Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: 1m+PeRs8GrxZy0Ar4CGtbOTHs5DTmN97Ci/G7bnq9m4=
Subject key identifier: CB:E0:CD:19:23:1B:72:58:D6:64:33:27:DD:E0:0D:D2:27:A9:84:F8
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019D04E60934F4E0B6348C6DC09D14888031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 12FD
Signing time: Thu 19 Mar 2026 07:01:17 +0000
Manifest this update: Thu 19 Mar 2026 07:01:17 +0000
Manifest next update: Fri 20 Mar 2026 07:01:17 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: GEgxza8VGF+iA8gagH6eJ1Cs8DEi2N8F9S0Z2HwRN4c=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e6:09:34:f4:e0:b6:34:8c:6d:c0:9d:14:88:80:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Mar 19 07:01:17 2026 GMT
Not After : Mar 20 07:01:17 2026 GMT
Subject: CN=cbe0cd19231b7258d6643327dde00dd227a984f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:75:9d:35:6d:55:40:17:a6:f9:bb:4c:21:
1d:6a:c0:78:a7:34:e4:ac:8f:d3:1c:d2:ef:59:2b:
a7:fe:b1:42:96:06:3c:73:40:55:c1:0a:13:72:ca:
4f:a6:02:63:52:8f:c3:32:cd:d2:c9:69:0d:bc:07:
2b:4d:85:87:90:3c:84:1f:0d:8f:8a:7b:9e:c5:15:
ae:7d:5c:2e:0a:a1:42:39:2f:df:c4:78:a7:e6:27:
a1:d9:5c:5f:89:c2:2c:04:ce:81:3d:3a:81:1e:b1:
32:83:c1:aa:d9:b0:4b:84:5c:9d:eb:e1:8b:b8:b1:
b9:5a:40:53:14:55:77:3e:89:9d:dc:ce:c4:c2:1d:
40:dc:60:0b:6e:4b:b5:8c:e5:1d:25:a2:92:d0:a2:
b2:c6:a1:37:74:0c:23:74:c6:11:10:7c:cd:4b:ae:
6c:7d:c1:e2:1a:3c:cc:60:52:79:40:ac:62:8f:e8:
24:4e:65:8f:18:fc:97:b6:ed:05:3e:63:7c:3c:d7:
09:d7:1b:45:54:66:5e:7d:23:f8:f4:37:35:e1:7e:
b4:63:73:5a:58:2f:ac:98:37:a1:6b:ed:0f:5f:9a:
6c:bf:4a:73:02:a9:6e:c8:ef:2b:91:19:73:8d:86:
a6:53:9f:eb:85:6d:2b:60:c3:b0:40:5c:67:9a:46:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:CD:19:23:1B:72:58:D6:64:33:27:DD:E0:0D:D2:27:A9:84:F8
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:b0:51:46:70:6a:fe:af:bd:1e:7e:5c:f2:5a:96:2c:12:
52:8f:ee:4f:09:e0:54:ca:e8:20:a4:f9:39:50:a4:9a:90:16:
fa:49:66:d7:96:d7:94:85:df:e9:a4:da:03:5d:04:a0:6f:f6:
13:17:f1:f6:12:c5:4a:92:94:8d:96:14:73:4b:0d:8d:7f:7b:
a7:27:93:91:a6:67:e8:73:42:ee:0e:99:1e:5d:ca:85:6b:20:
9f:83:ba:17:37:c5:f5:44:52:a1:5a:b0:51:5c:32:7c:f4:f8:
57:70:76:c1:45:bf:ff:6b:f5:81:16:62:0b:88:b5:d9:7d:a9:
1f:90:80:b2:34:67:33:c1:32:28:c2:48:57:d8:55:bc:8b:8b:
aa:99:1e:08:a4:49:18:85:a0:8f:41:7b:5e:9c:84:09:2d:a2:
7c:bc:32:c2:03:da:37:0d:3f:fc:eb:ca:ea:98:18:fb:ec:ff:
4a:a8:e7:df:0d:ed:02:2c:0a:2d:25:03:5c:4a:f1:cc:d3:ce:
9b:18:c3:e1:95:09:47:59:09:7c:3d:55:95:44:b5:83:0a:6e:
eb:ef:90:fe:3c:93:9b:f5:6e:56:fb:10:92:84:17:1d:da:72:
36:37:89:39:7a:e3:bd:8f:55:6e:de:6d:7e:00:8b:62:1e:78:
b6:76:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:06:42 2026 by rpki-client