Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: 3sk3phjlelMlss/GNCR3zIaHcC0LQaBGAv2nspCSLA8=
Subject key identifier: EA:E2:E9:E8:B7:01:BE:51:AB:BB:54:40:29:59:66:6F:19:10:A9:41
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019D288452D0FB5D56F4E6422120FCE035E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1331
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: h91OW47pVUyG/QUt38S6Cw/sWyabgLKJuM79cnQRKpU=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:52:d0:fb:5d:56:f4:e6:42:21:20:fc:e0:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=eae2e9e8b701be51abbb54402959666f1910a941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:b3:57:a2:7d:4c:3d:34:bd:a8:cb:4f:e3:
e0:c6:51:d2:f1:e4:59:a8:1a:8c:93:fa:75:f3:db:
9f:6f:67:10:51:65:31:43:c5:7f:5f:9a:5f:63:e8:
2a:23:73:28:e0:0e:0a:90:20:08:21:3d:32:90:39:
7b:c8:ee:ee:47:c8:1a:b7:42:b5:5c:65:69:c0:c5:
ca:6f:f9:8c:3e:03:e6:1f:a2:04:90:59:de:3d:05:
82:4a:b6:a9:fa:7e:a4:41:d9:02:dd:cd:7e:07:96:
9f:44:8e:56:b6:96:39:81:a8:ac:5f:8e:45:3d:b0:
58:25:67:fa:6e:ed:05:99:54:55:0a:3a:be:a9:87:
46:49:27:24:c9:af:d0:a5:77:59:f9:a3:fe:23:f9:
0b:6a:8b:9c:4b:80:09:08:37:d8:f1:74:0e:e9:37:
a5:a5:fb:f8:68:82:94:da:5f:0d:31:78:12:6b:6f:
8a:fb:45:21:d0:11:41:ae:d9:42:12:63:c0:59:dd:
a2:0f:2e:b0:b9:f9:5e:0f:b1:2b:bd:38:82:27:e1:
bb:07:79:b1:98:94:d4:46:27:6c:9f:62:ca:dc:57:
c8:36:f3:0a:7c:99:a0:53:59:2a:ba:79:5b:7b:66:
2f:a0:ba:3e:df:1e:8e:18:b9:47:71:e6:d8:c4:ae:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:E9:E8:B7:01:BE:51:AB:BB:54:40:29:59:66:6F:19:10:A9:41
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:c2:c5:33:b1:ec:71:7c:2e:62:56:59:5d:ce:7a:ef:47:
d8:09:90:9f:16:97:92:d7:6e:5f:55:a0:a4:e2:52:3b:67:a4:
5a:6c:9c:73:ff:3f:fc:ca:4e:16:22:13:01:2c:03:b8:99:08:
78:b6:f8:a3:38:22:b4:72:2b:d8:22:ac:d8:7f:d1:c3:c6:3d:
e9:7f:30:e7:da:bc:49:64:a4:74:ee:d3:18:99:69:7b:94:a1:
42:a7:32:1d:ee:01:5a:68:2c:36:45:09:6a:2c:6f:0a:ba:e0:
f7:c7:35:42:e5:ff:36:81:96:f0:91:6f:87:3c:6a:63:ac:e5:
b2:20:15:99:ae:5a:f7:67:74:95:32:f0:33:59:38:2a:0f:4a:
01:96:99:bd:4d:ea:a1:11:18:85:5e:c5:19:f0:41:c7:68:3e:
0f:c7:7d:4d:33:81:70:d3:34:00:0d:5a:b6:10:db:4d:f4:4e:
2f:14:1a:76:43:b0:41:3a:2b:9d:a0:db:12:38:f0:d8:9c:c2:
73:80:c6:c6:b8:95:5e:82:f0:f3:b8:63:65:17:94:35:83:4a:
00:c7:90:3c:45:22:16:2c:72:98:94:2c:73:b5:a9:95:76:da:
be:e6:df:82:8c:bd:7d:00:74:b2:e3:6f:26:d3:4d:2d:7c:0f:
bf:d7:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:46 2026 by rpki-client