Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: zYeGcD7+uCZIdurnOuwY4ye8kXJsrK+aV2oGXlt5qEc=
Subject key identifier: 49:2A:80:70:0A:1A:C2:2B:99:C8:7A:84:2E:A0:17:02:55:AF:F9:BA
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019F18305AC3049A7C14412ABA89B8B9F9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 14CA
Signing time: Tue 30 Jun 2026 11:00:49 +0000
Manifest this update: Tue 30 Jun 2026 11:00:49 +0000
Manifest next update: Wed 01 Jul 2026 11:00:49 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: uwfXLB9WzcixEi/gPW0Oy2yKT8crBdkzk5T3qhi6SWg=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:5a:c3:04:9a:7c:14:41:2a:ba:89:b8:b9:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jun 30 11:00:49 2026 GMT
Not After : Jul 1 11:00:49 2026 GMT
Subject: CN=492a80700a1ac22b99c87a842ea0170255aff9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d6:e2:cc:da:7e:03:4d:ca:4f:50:03:7d:96:
46:38:86:39:62:e0:85:f8:b7:98:36:25:af:22:52:
f6:25:23:de:d1:95:a0:38:81:9d:f0:c7:fd:aa:30:
c1:6f:c7:98:52:02:4a:11:f8:2a:71:fd:02:29:1b:
21:49:54:6f:69:51:da:93:92:89:15:c1:b2:0a:4f:
29:5f:2e:c9:54:07:25:70:24:9f:a1:e5:c0:71:bc:
25:fa:70:dc:ee:91:ad:76:d7:33:08:59:22:da:63:
12:f2:e4:46:cc:e8:97:a0:08:f2:b5:ee:95:62:15:
7f:b9:8b:f4:26:9f:51:d1:64:94:bf:b3:0f:d8:32:
93:a8:07:c4:08:b8:7b:c0:be:ed:70:27:e3:2e:1a:
4e:3c:61:70:27:21:c8:49:5f:94:23:57:ec:56:fd:
73:57:f9:0b:a7:7f:46:f1:38:72:f9:51:e9:95:86:
19:30:72:bb:c4:44:a9:27:11:a5:1a:68:8d:9a:cc:
82:1a:87:85:66:f8:0b:10:4a:6e:39:26:dc:d9:d6:
d8:29:92:d8:ac:6f:e8:9f:85:4f:62:b4:c5:64:0a:
82:38:53:42:c9:a6:68:f7:fa:0b:eb:3b:bc:2e:5d:
82:cb:18:04:9d:53:a6:82:be:34:e8:25:57:48:69:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:80:70:0A:1A:C2:2B:99:C8:7A:84:2E:A0:17:02:55:AF:F9:BA
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:06:7a:9d:34:e5:64:38:04:be:8b:1d:98:cb:16:83:2a:
cc:dc:7e:5b:a7:01:0a:76:f2:b0:42:ad:d6:e8:dd:07:d2:26:
60:fc:bd:fe:82:2c:ab:e9:f5:3b:b2:e9:28:7c:20:c7:31:93:
67:41:94:28:c5:0a:34:0d:bb:35:d1:23:a8:31:5c:b5:a5:91:
2f:e4:90:3f:bc:92:c7:05:cf:02:a5:24:cd:31:c7:be:50:4f:
9d:2e:80:0f:1a:16:78:38:85:13:00:bd:9b:20:9a:61:1d:4a:
a8:cc:27:5e:12:cc:2c:4f:8c:7a:2e:45:07:07:97:a6:12:7d:
0f:f3:d1:bf:a4:7d:44:7c:97:bd:6f:04:21:5d:67:eb:53:4e:
97:bb:3f:38:a5:ab:21:fd:3c:c2:6e:0f:83:a5:0d:3a:a4:1a:
89:0f:f0:f8:9b:d2:b2:13:26:63:c9:eb:94:31:4b:ac:46:e9:
a5:42:18:c8:02:82:fc:2b:fc:c8:90:e6:d4:4d:68:56:a9:6f:
96:db:09:19:df:0a:ea:14:bb:54:e0:aa:f5:09:66:4d:05:d7:
2a:01:03:bd:cb:ab:d8:1c:a4:a9:75:a4:d2:77:de:a5:8f:4a:
98:f7:76:32:68:e3:6e:fa:f7:f6:4a:5c:99:32:c9:df:3d:14:
cf:54:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client