Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: edLNadb4Na0DRV9JaJX5USVzrO+pK7ECri37ZRNtTdg=
Subject key identifier: C2:DD:3F:88:70:79:2F:07:E3:84:92:81:51:AC:72:34:F2:E5:BA:79
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01A001010166605E0E673BCF2BB4C0F39920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 12CB
Signing time: Fri 14 Aug 2026 16:00:38 +0000
Manifest this update: Fri 14 Aug 2026 16:00:38 +0000
Manifest next update: Sat 15 Aug 2026 16:00:38 +0000
Files and hashes: 1: 5AGKlldahfI2UQwePdR7aOZv59k.roa (hash: yineAINt5f0q9Dc8di7gq2DzeIUdj6NUc5yoND8zPYQ=)
2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: eLpamZlSLZZHRW7lgOWdQcMZoKOZTf9ont9WlMIh+3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:01:66:60:5e:0e:67:3b:cf:2b:b4:c0:f3:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Aug 14 16:00:38 2026 GMT
Not After : Aug 15 16:00:38 2026 GMT
Subject: CN=c2dd3f8870792f07e384928151ac7234f2e5ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:f6:ff:49:4e:45:52:b6:d8:9d:a6:cd:e6:
fe:9b:6a:37:7d:7b:75:57:67:ef:fa:26:4b:68:d0:
e3:65:c8:0c:81:08:9a:7b:53:70:b1:01:09:32:af:
f1:4c:f4:69:da:a8:ff:0d:91:09:45:3a:88:07:dc:
46:93:22:fd:4d:70:43:fb:d5:ac:eb:94:e4:7c:1e:
78:f0:be:b9:39:61:8a:82:9b:a1:95:d7:4e:be:3b:
82:e2:93:d0:3d:22:ba:46:d2:e0:12:34:0a:fa:d2:
df:c9:f7:8b:01:c8:9f:29:76:74:ab:d8:f9:27:21:
44:43:6d:14:40:73:1f:a7:60:ac:c5:4c:2d:db:8f:
aa:43:cb:2e:f1:33:97:df:8b:b4:6c:8b:5f:ff:7d:
20:30:b4:72:05:fa:25:e5:40:7e:f7:a7:ac:7d:8b:
8b:7a:a2:73:a8:f3:f4:c9:35:cc:45:a4:88:f0:19:
02:c7:3c:60:5f:5a:31:5e:18:70:55:ee:56:51:01:
11:2e:ee:f4:9b:5a:84:dc:f9:c8:9d:cc:e2:46:6f:
f7:29:5c:5c:6c:5d:70:c7:5e:d5:1f:c0:f4:13:ea:
c2:2a:db:e1:40:0f:4a:af:8d:7f:89:05:f8:11:18:
89:0c:45:f9:da:66:8c:57:e4:89:6f:4b:c4:c3:00:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:3F:88:70:79:2F:07:E3:84:92:81:51:AC:72:34:F2:E5:BA:79
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f3:79:32:86:e1:b0:78:a4:e7:6a:48:70:90:bd:4d:7d:ad:
67:31:98:43:a7:d7:75:8a:84:1d:ac:86:2e:1f:93:2a:c5:4d:
c8:17:24:76:08:2a:2b:09:ba:fd:6b:6a:06:d1:a1:35:87:76:
5b:89:c1:38:92:7a:46:c6:9c:0b:7a:f0:38:48:85:31:4d:4c:
ef:f0:09:ae:4d:33:c3:90:8f:68:4c:48:2d:cf:36:a3:5f:7c:
94:9d:ab:dc:ca:7b:ae:52:bd:bf:46:20:ec:dd:38:63:e3:ba:
03:34:4e:a9:0c:f3:de:83:76:58:d9:4a:ea:5e:64:ab:ad:d6:
8e:27:f5:d6:14:0a:7d:64:4e:72:20:53:ec:07:b2:1f:5d:f8:
d2:8b:54:aa:2e:c4:5d:08:6f:90:86:38:13:ea:17:a1:cf:56:
a2:52:3c:48:b8:3c:f1:77:39:5b:67:3a:7b:b4:f8:58:01:79:
d4:d8:e5:0f:5f:2b:f9:a6:64:5d:1f:8b:72:6c:1f:68:e7:8f:
49:8f:b4:a5:e7:cf:0d:cb:d9:39:95:77:7e:7f:5e:e5:36:f2:
8e:29:56:5b:c6:63:b6:1c:48:f3:72:cf:9c:d3:e9:a0:fd:18:
c2:48:07:b3:e9:af:dd:c6:0c:89:15:b3:0d:f2:47:12:8a:c0:
05:3a:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:36 2026 by rpki-client