1b:02:c5:f1:ed:24:81:d5:e3:12:fb:eb:a8:b8:76:
87:62:2f:81:4b:62:15:ef:0f:15:91:5f:52:61:a6:
9f:19:9e:b8:c6:59:07:74:f1:13:5a:43:b3:c4:55:
6a:25:c9:85:3d:3a:6d:1b:3a:c9:53:b3:b6:ad:e3:
3b:53:c9:81:44:f3:10:a5:c1:6d:4c:14:de:36:da:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:95:25:41:75:6F:19:7B:76:D4:6B:6D:9F:DD:50:D8:C7:D0:B2
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:91:b7:cb:8a:08:84:42:6b:d1:97:d2:be:61:e3:8c:cf:
67:ac:3f:52:18:eb:e3:09:f3:c1:3f:ac:33:75:af:ba:fc:98:
0a:0d:71:9f:63:4c:03:d0:c0:b1:c9:f0:68:a9:4f:36:75:dc:
b0:ac:2e:39:9f:fd:03:fd:56:3e:74:49:08:05:68:f0:7c:8a:
79:ff:f8:75:43:e0:c0:23:53:a6:a4:d6:0c:8a:07:d7:7e:0e:
8a:7c:86:1d:ff:b1:f5:c7:05:95:e8:8e:03:5a:44:c9:0c:c3:
13:ed:3f:7e:bf:9b:fe:ed:10:a4:18:2a:da:46:2f:67:47:40:
f5:28:1f:c1:af:1e:82:22:79:e8:a5:5c:11:5a:62:e8:03:ed:
c3:3d:ae:91:cb:2a:61:1e:d3:77:6a:02:5d:9a:4d:62:b0:ce:
a6:3c:ef:48:9f:48:5d:5f:c6:e0:08:94:d6:3c:70:a2:1e:c3:
07:c9:37:87:88:11:3c:7f:59:8a:0b:c0:12:17:a3:e2:71:58:
8d:21:b4:54:b7:8e:ad:ec:ab:f0:2a:b0:b5:67:6a:33:50:57:
5e:12:c8:3f:b1:f4:e9:c5:00:02:f7:69:25:b5:dd:2b:56:65:
d4:27:0f:7b:e6:38:41:ec:2a:5f:93:e0:67:05:a2:ab:61:0e:
56:06:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:43 2026 by rpki-client