Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: e+1FnC8fuq+ButQShBHQwOA1UcsgZM5rb1G8Y+mm1Ro=
Subject key identifier: DD:E4:C9:8F:70:E3:74:5B:69:79:E9:05:19:87:62:D3:CD:94:96:B3
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 01A0F18BF7FE17CB19D57A3365D5CE461AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 026D
Signing time: Wed 30 Sep 2026 09:01:17 +0000
Manifest this update: Wed 30 Sep 2026 09:01:17 +0000
Manifest next update: Thu 01 Oct 2026 09:01:17 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: dgElKzXuPvHnHfaOTEOOFAIN9sLr8FBAZZlTVx1sO5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:f7:fe:17:cb:19:d5:7a:33:65:d5:ce:46:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Sep 30 09:01:17 2026 GMT
Not After : Oct 1 09:01:17 2026 GMT
Subject: CN=dde4c98f70e3745b6979e905198762d3cd9496b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:d4:88:0d:3b:90:b9:fb:06:71:55:2a:2e:
b9:f5:2f:eb:51:9a:da:c1:4b:34:27:1f:6d:53:a2:
6b:1e:dd:31:cd:3f:5e:19:b7:d6:1a:a5:3b:bb:0b:
69:49:75:91:b0:00:c3:78:b7:8c:0d:7c:62:5c:4d:
d9:73:57:1a:2a:18:e5:37:41:15:f0:57:30:04:02:
86:d3:54:43:18:57:b4:95:43:9d:dd:9d:e4:f0:76:
9d:4f:0a:b8:74:b8:64:e8:d4:e7:0c:86:c0:e5:da:
3f:f7:19:19:a6:f3:ac:70:79:db:27:58:7e:ce:b9:
f9:4d:8b:9d:56:44:30:ec:37:27:23:2c:2f:ec:fb:
0e:30:fd:92:60:63:ec:6a:82:32:dc:a0:ac:2d:f9:
0f:d1:4f:fd:bd:ea:22:15:83:6e:7b:f6:ba:d3:0f:
e4:61:04:1d:1c:17:38:a8:53:c0:cf:6a:af:d5:af:
4c:ab:bc:90:cf:2a:ca:51:87:67:51:e0:76:22:a7:
30:79:df:7c:a9:d7:6d:ec:da:30:60:88:ef:ed:8f:
37:61:9f:97:29:7c:d9:ce:2a:54:e3:29:ac:83:30:
79:40:51:54:d5:38:a9:f7:73:c8:85:64:63:41:31:
61:22:9d:74:53:8e:ff:f5:23:3a:f0:c8:ea:43:f4:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:C9:8F:70:E3:74:5B:69:79:E9:05:19:87:62:D3:CD:94:96:B3
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:bd:96:26:1a:f5:0f:5d:7c:43:2d:2d:ba:34:f0:68:d5:
c4:15:c1:7d:d5:7f:06:33:32:3d:9e:e8:50:36:22:5c:fd:1b:
19:c6:a6:28:fa:b3:9a:2b:66:20:4a:57:c6:0b:89:8a:8d:ba:
df:d5:33:62:64:a6:41:00:25:2b:27:07:2e:f7:8a:02:10:d7:
11:54:e4:21:9a:e0:f5:9a:51:ad:21:65:a6:86:95:3f:7c:b2:
95:83:cb:a0:8e:cb:05:0d:83:72:04:54:7c:2d:e6:61:71:93:
ab:0d:39:fe:83:a9:b8:62:cf:55:ed:02:f7:fd:c0:a4:16:13:
96:a4:53:f5:2f:ec:75:a6:17:43:56:32:37:f2:a2:3c:90:22:
3d:e7:56:37:19:9f:3d:7e:df:29:b3:a9:de:3d:8d:2d:4b:b7:
09:c2:d6:aa:23:96:3f:96:7a:84:54:ca:53:0e:fc:64:00:b1:
3c:ec:af:a2:74:a7:17:f1:da:11:84:7a:74:58:6e:c3:2e:3f:
84:67:10:10:81:b4:5c:97:1e:d5:77:5c:25:1b:26:da:de:bd:
48:60:28:a2:68:df:39:64:4b:ca:fc:56:09:0f:89:61:cf:ef:
76:6a:c7:42:5e:99:21:c9:dd:be:64:fc:20:b5:83:db:36:16:
6e:cf:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:00 2026 by rpki-client