Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: kTYRy8N80xSgAqIwzZxt37ZbrxALOVHHKVvr5yEQc9s=
Subject key identifier: A0:C6:1B:0A:C7:A3:36:A2:A8:3A:68:13:54:B2:73:3E:E6:3E:31:25
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019D37F6E851AEBC70BFFB292BA0EE42D4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 02FA
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: 4diahVLzyWADsafzMMkqiTBhFG0.roa (hash: riwko2/K4Xljlw5gsbraTspcz3PMLisMleLPiCJZSh0=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: +qRCZ0Y5mgAQvskxUzz/Cv0yoK4JX4/F9mjjpESkZzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:51:ae:bc:70:bf:fb:29:2b:a0:ee:42:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=a0c61b0ac7a336a2a83a681354b2733ee63e3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:09:6a:2b:7a:b3:f7:b2:b2:29:b2:81:d8:
f3:89:e4:37:9c:d1:86:36:41:27:cf:00:16:22:3e:
92:74:3c:9e:1b:b8:c3:eb:8d:02:64:6b:77:7a:10:
a3:ef:49:36:17:6a:37:f4:a9:41:c1:01:df:bf:52:
40:99:55:71:b9:f6:94:ca:e1:4b:be:7b:b2:9d:d9:
03:fe:cc:26:10:9f:0b:5e:55:23:8f:a8:d9:90:ea:
77:df:a9:2b:0f:de:4f:1a:7b:a7:75:21:ed:bf:4b:
df:7d:86:96:f1:73:d5:4b:f5:9d:ad:10:d8:0b:0d:
7d:07:c9:c9:f8:45:36:d6:11:11:9a:2a:cf:23:76:
8c:78:ea:9f:48:45:c6:29:d1:2d:8d:48:a6:43:09:
73:bd:6e:5e:1f:e0:7a:6e:50:bc:1d:1d:a1:fa:55:
36:37:49:e1:c2:d0:18:d0:58:1c:2c:fa:b3:17:3b:
ea:93:b9:21:4d:81:8e:a4:41:2e:9a:55:b7:cf:2b:
fd:35:c7:b5:dc:8c:21:66:b0:31:86:66:5d:b6:d7:
6b:62:c1:c8:1c:c8:98:ea:e0:19:d1:c7:ee:18:a8:
a5:d4:30:3d:28:ee:e6:9f:2e:58:64:b4:6a:06:ce:
0e:91:23:ce:d0:86:5a:f8:5a:17:5e:74:25:70:db:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:1B:0A:C7:A3:36:A2:A8:3A:68:13:54:B2:73:3E:E6:3E:31:25
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:d0:49:66:66:68:38:27:2a:6e:e3:b5:58:b1:f8:1b:f2:
c7:05:db:42:68:1e:4c:99:0e:f7:43:2b:f7:cd:a8:7d:35:ef:
ec:e7:23:4c:eb:1f:ef:ab:26:a0:1b:b0:ec:cd:c3:dd:ac:fc:
ee:52:86:93:8b:b0:e1:d9:99:20:b3:ff:82:22:c8:c5:3b:c8:
bb:0e:67:26:75:fc:c9:8c:28:89:77:ed:cc:7b:8b:ab:bb:03:
a9:d0:60:75:66:03:17:25:73:f4:9a:ad:22:2c:84:b3:94:a0:
c6:0b:33:07:d5:e2:31:55:71:68:f1:e4:fb:34:72:ac:82:b3:
e6:06:ed:e7:6d:81:2c:5d:70:7a:aa:93:0a:ab:0e:e1:42:d7:
9e:1d:6c:c2:5a:af:e3:1b:07:f6:c2:79:2b:5a:64:9f:54:97:
f7:f7:d5:3e:da:ec:33:90:01:c1:56:4d:43:74:1c:48:52:df:
70:93:b7:ab:1f:23:31:e9:86:60:00:0f:91:d5:b5:1d:ef:46:
13:48:b9:e2:ed:91:4f:fe:d9:64:9d:56:3d:93:27:77:1e:94:
c3:76:c2:e4:ba:59:e0:0d:91:c4:fa:43:35:43:8e:07:64:c4:
1c:ac:e3:44:50:a5:69:58:fa:22:f1:aa:4b:a4:19:86:09:6e:
c8:5f:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:53 2026 by rpki-client