
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: 9U18ronZwdPASmGSQQvyvkjumxtKqIVPRmENwEu6jZ8=
Subject key identifier: 25:59:FD:FC:44:60:08:C2:35:35:84:B7:46:52:E8:5A:72:EE:91:0B
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019F8E348CD057789A525A93DC1050A8E7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 01B5
Signing time: Thu 23 Jul 2026 09:00:36 +0000
Manifest this update: Thu 23 Jul 2026 09:00:36 +0000
Manifest next update: Fri 24 Jul 2026 09:00:36 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: m5D6sDlUM2UjEk+1hyb+AT4d6muFo+T1pn87hN672II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:8c:d0:57:78:9a:52:5a:93:dc:10:50:a8:e7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Jul 23 09:00:36 2026 GMT
Not After : Jul 24 09:00:36 2026 GMT
Subject: CN=2559fdfc446008c2353584b74652e85a72ee910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:b6:30:69:b1:3c:a1:f0:41:e3:6c:95:1c:
a5:fe:c1:75:25:48:cb:6f:6d:4e:9e:be:0f:b4:1c:
05:3a:64:20:18:81:32:2c:7f:a6:6e:e9:ba:27:84:
3d:c0:b3:f1:88:a0:24:65:26:74:af:56:59:14:db:
74:bf:b0:59:9c:cc:48:bd:af:43:1c:d0:d6:b5:27:
3e:17:fb:22:2a:e5:bc:22:2d:98:7d:fb:7d:0d:5e:
e6:78:40:83:55:ca:3a:c9:64:6b:17:a5:7c:fa:9a:
36:f9:c7:ff:fd:1c:5c:16:0c:4c:1b:bd:51:52:c9:
27:93:a5:e4:42:f5:9a:63:e1:58:88:d6:fc:a0:06:
ff:0d:2f:f5:69:13:41:2a:71:2f:aa:48:1f:af:e8:
46:0c:f0:76:bf:f5:c1:70:79:e3:6d:7f:43:62:bb:
da:1b:7c:87:7c:81:43:23:c6:db:59:14:03:fd:7d:
18:b8:36:38:a2:e5:f7:d3:c4:d2:69:bc:fe:3e:7a:
cf:d9:e2:4a:55:ba:bb:4c:1a:03:cb:aa:55:f4:45:
a9:39:27:4c:02:59:8c:1c:0b:03:c5:5e:d3:03:6c:
09:a5:74:dd:92:ba:74:b0:b1:4f:61:70:1e:9c:33:
b1:bb:95:2e:25:43:ed:7a:79:4e:d6:f0:6c:a0:36:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:FD:FC:44:60:08:C2:35:35:84:B7:46:52:E8:5A:72:EE:91:0B
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:50:45:55:b7:cc:c2:c1:46:e7:a6:f6:e9:88:85:25:f6:07:
d6:3f:7f:87:cc:e1:11:8f:04:9a:11:ae:90:8b:b4:e4:ea:41:
c9:0a:e9:a1:28:e6:06:9b:71:e9:7e:21:5a:37:6f:ce:33:a0:
58:48:5e:6f:76:d5:a0:9c:af:0c:93:a2:72:9d:a1:ca:d5:0d:
b4:20:e0:76:c4:92:3b:e1:21:b8:97:14:60:1a:7e:9d:1d:3c:
89:7c:c9:12:64:a4:0a:13:68:03:1d:d2:5b:ba:db:9f:f1:8f:
0c:a6:35:be:f6:0a:3d:d2:2b:0a:e1:16:6b:89:1b:79:74:71:
46:c0:7e:3f:34:64:39:3b:8c:0e:1f:ce:95:a9:e5:f6:f0:b8:
1f:d4:71:eb:ed:bf:30:9e:3b:da:39:9d:8f:69:bd:6e:d7:46:
8e:e7:b8:b8:84:bc:7d:ff:2f:28:39:9e:f7:7b:16:41:c4:b4:
d3:e7:56:18:79:64:65:23:26:cd:1a:5f:2c:b6:a7:0c:6f:90:
78:fa:b3:99:94:c7:9f:ec:fd:46:44:6f:3a:89:4b:24:e8:0a:
8f:d1:0d:a7:e3:9a:0a:d9:bf:0c:c2:5f:04:aa:e7:c0:35:22:
c9:7f:41:d0:6a:fd:1c:7b:26:3a:f9:69:6c:ec:f8:11:33:cb:
0d:37:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:38 2026 by rpki-client