Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: ZijlyK2r4RTkrIpqpj4vC0Yh7h8ynKES1ZaFJz7Aoq0=
Subject key identifier: 61:F7:9F:D7:64:28:88:B3:1B:13:D8:70:FC:C7:DD:1F:D1:56:0F:34
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019E3072EBD6A93C280920E9CAAC54F99802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 1452
Signing time: Sat 16 May 2026 11:01:38 +0000
Manifest this update: Sat 16 May 2026 11:01:38 +0000
Manifest next update: Sun 17 May 2026 11:01:38 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: wXWggfmzRuxBiRsDwY5nnqrbKxoxrJUi6+8E2OfZdr0=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:eb:d6:a9:3c:28:09:20:e9:ca:ac:54:f9:98:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: May 16 11:01:38 2026 GMT
Not After : May 17 11:01:38 2026 GMT
Subject: CN=61f79fd7642888b31b13d870fcc7dd1fd1560f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:3c:39:8a:4c:e7:5d:1b:d7:26:44:5d:01:
b5:e6:a6:01:46:68:71:bd:58:a7:01:4c:4e:50:9c:
f5:b2:ad:f8:32:95:bb:c2:fe:66:93:5d:52:4f:ed:
16:87:52:d5:49:ef:10:7c:3d:07:63:c1:1b:fc:50:
e7:24:82:11:bd:8b:5c:92:18:f4:99:75:85:94:1f:
da:b3:c4:b1:16:21:6f:da:1c:03:19:f5:f0:6f:4e:
55:1a:62:11:94:5f:76:02:5d:56:f5:a6:0f:3e:cb:
10:3d:59:ff:33:81:01:1c:de:52:2b:2b:05:88:35:
af:09:98:02:15:f2:8f:64:24:b0:cb:05:c2:c3:96:
d1:d3:af:0d:eb:cc:a7:33:cd:3b:d7:43:e3:dd:97:
35:f7:a8:f0:ab:a2:31:c4:1a:3e:2b:aa:85:1b:d2:
51:64:b5:61:96:d4:84:a8:fa:58:52:57:a0:ba:e1:
43:1a:65:dd:13:b1:03:3c:e5:2f:1f:3f:37:6f:54:
ed:79:3a:1a:d3:b5:1f:b4:64:02:39:5d:4b:e0:f5:
42:be:c5:c5:6a:fa:76:ed:83:ce:54:80:fb:46:b2:
31:1d:c3:15:23:31:28:6e:fa:c9:6e:fa:c9:25:48:
58:d0:7f:12:53:17:ef:fb:ca:4e:81:24:23:b3:ef:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:9F:D7:64:28:88:B3:1B:13:D8:70:FC:C7:DD:1F:D1:56:0F:34
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:5b:9b:05:41:df:e0:19:7f:96:28:02:28:3c:f5:24:0a:
ee:ad:18:de:c7:f5:75:f1:1b:e6:cc:92:2f:55:a0:aa:e7:86:
0d:05:92:45:57:47:6c:56:6a:56:df:40:77:c4:68:af:d4:dd:
97:f1:55:36:d4:cc:aa:fe:8f:49:c4:34:a2:03:9d:72:2e:5b:
ce:f5:50:9d:97:25:7e:74:05:ac:f1:c2:8a:2e:ec:81:5b:f3:
56:62:99:96:56:32:b0:58:17:fa:b3:5b:a6:31:be:90:b9:87:
58:25:c2:a8:76:1a:cd:d2:92:9b:25:c6:71:aa:03:6b:ad:8c:
da:48:a0:66:07:ca:f5:60:3a:8a:bc:71:76:bf:4f:16:90:66:
e4:04:01:96:fe:1a:3c:1e:41:80:e8:3e:89:09:5e:a7:19:e1:
eb:43:32:40:66:97:d6:7c:62:11:a2:0a:cc:65:31:3d:42:64:
3b:97:2d:45:29:d7:0a:b4:4a:bf:78:9e:62:98:e3:6b:bc:ff:
86:51:a4:53:8f:52:29:dc:e3:d5:c1:28:41:3e:45:60:f0:01:
be:67:b9:fe:95:67:01:e6:06:95:e2:c1:1d:5d:d9:89:d3:bf:
e7:72:5d:b5:23:d3:76:e1:55:b0:de:80:d0:5c:20:88:22:67:
cb:03:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:53 2026 by rpki-client