Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: rg+ZO7q0LqdzLvugOXGjmAzL/+YXM3TanEyjmrhNwTU=
Subject key identifier: 0F:8F:60:CD:02:C3:83:FE:AF:DD:81:7C:54:99:F7:D6:9F:28:4B:AB
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019D2772374B6AF7D0DDA88135E05A265FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: YEJhLiX/TNiMlUfypIBXYQPl3TZnmDFAv3HozW1zpFM=)
3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:37:4b:6a:f7:d0:dd:a8:81:35:e0:5a:26:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=0f8f60cd02c383feafdd817c5499f7d69f284bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:52:f0:e0:5f:04:2d:30:86:cd:0c:57:01:
df:87:31:d1:d5:3f:95:a4:44:27:ee:84:30:5b:2e:
25:a5:ba:9c:01:d6:70:f8:f3:82:a6:b0:ef:9e:3a:
78:71:1c:ba:cd:49:a3:82:ad:3d:af:5a:f8:f2:3c:
e0:e7:ff:10:b3:d0:68:4c:b3:5c:da:cf:48:71:01:
9a:fe:2a:14:26:a3:ae:7c:97:7d:6c:48:e1:9b:e3:
fc:f0:bc:e3:c3:6d:8f:c6:99:3a:4a:7c:1d:52:1c:
73:ee:59:c5:52:1f:4c:55:c3:06:21:05:70:f7:6e:
6f:1b:23:d9:4a:28:5b:1b:4b:46:2c:ee:91:e2:40:
d5:7e:f7:c7:91:76:f2:5c:24:a0:fe:d3:fc:68:5d:
db:7b:e6:82:6b:ac:7c:81:6e:84:cf:f8:41:e2:6e:
5c:9b:b3:72:56:aa:35:19:4d:d9:a6:17:96:39:05:
e7:13:bf:e1:f8:d6:7e:e0:26:a1:fb:d5:f3:9b:cf:
f1:63:fc:ef:3d:2f:7a:7f:9a:25:a3:5f:fe:0b:c0:
b0:1b:26:74:4d:1a:62:d6:4b:8d:11:f5:46:09:70:
cb:e0:9e:85:c9:85:86:74:a3:05:b5:21:c4:9a:25:
a7:94:c5:7c:66:e9:51:9c:b0:d7:fa:37:83:b2:b4:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:60:CD:02:C3:83:FE:AF:DD:81:7C:54:99:F7:D6:9F:28:4B:AB
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:2c:b2:78:60:35:87:5d:97:01:95:c5:37:6b:39:e4:29:
e0:9b:98:71:5c:d3:95:34:53:7b:1c:74:a9:46:a3:27:4a:b9:
a4:11:b1:c9:7c:49:0c:1d:50:86:b8:42:60:f3:76:b6:a5:97:
22:01:ca:f6:3b:86:83:1e:49:f7:95:63:b8:ce:bd:90:bb:fd:
6f:48:93:62:79:78:0a:14:35:94:77:e6:4d:d2:64:e7:3f:1b:
75:e9:bd:67:bc:83:c2:0a:56:56:32:82:82:a1:4f:2d:5f:3c:
fa:90:23:89:b2:da:ee:e4:88:6f:50:6e:cd:b5:6d:a5:8f:ca:
97:d9:fd:6b:0a:d6:df:c3:fe:a2:ea:c0:26:46:63:5f:13:0b:
06:4f:63:3b:08:8c:4e:3b:21:21:4b:ac:e9:fa:49:f1:6c:61:
91:09:b3:04:14:a5:1b:96:a7:7e:5e:70:9f:47:b3:2f:64:b1:
d6:3d:67:62:0f:3c:ed:51:01:06:f4:92:aa:4b:6f:a8:38:9f:
1c:35:1b:95:0e:a1:89:d7:d6:48:d6:5d:90:08:5d:8c:5d:7a:
e6:41:12:79:62:61:db:a2:35:91:5b:f2:31:67:44:54:3c:a7:
b0:02:a0:c4:de:e9:50:38:11:3b:73:55:48:4e:22:6f:4c:65:
71:f8:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:28 2026 by rpki-client