Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: djzMxvhlwbu5N84ckW50vlmaa+4IaQGsAFxWTZGjuuc=
Subject key identifier: 02:F8:49:F8:53:40:8E:F8:7C:12:A4:09:3A:BD:ED:5D:8C:5E:9D:8D
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019D3376419229AF03AF90B0953DE36F9207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 0954
Signing time: Sat 28 Mar 2026 08:01:21 +0000
Manifest this update: Sat 28 Mar 2026 08:01:21 +0000
Manifest next update: Sun 29 Mar 2026 08:01:21 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: qgAdUHiHjHzU5C5UyVeZm2ebAPKskIGOyoapUgz3uLk=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:41:92:29:af:03:af:90:b0:95:3d:e3:6f:92:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Mar 28 08:01:21 2026 GMT
Not After : Mar 29 08:01:21 2026 GMT
Subject: CN=02f849f853408ef87c12a4093abded5d8c5e9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:75:2f:c4:89:6f:a4:79:e5:d4:dc:b0:1f:
21:3b:79:73:fa:b9:66:57:78:b2:80:0e:17:71:05:
02:e4:ae:df:89:5e:20:80:d5:31:5e:ee:40:c8:3c:
0f:f1:e8:d7:0e:65:01:15:06:6f:d5:b1:8f:53:e2:
48:f8:20:32:b2:96:3b:e2:07:0e:62:e2:5b:39:4c:
c7:c0:35:0c:56:f6:a6:8b:dc:fd:40:be:96:67:ab:
02:ce:d1:04:53:5f:dd:fc:68:be:fd:5d:f8:54:03:
17:7a:f0:8b:6f:aa:be:b4:62:e3:41:1e:59:d1:67:
f0:d0:7f:90:c3:11:a7:a8:7e:f5:fd:20:04:4e:05:
a8:89:ee:55:c8:e3:5b:8e:9d:20:22:fc:8b:ff:03:
2c:83:e5:0d:1e:1d:36:69:a2:6f:27:1b:6a:8a:fc:
6f:64:48:bf:82:fb:ff:08:5a:e6:bb:64:ed:9d:5b:
f2:d9:23:a1:1f:92:44:eb:a4:27:c1:b6:77:33:43:
67:31:5d:12:e2:ef:37:85:34:04:9d:3d:62:fb:aa:
5d:5b:b7:58:53:08:94:43:95:e1:aa:08:cd:d3:1d:
cf:e0:0f:72:c2:16:5b:de:3b:3c:d2:8d:64:b1:e3:
59:7a:d2:87:7e:63:37:27:10:d7:ad:cc:a3:c1:f7:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:49:F8:53:40:8E:F8:7C:12:A4:09:3A:BD:ED:5D:8C:5E:9D:8D
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fb:75:56:38:e6:ac:ff:c4:92:23:36:49:7d:72:15:ae:b5:
ea:38:52:3e:9c:8c:ce:d0:23:0a:28:7e:e6:91:22:35:99:0e:
7c:e3:98:de:28:22:b3:63:56:3c:d8:bf:18:80:fe:17:ea:a0:
f9:15:e1:68:02:91:d8:63:9c:7c:27:27:02:ac:9c:b3:5d:2d:
f6:1f:6a:54:00:da:a7:56:53:5c:75:a4:84:64:f8:87:64:f9:
63:d3:ac:d6:99:b0:53:e7:a9:cc:18:e3:ee:52:3d:2d:5a:82:
b4:20:e6:07:82:2e:26:ba:e3:94:90:78:b2:9e:de:ac:d7:a6:
31:d5:c9:3f:f2:60:82:81:39:df:00:01:24:de:dd:50:dc:aa:
3d:cb:29:2f:6b:3d:3e:da:88:33:6b:ce:a7:73:7e:ea:f1:ab:
8f:58:a2:00:f3:ce:8e:39:09:9a:a2:92:49:b2:a5:85:e4:86:
9e:cd:2d:2f:20:39:19:ef:a3:91:a2:5a:3e:7d:be:7e:95:36:
50:88:45:04:9c:e6:da:51:7b:c7:0b:0c:e5:31:64:5c:4f:f0:
7f:0d:4a:b3:aa:b6:db:29:14:44:88:c1:1b:38:e2:18:e2:37:
c3:6d:41:7e:bc:83:49:e2:3a:20:df:3f:a7:8a:d5:88:b1:75:
de:e5:f9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:01 2026 by rpki-client