Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: YV6K1xxPqtbZ1/gwWgsnZhVTorOG9dvVjOMCt8HZY8M=
Subject key identifier: AE:9E:15:CC:3C:1F:9E:BB:F0:C2:B2:D0:A7:A0:25:50:44:4C:C8:7B
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 019E1D227BABF708FD147963D68AB8F68F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 133E
Signing time: Tue 12 May 2026 17:00:59 +0000
Manifest this update: Tue 12 May 2026 17:00:59 +0000
Manifest next update: Wed 13 May 2026 17:00:59 +0000
Files and hashes: 1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: ieNVHkS41o4ncEbohFllcJNGS69Za8qGYpJdlKEO9jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:7b:ab:f7:08:fd:14:79:63:d6:8a:b8:f6:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: May 12 17:00:59 2026 GMT
Not After : May 13 17:00:59 2026 GMT
Subject: CN=ae9e15cc3c1f9ebbf0c2b2d0a7a02550444cc87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:58:63:f0:3a:91:85:8a:45:aa:fa:86:47:
37:07:03:fe:c5:43:41:1f:98:62:48:ea:b1:4a:cd:
ae:1f:1c:0d:cc:10:e6:98:5f:55:f9:4c:0e:87:10:
29:bf:a1:9c:81:38:97:f6:5d:42:3f:06:95:c8:20:
e3:7f:fa:3b:36:5f:6b:e2:af:f5:69:f1:7f:82:35:
52:5e:0c:75:a4:39:ab:a3:ba:57:72:50:28:62:fd:
cb:88:75:83:f0:41:10:c0:97:c0:95:ca:39:43:eb:
1c:1e:eb:84:76:44:e8:53:0b:9c:1f:af:fa:b6:d9:
c9:f4:57:d6:21:d1:35:cf:b1:83:18:24:dd:bc:1c:
d6:96:89:1b:9f:25:92:ad:ff:98:9b:21:c5:2e:c0:
90:fa:08:e5:c5:6a:91:81:6b:4d:a1:10:28:e3:89:
81:39:cb:17:ff:1a:a4:84:d2:54:e5:8c:a2:85:8f:
9b:0c:1a:b0:af:9c:d4:0f:48:27:3d:04:68:e6:9f:
84:d2:52:c3:2c:11:18:ba:83:9e:ec:a4:25:e0:a3:
bf:14:16:a4:8a:52:c3:6c:c2:20:a3:8a:eb:8c:5b:
09:c1:c0:0e:b3:ca:cb:7c:9c:5c:13:62:16:b9:30:
fb:51:42:22:1e:dc:f4:7b:8c:21:42:c1:33:51:5d:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:15:CC:3C:1F:9E:BB:F0:C2:B2:D0:A7:A0:25:50:44:4C:C8:7B
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fd:cb:fe:04:61:c9:d6:0d:9e:88:f0:cf:60:dd:07:95:62:
d3:58:f4:43:5b:04:c1:79:74:87:af:c1:b7:cc:7c:31:17:97:
a9:21:e3:55:3d:49:80:e7:76:74:71:f8:ac:9d:17:15:74:e6:
9b:25:d5:bd:c9:de:83:6a:be:5b:61:ff:de:60:04:fa:1c:f8:
a3:01:30:46:5b:d3:3c:58:c4:6a:61:70:74:16:df:9e:05:8b:
d4:a9:e9:39:fa:0a:61:cc:72:7b:d8:c3:24:59:e4:4e:5e:52:
6a:a6:89:0e:81:e3:c3:34:4c:3f:ce:6a:d4:17:17:5f:06:59:
db:20:23:a3:43:fb:8b:38:e0:7b:b2:7f:9d:54:bb:84:41:dd:
81:a4:45:14:b5:97:d0:d2:dc:8c:29:76:e1:02:db:7a:1a:ed:
b7:95:5c:43:4a:ed:dd:7b:67:a6:53:33:2b:d1:be:1b:d8:c7:
6b:e5:9e:bf:36:d8:ea:3a:1c:11:f1:50:fb:83:64:3e:a6:52:
49:d1:d2:67:8c:0d:59:85:b3:1f:b3:08:12:93:be:8f:5c:e2:
a5:cc:de:df:ba:82:cf:8e:6b:ab:1f:78:e3:d9:7b:e7:34:51:
40:9b:9b:96:9a:85:e3:51:43:c3:69:27:55:f3:67:b1:99:21:
fe:1c:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:26 2026 by rpki-client