Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: zvH98zhBTv1Gs6Pooy6LK4XZ73KcoC2CkhzIyOPb6PI=
Subject key identifier: CF:2C:B9:EA:0A:99:5E:F8:AA:2E:27:C2:9E:AA:96:63:15:CC:3F:BF
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019D2A72A1111146534CC8ECA64B7EE03690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0D1E
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: T2JIJaf4oZX7QM0PgFM6PU789QBYJf+IenqBBV2MSVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a1:11:11:46:53:4c:c8:ec:a6:4b:7e:e0:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=cf2cb9ea0a995ef8aa2e27c29eaa966315cc3fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:80:ec:d9:a2:52:6c:26:61:b4:67:55:49:
b9:50:4b:e1:7b:26:8f:97:2f:6a:9e:10:50:70:1d:
c9:2c:80:d1:9d:5e:d5:91:fb:93:a8:7b:c7:b6:6b:
3e:bc:20:7f:d5:01:14:b0:3d:2d:91:0a:10:4f:e3:
9d:a0:5b:e2:97:58:07:bd:90:3e:0b:48:90:35:ed:
27:33:be:66:79:d3:d0:4d:8d:ae:47:49:85:1a:5b:
e9:5e:41:c8:c1:2c:c4:1f:17:ee:37:28:b4:18:a1:
8e:28:c5:93:d4:7b:7a:6d:e6:a5:d2:98:11:eb:d4:
73:15:b5:68:f0:bd:bb:37:51:ef:1e:59:15:c3:ec:
34:e6:df:78:df:da:8c:67:7a:3c:a6:8c:fd:3c:2e:
a7:c4:cc:b3:06:6f:2a:39:06:50:9b:ca:6c:f7:95:
49:17:e8:51:4c:b1:8f:dd:c6:2d:0c:cd:d7:00:90:
8c:de:5b:be:7b:be:35:35:b5:92:1f:05:f4:db:00:
89:d7:90:e8:95:fc:f7:42:0f:c9:9e:a8:28:42:f6:
87:6b:07:a1:d5:e9:32:73:9d:1e:0a:0c:6c:14:91:
3e:07:0d:18:6e:b5:81:30:79:b0:2e:11:f1:22:39:
c7:3b:29:53:d1:9f:50:4a:89:45:a5:5f:88:61:26:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:B9:EA:0A:99:5E:F8:AA:2E:27:C2:9E:AA:96:63:15:CC:3F:BF
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ed:df:a6:05:de:cf:9d:27:a7:4e:e8:10:6c:b3:02:24:e6:
2c:2c:1a:82:d5:1c:41:03:4f:0e:58:61:bf:e6:98:b5:24:f3:
75:bc:09:95:f4:7a:07:eb:0b:e9:d0:05:fc:5f:22:25:e8:d4:
4c:9c:09:b2:a6:7d:2c:14:79:cc:37:58:7b:4b:59:53:ae:a3:
87:8e:43:60:65:a2:ef:ab:3f:d4:d0:4a:24:f9:e6:33:60:01:
97:11:af:e3:36:13:13:0d:fb:7b:5d:a0:3b:f4:b2:ab:15:05:
06:8e:3f:4d:72:65:99:13:e8:ab:6d:e1:bd:3f:ab:bc:c4:61:
b8:c3:c3:42:31:b7:c7:f5:14:08:b1:cf:c6:86:07:c4:a2:a6:
bb:e5:f5:b4:b7:14:67:0d:8b:98:d8:72:e9:1a:ae:b9:1e:c7:
3d:b8:69:5e:1d:5d:f8:44:54:b8:4c:42:62:f8:14:7d:e7:f3:
44:81:87:99:4e:14:b9:c8:05:ee:1e:ee:af:95:14:f7:2c:ce:
dc:da:fe:67:88:dd:c4:9f:ef:7c:e1:f3:99:fc:fd:f5:85:55:
e5:bf:00:5e:a6:99:eb:59:0b:c3:3d:c7:c1:a6:00:d2:53:dd:
65:28:34:71:1e:84:68:f4:b8:55:7d:f6:3e:28:52:d1:f2:cd:
22:8f:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:20 2026 by rpki-client