Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: X3StEnPYMB3qthAHBxh+cjpleZMMcrUXwsZ+CxFWU3s=
Subject key identifier: 5A:58:FC:22:E9:54:3F:6F:CA:7F:DB:BD:FB:EE:55:E6:1C:1F:6D:DC
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019D2627FF4945E2C7D9C07FD82161D63F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 76
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: tRTXtuLEcvVJr2VX5gjLNNSYdGFSigmRff8uJeYj4DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ff:49:45:e2:c7:d9:c0:7f:d8:21:61:d6:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=5a58fc22e9543f6fca7fdbbdfbee55e61c1f6ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:12:62:10:b3:21:83:2b:a8:c2:d3:27:08:
c1:ea:05:0d:39:e3:f5:bd:6f:41:96:04:be:fe:8e:
25:82:12:29:6b:fd:5a:ed:da:8c:47:df:f3:65:af:
8d:dd:9c:86:19:0b:96:76:04:81:26:a7:34:ff:58:
f8:6a:36:b6:5a:fb:67:2a:a9:1c:e4:c7:4d:f8:d4:
51:6a:58:1a:60:d0:83:ca:c2:85:9a:9c:35:6f:52:
86:32:f0:6a:d2:ca:d4:ff:3f:a0:83:b2:e3:37:11:
54:24:c4:10:fa:fc:26:1f:d2:b4:91:56:d0:c6:5c:
5a:15:b3:25:36:9f:c5:7f:76:fd:3e:4f:f1:0a:d2:
70:2c:5c:c7:08:b1:28:4b:1c:38:51:78:0d:4d:90:
c7:f4:48:b1:d9:ae:b8:96:d5:a6:78:0f:86:0c:84:
ae:6d:f4:5b:fb:91:d5:75:2c:b9:2c:b5:24:5b:fa:
3b:4c:43:d6:29:e2:64:f7:26:3d:d7:47:7c:45:71:
33:53:d5:d4:6c:78:f3:a8:6e:e3:6b:4f:80:54:65:
47:29:ed:7c:15:fe:1e:24:ae:f3:9d:c9:27:fe:d7:
17:62:33:6b:57:f5:be:42:dc:4c:d0:12:90:29:0e:
21:fe:55:fe:25:45:88:91:21:2d:8d:49:2b:23:50:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:58:FC:22:E9:54:3F:6F:CA:7F:DB:BD:FB:EE:55:E6:1C:1F:6D:DC
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:17:dc:0b:05:ae:95:1e:20:9f:da:23:47:46:d4:69:93:
89:a0:b2:fe:59:8a:a0:0c:21:3e:d9:6f:d8:6f:17:9a:f0:38:
30:7e:58:21:1f:5f:47:1f:01:a4:b7:36:ed:6f:a7:58:3e:03:
31:33:c2:a6:4f:14:b4:6c:c8:52:f7:51:5b:fe:b5:71:ae:8a:
bd:21:e1:1e:33:22:53:51:ef:e0:04:dd:9a:90:9e:55:ee:7f:
d1:1b:3d:57:33:97:3b:f8:c3:23:bf:ac:96:9f:93:91:7d:14:
a4:83:56:bc:7f:72:c8:52:24:88:a1:c2:b4:2c:ec:6e:7f:27:
54:5b:bf:bc:4d:1f:48:b8:26:b2:b3:cb:cd:90:7b:4f:f2:fd:
a0:6a:05:55:67:a2:6c:51:d0:e4:b9:86:5b:ca:b4:33:61:f0:
48:0e:4f:56:4c:08:48:51:93:b2:dc:0e:29:c5:ef:41:00:23:
b1:9d:6c:7e:41:a3:66:b0:ad:c4:cb:bc:47:ce:81:60:33:e2:
18:a7:e2:50:59:ee:a1:8d:39:ee:a0:dc:85:9d:9d:66:7c:15:
d8:43:1b:97:57:bb:e4:3e:2a:55:71:7e:e9:0a:8a:a6:8f:e1:
35:6f:c6:06:29:7e:56:f8:42:c1:51:cd:10:8c:20:b7:66:04:
85:5a:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:16 2026 by rpki-client