Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: lL+Gz6PoSC7ZOWnuzdbJXd4CZ4vno7bjx2NXXEuh+/o=
Subject key identifier: B9:78:4A:01:41:FB:09:8F:C9:63:5A:32:EF:4B:1F:EB:8D:FF:E8:8C
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 019D27E07077514ACA4D383FF92348E4FD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 12BF
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: GODUvDgSYXV7Hq4wX1PzVu2Tapx1LeHsS9eY3QetoE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:70:77:51:4a:ca:4d:38:3f:f9:23:48:e4:fd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=b9784a0141fb098fc9635a32ef4b1feb8dffe88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:21:62:87:fe:8b:1c:53:6e:74:d3:89:0f:
d4:40:06:f9:9d:62:c5:43:39:8d:c5:60:27:3f:77:
ee:da:e2:c6:06:d8:95:d8:8a:f9:5c:df:0c:5a:e0:
f4:f9:48:70:a1:99:66:a3:19:eb:d1:66:59:af:34:
24:98:ff:61:6d:32:e0:4e:42:bc:1b:de:25:63:a4:
13:06:f5:5b:7a:24:db:1f:d0:cf:b4:6b:16:17:98:
38:bc:b0:41:88:86:31:2e:ca:e8:9a:16:91:4c:6d:
23:2e:3a:06:56:cc:62:69:65:91:01:42:94:3f:c5:
7e:ad:e8:82:d5:8c:0b:fa:d8:68:5f:1d:2a:4a:d5:
36:d6:fd:1a:9c:bd:e0:17:d3:26:c0:7c:96:12:a2:
4b:4e:84:61:e7:72:07:26:16:63:5e:15:d0:4a:37:
ca:4f:0f:0f:41:a0:e8:c1:b3:59:24:ea:3a:5f:84:
df:c6:c6:7b:e1:e5:f8:4e:7d:30:00:3e:b0:1a:21:
35:12:51:d6:7e:a1:2b:87:e7:48:03:8d:23:a5:58:
f2:9a:a7:b8:bb:65:75:15:31:11:72:0c:fa:e3:5b:
e6:8f:59:18:e7:de:a2:ea:0e:14:57:54:07:17:de:
7d:44:18:66:9f:3b:69:74:2a:74:6e:2a:00:6e:82:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:4A:01:41:FB:09:8F:C9:63:5A:32:EF:4B:1F:EB:8D:FF:E8:8C
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:20:0c:5f:63:8b:96:51:f1:5b:33:94:65:36:72:8d:2e:
f6:da:65:83:c5:51:d2:12:da:bd:a6:bc:f7:94:39:d1:39:cf:
57:9d:ee:d1:ca:4b:de:74:01:5d:a2:e6:ce:e1:e9:b6:07:d7:
19:90:7b:48:61:f9:1f:c4:8a:2c:32:e0:f4:4b:4f:48:76:0e:
37:52:c4:aa:0b:12:d8:9e:22:c1:b5:7b:4c:7b:09:34:da:6a:
38:4f:f4:d3:fa:76:ff:62:7d:12:8f:42:bc:8d:22:63:63:9b:
f2:15:bc:9b:8f:bd:17:f8:15:d9:d8:dd:7e:06:2f:b0:60:21:
3a:15:40:2f:a4:d9:68:60:68:fb:53:f8:0e:25:fe:b7:5e:7f:
f4:86:25:c5:15:21:bc:bb:48:d4:ea:bb:83:a2:96:ec:4b:62:
5b:07:4a:96:36:f5:14:1e:98:de:84:b7:eb:7a:33:4e:73:fd:
ef:fe:16:46:cb:0b:64:97:37:05:ae:30:0b:c9:11:12:88:47:
f4:20:9d:8c:94:ca:e6:34:9c:4e:48:61:11:cf:f4:b8:78:58:
a1:ae:cc:99:32:9e:05:00:52:03:37:a3:7a:3c:3e:e5:cf:8f:
f3:6f:ab:38:6f:7d:8e:f7:e4:8c:88:f9:35:b2:79:19:da:14:
52:96:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:55 2026 by rpki-client