Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: A+JRGdN4YCdZo/0jTUNCwDo4dxhT+/P1ijdV1/2e4o4=
Subject key identifier: 0B:25:68:D1:C4:6C:79:13:79:7D:7C:F5:60:DC:F4:40:FD:60:6C:AC
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019E1D59BC68FB35E1B82D794B63C82C0BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: F6
Signing time: Tue 12 May 2026 18:01:20 +0000
Manifest this update: Tue 12 May 2026 18:01:20 +0000
Manifest next update: Wed 13 May 2026 18:01:20 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: JEnsY5rt5nXdNeu7xq/w6y0YCc5nsaAc1On28oA1B6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:bc:68:fb:35:e1:b8:2d:79:4b:63:c8:2c:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: May 12 18:01:20 2026 GMT
Not After : May 13 18:01:20 2026 GMT
Subject: CN=0b2568d1c46c7913797d7cf560dcf440fd606cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:57:79:fe:e4:ab:c3:e6:dc:5c:a4:ac:86:
c4:2e:91:41:8e:1d:b3:af:e5:97:0e:60:e2:95:68:
7f:dc:a4:3d:89:e4:69:02:80:8f:a1:f8:ac:0f:81:
48:02:f8:e0:08:b7:67:9c:61:22:4a:bb:3e:d4:96:
a5:6b:09:2b:99:c6:c6:7a:78:d2:63:3b:03:07:c6:
2d:f1:27:6f:ae:ce:71:72:b1:28:91:6b:05:54:53:
f9:98:bb:8e:c1:62:ce:cf:40:fb:57:03:bb:8b:82:
51:3d:5b:1e:02:b8:3e:a7:63:cd:ca:1a:76:98:23:
6c:47:40:d4:32:83:a9:5b:90:a9:27:4f:07:a3:1c:
99:df:61:0f:25:53:8a:ea:e8:43:f7:cf:71:19:aa:
bb:84:4f:da:29:96:90:3f:dc:62:79:5b:44:16:90:
24:50:7e:75:dc:99:f5:f9:98:aa:b4:7d:12:f6:04:
c9:c6:9e:2e:22:fa:ab:fb:0e:54:0a:28:49:4b:3f:
87:c5:9c:83:0f:63:40:b9:f8:40:86:9d:37:70:2c:
ec:02:96:ad:d7:02:2c:fb:e7:be:44:5b:ca:a0:ec:
ca:50:1a:82:ad:c8:61:c1:c6:03:6c:11:90:85:5c:
af:f8:e1:6a:7a:4d:31:7d:40:d3:d0:66:94:ec:fe:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:68:D1:C4:6C:79:13:79:7D:7C:F5:60:DC:F4:40:FD:60:6C:AC
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:bf:63:c5:a5:11:15:64:bd:59:b4:f2:0d:77:26:23:39:
1d:00:4d:51:4c:90:fc:52:66:a0:89:95:42:45:6b:62:05:53:
b5:f3:36:d3:49:0b:a3:73:d2:55:48:33:67:75:b8:9a:c3:8b:
3b:cd:94:e0:e8:fb:3d:79:dd:1f:43:6b:5e:12:6e:be:88:d9:
7e:96:f8:76:2b:7b:41:b9:c4:50:51:7a:96:76:5b:13:95:9b:
6a:eb:83:0e:76:a1:fb:78:21:78:66:06:6b:92:0a:4a:c9:65:
ee:68:22:af:e5:d7:c0:e5:50:7b:bb:89:a8:61:cd:5c:d9:59:
79:85:f7:88:db:c7:3a:84:b9:64:57:48:11:4c:b0:68:9c:9e:
8b:a0:89:56:bf:3d:46:29:21:38:60:91:bd:f5:bc:98:57:bc:
e8:16:6b:05:e9:2b:5f:e3:62:a1:e7:7b:0a:c1:c3:a2:7d:10:
78:9f:1a:28:21:8e:a3:f9:13:2e:ff:1b:60:66:ab:2d:d0:9e:
d1:1b:d0:e5:e1:d8:91:aa:77:75:58:f3:2c:b9:af:11:dd:84:
13:70:3f:b8:57:df:3c:5d:06:30:d7:6a:fe:55:ee:56:0b:ba:
bd:9c:38:d2:28:ac:e6:ae:3a:0f:3c:46:7d:e5:fc:7d:4f:2f:
63:80:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:28 2026 by rpki-client