Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: h5PnbcEfpCFrTeRiZf5m5HxV+qfszeqQNXLrBHqA5y4=
Subject key identifier: 5F:1D:C3:E0:2B:08:C5:92:2D:11:63:E7:03:EF:BE:8A:9D:6D:93:5E
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019D051D6F3E684CB8DA497FA586CADC214F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 093C
Signing time: Thu 19 Mar 2026 08:01:48 +0000
Manifest this update: Thu 19 Mar 2026 08:01:48 +0000
Manifest next update: Fri 20 Mar 2026 08:01:48 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: PBG/UJuuVfbN9WNnxMDOfmFP1Aeh04qrLHcyk7GBbRY=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:6f:3e:68:4c:b8:da:49:7f:a5:86:ca:dc:21:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Mar 19 08:01:48 2026 GMT
Not After : Mar 20 08:01:48 2026 GMT
Subject: CN=5f1dc3e02b08c5922d1163e703efbe8a9d6d935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:f6:71:44:e2:25:a1:5b:92:66:58:9d:b4:
a6:07:58:7f:aa:29:95:29:3c:1b:9b:fd:fc:be:27:
55:ed:84:52:d5:12:51:86:03:1c:00:53:44:91:7b:
f9:58:6d:e6:7f:59:71:7a:7a:c5:cb:fe:08:f0:62:
8c:2c:78:ad:4f:ee:2f:1c:c9:f5:fd:4a:de:2b:90:
18:08:e0:ff:42:08:65:25:5a:36:a4:d6:4c:80:35:
e2:39:d4:90:56:72:f0:5c:c4:cc:2a:97:c1:7e:dd:
c2:9f:6f:7a:8f:f4:96:cc:b2:84:da:1d:53:78:03:
f0:ee:a1:1e:a5:eb:35:97:b3:0f:b5:b7:fc:2f:d7:
30:04:48:ea:95:fe:8d:88:a3:e7:0a:04:48:33:35:
f4:73:60:78:cc:fa:5d:a2:e0:09:da:94:5c:5a:33:
f9:d3:04:4d:35:9c:17:8c:ee:5f:e8:3f:95:dc:2a:
e6:2f:34:65:68:2f:78:66:3d:02:88:de:7a:fc:d4:
84:fb:c4:63:8d:b3:bb:80:1c:5d:61:7a:84:4e:9b:
78:f1:46:56:42:2a:51:c4:83:47:5e:2c:ab:8d:53:
4e:06:c7:95:9a:c3:4c:66:35:20:36:b6:ea:80:3e:
12:d5:72:84:9c:bb:31:89:75:f8:43:2a:68:af:d7:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:C3:E0:2B:08:C5:92:2D:11:63:E7:03:EF:BE:8A:9D:6D:93:5E
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:a7:02:1f:55:ec:12:47:dd:a3:26:b8:db:f7:66:8d:d3:
e2:56:79:8e:b4:95:04:89:dc:a1:8d:3a:ae:2f:26:30:66:24:
61:5f:9f:33:7b:27:2a:d7:df:d0:b4:8b:6f:cc:3d:24:49:19:
74:f2:1b:b3:19:59:6e:d1:28:0e:f9:51:fd:c4:b8:7b:ee:57:
63:5e:87:ca:51:1b:aa:f2:3f:2f:30:20:7a:bb:18:7f:76:b1:
3e:b8:9f:1d:3d:44:a5:ef:62:09:69:86:81:9c:b1:b2:b5:6a:
56:6d:8e:ec:7c:90:2b:d8:e9:51:fc:4d:db:de:99:6e:9b:78:
d2:e8:7d:f0:4e:0f:90:37:e2:69:ee:07:81:68:6f:d5:62:a9:
99:a4:63:12:3d:ca:de:51:e4:d9:46:5c:d9:00:7c:be:77:d6:
ce:c1:df:ef:c8:71:a8:dd:19:40:ac:94:a5:6e:d9:ad:8f:4c:
70:f4:61:2b:8c:2d:07:2b:10:8e:2a:11:be:d8:93:c7:60:99:
98:98:87:76:5c:c5:2d:82:1d:e6:ef:76:f7:45:65:32:2c:95:
fa:a4:66:23:c5:23:fa:aa:28:dd:7b:57:cb:29:af:c9:ed:ff:
83:c1:77:96:49:79:1d:3d:68:ae:1b:e5:95:55:bf:8f:44:82:
98:07:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:51:30 2026 by rpki-client