Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: Cl31jvvJ+6aRsnFzCQ7Z0wpLZ4bs2QjINjhgaun+28s=
Subject key identifier: 8C:6B:22:C1:80:E0:B7:41:9A:7A:F2:3C:BD:CC:25:4C:2B:49:E7:A7
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019D2960DBF83C6A7D40D0A2377E630216CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 012F
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: N3Ug3BdnzZ7IEt+BXxBx4XaQKyA03J5tNJWPbl90rgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:db:f8:3c:6a:7d:40:d0:a2:37:7e:63:02:16:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=8c6b22c180e0b7419a7af23cbdcc254c2b49e7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:70:a0:a6:ba:e6:6e:11:e0:42:5c:64:11:
29:21:b9:a4:bf:f0:65:3c:51:0e:d7:23:03:c5:32:
10:8e:67:91:47:ce:2b:9b:83:d1:c6:25:40:5f:16:
60:1b:d9:85:d7:18:fa:ce:dc:7e:08:22:4a:b4:5e:
26:b3:11:1c:74:41:2a:1f:ed:5a:8e:7a:ea:5b:d8:
4d:73:0d:bb:bf:6c:87:4a:55:a2:2b:23:bd:bd:a8:
e1:71:62:bf:51:eb:43:c2:35:7f:06:57:b0:cd:cc:
e0:3d:a2:99:58:43:f9:66:3c:9a:a3:b0:c1:60:46:
a2:0e:f9:fe:3b:a3:98:6f:97:f3:2c:42:27:5e:f0:
a7:d7:00:d0:7c:bf:77:cb:42:83:6f:45:59:a4:08:
78:35:da:07:43:43:31:1a:9b:80:25:c9:9b:6d:06:
1d:b8:7f:71:2a:95:95:b9:5f:b7:58:75:7f:9b:9c:
9b:49:fd:2a:b2:76:ed:9b:52:ee:8e:20:2f:de:d2:
0c:64:ff:5a:15:23:0b:b0:59:a7:1f:22:1d:20:77:
8f:29:4e:b3:cc:0d:fb:71:ef:bd:a8:74:80:f4:d8:
cd:74:60:77:d9:f7:2d:df:14:22:2c:48:c3:74:6e:
13:3f:af:0f:57:1a:54:6b:e1:a9:96:14:25:cf:b4:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:22:C1:80:E0:B7:41:9A:7A:F2:3C:BD:CC:25:4C:2B:49:E7:A7
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3b:61:1e:c0:b3:bd:97:6e:37:c9:16:31:85:b0:8a:ad:22:
3b:a9:f7:bb:2f:e1:91:65:87:b8:0f:51:72:ad:f3:49:5e:8e:
7d:34:0d:b6:57:c6:23:62:a7:0c:56:26:19:db:4c:8f:5f:ee:
ba:be:7f:d6:4a:49:6a:a7:1e:18:e1:b9:12:3c:d6:af:16:34:
de:c7:3e:cd:76:3a:6c:6f:34:47:7a:42:8f:c6:ad:31:35:e4:
82:d6:51:ff:b7:ec:c5:b3:83:12:ac:84:97:e6:9a:5d:8c:cc:
93:84:11:76:f8:6d:e1:f9:76:c6:5d:65:c4:8f:39:5f:e4:cd:
0e:b8:c1:ea:c1:12:ff:5c:76:5f:e8:b3:be:f8:18:fb:e5:60:
dd:12:81:1a:44:7e:74:f3:04:f4:11:61:59:dc:39:e0:ba:96:
59:48:04:6a:33:ac:b6:69:ad:22:1b:96:a4:96:07:c8:19:83:
aa:a3:cf:b9:4e:91:19:5a:09:04:3a:c5:b5:d4:36:2d:4e:3a:
f0:6a:51:39:c2:63:e5:4d:f4:fd:7c:2b:2f:75:72:bb:bc:fe:
62:cf:13:68:bd:bd:5b:43:15:ab:55:54:50:e0:98:a3:7b:96:
b6:0c:d0:58:94:ce:c0:54:a2:20:6a:81:21:87:7c:d1:de:49:
e2:0a:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:16 2026 by rpki-client