Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: qiqj2ZhAUmO5kuFdeWDy0mBT0yTUn1yuGe7ylESggf0=
Subject key identifier: 89:2C:17:BC:AB:EC:64:5C:DD:BB:FD:3D:22:0C:8E:11:49:B1:23:38
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 019D26282EBD2CB661F2962AB156F4A1688E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 0257
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: MuW5rw0q2UNYeIML38bqd8J81vfoSxA9bvXp1GkKCww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2e:bd:2c:b6:61:f2:96:2a:b1:56:f4:a1:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=892c17bcabec645cddbbfd3d220c8e1149b12338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:aa:70:ab:ab:66:2c:60:49:30:2f:4a:62:
df:6d:b6:79:d9:8d:8a:6e:89:ea:d1:2b:b6:b9:d4:
81:40:75:a6:21:72:f3:09:86:96:71:4d:2d:22:6f:
a6:26:fe:9b:b2:bc:a3:b0:ef:69:48:a0:16:39:86:
ce:b7:b2:26:d7:13:27:65:50:10:11:27:d1:2c:d2:
7b:84:6f:ad:93:95:4b:e4:d9:2b:4c:65:2d:34:c5:
1e:65:e5:05:f4:a5:27:f4:5e:7c:93:92:92:cc:21:
d8:c7:cc:da:11:bf:f3:97:e4:1c:5d:11:f7:67:2d:
87:3c:e7:62:f2:72:ab:db:45:73:f0:d1:ee:c0:8c:
ef:8b:52:b8:92:e6:b6:71:9d:fc:c6:09:a7:a1:9c:
33:e0:5a:0a:ed:b6:c9:7e:b5:8f:9b:75:e0:88:5b:
29:11:8f:27:3b:88:a5:81:ef:86:94:2f:7c:47:b0:
be:b5:7a:28:93:11:79:e0:6f:2b:d8:80:de:fb:49:
b7:fc:a2:6c:bc:5b:35:c8:6b:dc:44:8b:a1:04:8d:
f6:7e:8d:ee:92:58:c1:e6:8f:76:31:67:40:95:87:
a7:98:10:b6:0f:f0:1a:b4:ad:a5:b2:c8:95:3a:3e:
e8:b1:f2:bc:64:27:a9:2f:50:e0:24:a2:25:96:b7:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:17:BC:AB:EC:64:5C:DD:BB:FD:3D:22:0C:8E:11:49:B1:23:38
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f4:dc:84:29:92:2c:2b:c1:48:51:c4:72:8b:81:0b:e2:89:
58:f6:13:fe:0b:3f:20:61:90:d1:36:58:f3:58:87:53:bf:10:
03:9d:dd:b0:da:ff:62:5d:9a:a4:2b:47:5d:ac:73:a6:b1:bb:
9c:11:f5:50:49:9e:a4:e6:be:8f:c2:57:84:f2:41:cc:45:8a:
71:bb:dd:59:b7:e1:8b:7c:ab:9f:b9:61:c3:6d:b4:c6:26:07:
49:52:84:2b:75:2c:22:a9:bb:87:da:75:b1:d2:1e:d1:4d:ed:
31:17:0d:9f:f6:c7:95:89:cd:f3:c9:4a:54:14:af:12:fa:e5:
ad:f3:03:3e:cd:15:ac:81:a5:23:4c:a0:75:0e:c6:2d:f6:04:
52:73:d4:29:be:c0:c8:06:a6:da:a6:ee:c8:b9:cb:1a:18:8f:
84:d2:3c:f1:2b:13:78:f2:3d:ce:76:93:8f:ee:4a:c3:ce:da:
a8:3c:37:6c:0e:4b:21:29:49:df:4e:39:fb:f4:88:f6:15:90:
18:62:22:ca:79:6c:57:68:46:60:3e:7e:bf:2a:2d:38:1e:1f:
8b:6e:7f:cf:38:63:5b:77:63:60:52:9a:66:2f:2a:24:a2:28:
de:72:e7:66:aa:88:18:e7:be:e4:1b:34:26:cd:cc:91:42:38:
d5:15:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:09 2026 by rpki-client