Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: VC0AF6XGeOy1FsIZ3JpXznz8UHM82n5J+5pQCoBmleU=
Subject key identifier: E1:E4:D6:F3:87:0D:B5:F8:48:E4:B0:0C:6B:BD:12:B2:90:AE:6C:1B
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 019D25F202D6222012822A35297AC7862BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 12BE
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: fkW8eeFSfip7bOlmoOBq/IUEcLy9BgAOx3c2OJH+Fz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:02:d6:22:20:12:82:2a:35:29:7a:c7:86:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=e1e4d6f3870db5f848e4b00c6bbd12b290ae6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:77:6d:72:70:c0:6c:9e:7f:15:00:09:8d:
42:8d:38:ac:b7:55:0e:85:99:19:3b:e5:37:58:c0:
a7:56:3e:58:7c:7b:e4:0d:60:54:22:83:a5:dd:1e:
66:24:4d:2b:e1:bf:21:a6:11:06:84:c7:32:5c:39:
a9:56:ee:b8:ed:4a:4b:d5:d8:e8:85:1e:95:ac:26:
21:34:f4:5b:7a:3c:40:32:8a:35:f3:26:2b:af:a3:
67:06:a9:b0:36:e3:c8:9c:e9:22:7e:fa:4a:28:01:
93:75:28:df:cf:bb:56:65:16:06:ac:66:f9:fe:b3:
bd:c5:17:3f:f2:4e:90:21:37:10:ea:a9:9c:f2:59:
f6:a7:c6:b6:ba:14:61:49:bb:04:cc:aa:f0:4c:ad:
c8:2a:b1:6e:ac:23:67:7d:f7:5f:58:0e:ce:17:97:
3b:57:6f:96:21:78:a6:0f:54:d5:8e:b0:0a:63:c2:
fa:52:ee:30:0d:3c:5b:05:47:88:4e:5a:6b:ea:7f:
aa:59:90:4f:38:7d:7e:32:2b:dc:00:05:97:65:d9:
03:ef:05:90:f1:99:45:32:e8:f2:94:f6:29:40:99:
b8:02:83:c8:22:88:bd:42:2d:1c:df:bf:17:66:08:
c7:5d:03:d3:d1:c0:37:a2:7a:b8:3f:aa:3a:17:17:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:D6:F3:87:0D:B5:F8:48:E4:B0:0C:6B:BD:12:B2:90:AE:6C:1B
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:95:e7:2f:c2:58:11:c4:0c:94:b1:0f:b5:31:95:c5:88:
fd:33:6d:a9:87:4a:ed:40:42:43:d6:02:86:ba:b9:8e:e1:4a:
44:98:22:cd:40:a6:51:6b:a3:f0:1a:b5:7e:9a:e8:19:91:eb:
54:04:f5:05:f7:8d:0e:bf:71:65:5b:83:cb:ee:34:1d:b7:b6:
9e:93:14:65:04:5d:9b:12:11:e1:40:d9:4a:9a:a4:56:b5:72:
7a:3d:5a:55:c8:06:f7:12:3f:f2:f5:9d:39:c6:c1:e2:fa:68:
83:79:36:46:f6:db:28:7c:47:a2:45:9c:58:58:84:30:ec:b9:
a1:a3:1f:f9:52:ba:57:f0:26:37:80:d6:4a:96:d9:f9:c6:8d:
4c:91:50:f8:a8:54:be:b1:5a:0c:1c:db:77:cb:dd:61:bf:2c:
db:10:e1:6a:c5:57:75:8b:ab:c8:1a:89:9d:bc:43:91:78:ce:
b3:0a:99:fb:c8:4c:00:ba:8f:13:73:e9:98:00:13:ed:2e:60:
57:b5:34:ed:80:6c:01:fc:a1:b7:a2:45:e5:a1:74:a7:dd:c7:
8c:b9:c9:79:1a:93:90:76:19:a6:e5:37:c6:f0:0c:03:6f:a8:
db:1e:6f:4b:68:cc:ce:ac:6d:18:10:9f:8f:b3:63:24:30:f8:
3c:ce:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:48 2026 by rpki-client