Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: EuxadWJA525RdYTBuDjm55c6NT3YzVeFgplWGev3A4g=
Subject key identifier: D8:6E:2F:14:25:C2:F1:B7:4C:52:E9:85:CA:7D:A7:8B:8A:0D:D8:57
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019D37529C8BF5840E4A3FE2D1C88F144FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 13D1
Signing time: Sun 29 Mar 2026 02:00:53 +0000
Manifest this update: Sun 29 Mar 2026 02:00:53 +0000
Manifest next update: Mon 30 Mar 2026 02:00:53 +0000
Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=)
2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: FGIfWYDKb5e/8HULKnGfQJCW6msNlZnWDos+RLFP1KI=)
3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9c:8b:f5:84:0e:4a:3f:e2:d1:c8:8f:14:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Mar 29 02:00:53 2026 GMT
Not After : Mar 30 02:00:53 2026 GMT
Subject: CN=d86e2f1425c2f1b74c52e985ca7da78b8a0dd857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:18:50:1e:99:0d:ca:69:6e:73:05:52:de:
3a:0c:d1:76:94:fd:66:1c:a1:93:75:8c:6d:e0:f7:
ba:ec:6e:68:c6:4a:cf:0b:62:15:87:0d:2e:8e:1b:
87:5c:db:09:e5:6c:29:c0:45:35:d3:b3:30:79:e1:
77:33:ed:d1:c8:d5:9a:0e:2b:54:e6:97:9a:98:25:
21:2b:68:aa:db:d7:df:61:9c:58:4d:7d:7e:59:ea:
e5:61:1c:fa:6f:f9:1b:3f:4b:5c:76:52:b6:d5:f0:
81:8f:80:c2:9e:90:a8:90:0c:a6:d8:e8:7d:60:73:
42:65:4e:67:8e:5a:85:b3:d4:b5:73:af:12:b5:7c:
30:ed:df:f7:a9:85:7a:62:dd:0e:cf:5d:98:4e:17:
55:1f:d5:5e:c6:16:c5:d6:06:e3:bb:e0:e1:cf:31:
c6:c8:3d:ef:f4:77:6c:1a:71:1c:5f:1f:f2:32:ee:
a6:d3:e8:54:94:bd:d9:3f:20:8b:05:1f:97:90:71:
de:02:d3:23:bc:7a:2a:e8:55:75:7e:25:08:b0:9b:
af:eb:4d:d1:71:8b:01:c8:53:74:56:9f:4a:22:00:
6a:a6:36:58:de:21:ef:30:d4:7d:bd:54:35:22:5d:
12:b6:e6:08:01:13:2e:93:67:91:ff:51:6f:43:91:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:2F:14:25:C2:F1:B7:4C:52:E9:85:CA:7D:A7:8B:8A:0D:D8:57
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8b:0f:91:c4:dd:71:d4:eb:47:7d:12:f3:e1:85:3c:92:0d:
78:a6:96:c0:a7:6b:20:42:b1:57:c9:a1:9f:ed:fc:99:13:0b:
35:75:03:b4:1c:56:6d:5d:00:05:ac:86:2d:29:74:33:90:30:
2a:a4:76:98:95:c2:5f:72:8d:2b:20:89:82:30:79:44:59:6b:
b7:84:31:55:34:b6:63:71:78:5c:f3:9d:96:2a:59:52:28:25:
55:07:db:f1:64:95:99:33:d4:9c:22:c0:b9:e5:e6:12:ba:47:
ce:67:d1:cd:a0:45:f0:b8:18:87:dc:f1:12:b5:7b:d4:ee:04:
3d:d8:69:51:c4:28:62:5b:28:2a:b3:55:0a:5d:d8:9c:6a:36:
2b:02:97:74:16:a8:be:2f:42:c6:d0:23:3a:8b:73:c4:12:38:
ed:b0:cb:7b:21:ee:4f:9d:53:1e:5b:6d:98:06:11:cf:b7:f2:
8f:58:04:3e:22:f8:ff:39:ec:bb:5f:a2:d4:f7:2d:1a:76:86:
ed:d2:72:01:30:36:ec:c6:27:7f:6c:e6:b2:b2:5c:2c:4a:c7:
fe:18:d0:62:3e:dd:b3:24:c2:b7:a3:be:ff:96:4d:65:1f:0f:
eb:65:21:31:ce:63:be:b3:ce:d8:4b:0a:1f:b4:7e:27:bd:8f:
4c:c8:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:43 2026 by rpki-client