Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: 0PKAS7w3bfuOLtofa59UU6hn4u0Rqjt5NcaPVzNnWOU=
Subject key identifier: 12:CE:DC:57:63:A2:F8:33:49:C0:5F:28:0B:39:E9:66:38:51:D9:5F
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01A13DB8223D2994196C73F27BB044FF7EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 136F
Signing time: Thu 15 Oct 2026 04:00:39 +0000
Manifest this update: Thu 15 Oct 2026 04:00:39 +0000
Manifest next update: Fri 16 Oct 2026 04:00:39 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: jT4btpCvNw7HHbJD8hZ16KgiMav4+v9IJfTiclIBuCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:22:3d:29:94:19:6c:73:f2:7b:b0:44:ff:7e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Oct 15 04:00:39 2026 GMT
Not After : Oct 16 04:00:39 2026 GMT
Subject: CN=12cedc5763a2f83349c05f280b39e9663851d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:c1:69:92:b8:84:41:80:bc:fb:a6:e4:08:
ce:86:c6:4e:41:8a:f7:58:b9:4a:cf:45:ac:1b:81:
04:8b:1c:31:1a:3a:37:01:5b:20:c1:d1:32:db:c9:
37:f0:29:43:9c:cc:89:fd:a5:16:1e:60:a9:b0:0b:
bf:5c:98:90:81:22:37:78:7d:26:4a:15:22:67:6f:
c2:bb:ac:0d:26:0b:ec:ea:f4:3e:05:9e:62:26:04:
d2:27:a1:90:e1:e6:90:80:41:e9:b6:be:6b:00:74:
f0:ca:fa:50:5a:79:d0:21:84:cc:9e:f0:fb:4e:e2:
a2:03:85:c6:ff:f2:08:d5:77:ce:fe:48:fe:e1:72:
9f:10:c6:6a:f5:a3:7b:75:02:34:51:ba:b7:28:53:
90:3e:e9:ce:b2:cb:3b:b5:33:68:b5:8c:1b:1f:2f:
18:90:5c:58:de:89:ef:fb:80:86:13:8a:d7:85:d7:
07:14:8b:12:98:86:08:e7:88:12:63:32:8e:9a:7e:
21:31:57:72:7a:54:56:2f:77:1d:d2:2b:9e:70:11:
ed:53:32:50:69:9d:34:7d:0a:12:5d:e6:a0:d9:c4:
e6:3c:2d:f0:f7:d0:b5:a4:7b:58:26:0c:ae:91:3b:
11:ab:08:fc:fe:1b:29:11:46:99:d8:0c:69:18:c2:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:DC:57:63:A2:F8:33:49:C0:5F:28:0B:39:E9:66:38:51:D9:5F
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:76:6e:af:70:22:b1:70:5b:cd:fa:51:19:04:3e:42:b2:
4e:5a:f7:2b:c0:fb:a2:b4:2b:85:27:6e:62:ad:80:81:dd:47:
59:57:30:3b:62:7b:23:b6:75:fa:5c:dc:59:55:5d:8d:ca:17:
3f:2a:1c:f6:7f:96:21:da:92:a7:07:c6:8d:58:44:7b:e2:ef:
51:7b:04:12:77:b9:2b:20:23:ee:4c:32:71:e2:c2:34:bb:0f:
99:6a:75:c0:71:f3:45:33:73:6f:fe:4a:85:b1:16:1e:f7:36:
0e:41:90:79:1e:34:fc:b3:f0:bc:d5:b4:ce:d0:8a:34:31:07:
75:0a:cd:c8:32:13:b8:2a:35:73:77:45:48:54:45:98:d5:ed:
1e:3b:2a:43:61:e9:b4:e6:e3:96:60:4a:99:2b:16:41:bd:41:
8d:7c:da:b9:c7:c7:85:e2:99:83:61:ec:02:bb:aa:c3:1b:68:
44:75:f4:3d:72:b8:d8:19:eb:72:9e:87:cc:b5:cf:4b:4d:e5:
dc:cb:b5:cb:ca:19:ae:d3:4c:60:b9:f9:a1:77:f9:dd:dc:2d:
eb:b0:da:25:b8:e7:5e:eb:2a:61:4d:86:f7:92:3b:cb:45:98:
d4:0c:b1:f2:ef:d9:9a:be:c1:b8:5a:ed:c9:96:91:5a:3e:3d:
c7:ab:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:11 2026 by rpki-client