Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: eWhKJnGnQdtdQLedJSQyqZfIzyXuBMnA4O0DfhCMFJc=
Subject key identifier: 0B:98:8F:6B:2D:0F:C5:10:22:65:31:A6:10:70:D1:52:3B:69:5C:21
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019D277209391C6C3068E2B2D0950415328C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0FC1
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: +wdrNgS6QPVDQ9ux4RuhLyXBVqcO/6pkHuswjfCV6PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:09:39:1c:6c:30:68:e2:b2:d0:95:04:15:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=0b988f6b2d0fc510226531a61070d1523b695c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:d2:15:fb:b4:89:e0:56:cf:f5:e5:c5:58:
d5:66:d1:f6:f1:1c:09:ce:4a:7b:49:4b:e1:5e:0a:
39:c0:a3:70:a8:ef:b5:3e:3a:4f:76:0d:1f:99:b8:
66:f9:23:90:b1:c2:d8:29:c5:d6:8c:4a:fa:6f:94:
f7:ef:a8:6a:ef:b1:82:a7:3c:9d:25:a7:fe:c8:89:
91:9a:63:8b:c4:34:e9:13:f8:78:d5:2b:50:28:ed:
e2:7a:8c:e8:b0:e9:2e:fb:56:84:80:23:89:62:1e:
08:6e:2f:f7:f9:cc:d5:88:a9:c1:f8:1f:a5:df:f6:
26:b3:a6:7d:f8:57:0f:46:8f:75:e1:aa:2a:9f:9c:
bb:e7:ee:4c:1e:da:83:f8:c4:ad:56:e6:e2:ef:68:
43:dc:b2:f6:1a:ca:84:29:4b:54:19:c4:25:ab:7b:
6d:46:b8:ab:b8:2c:5d:ee:53:ce:77:e7:76:b2:30:
b2:6b:4b:78:88:e6:02:da:72:26:1b:96:46:29:ce:
ca:18:d6:97:81:b5:51:db:1b:1f:c0:07:8c:42:b8:
e7:c5:00:59:92:52:21:2b:3b:41:07:b5:ad:75:92:
bd:bc:18:19:82:1e:0a:c4:82:d4:47:72:e5:8a:49:
2f:cf:27:b5:5f:b8:80:f4:1e:ee:06:ba:35:e7:82:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:8F:6B:2D:0F:C5:10:22:65:31:A6:10:70:D1:52:3B:69:5C:21
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:10:74:70:f7:91:42:33:c5:71:02:90:ac:07:08:ab:a4:4f:
3d:6f:99:33:90:eb:a3:71:2b:6e:e5:b6:7b:82:7d:bf:59:c1:
45:3d:51:bc:f7:b9:20:3e:f5:ae:33:a6:b4:3d:d2:ac:34:50:
6e:8d:82:8f:ae:27:ab:3f:31:f3:51:cb:04:38:32:cc:27:22:
56:30:32:90:77:c7:d5:78:8d:b3:46:b4:3e:d0:54:a5:da:19:
84:c6:5a:92:f2:2c:67:b4:32:24:c2:f3:4f:f7:77:a6:f7:e7:
10:3e:64:16:f3:5d:c3:0b:67:58:04:59:c5:1a:56:5e:f9:67:
3d:95:18:ba:9d:82:16:da:b8:eb:96:98:de:34:03:16:36:5f:
98:35:36:af:b3:21:59:ea:e7:2d:c9:94:2d:6f:04:ab:a3:13:
46:eb:50:c3:62:f3:9b:36:8b:5f:99:c7:39:31:ce:47:34:6c:
80:9b:2f:a3:4f:fd:8a:77:8a:35:bc:87:f6:3a:f6:90:f5:de:
86:81:87:d6:0f:86:56:8a:78:01:b0:69:7a:c6:66:dc:d0:bf:
0b:39:5e:39:59:53:12:8a:c2:31:54:a4:cd:7a:0b:60:9f:e5:
0f:0f:fe:f3:db:27:40:fd:db:7e:e7:7b:4e:83:18:73:74:32:
2f:ff:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:10 2026 by rpki-client