Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: mxBamkCm3Muh0hVbDn1GNDuFp5N7Bgmm5OBsL2Z5Znw=
Subject key identifier: BC:4B:03:83:B3:E4:A7:83:6B:B8:63:A1:0A:23:C9:95:0D:2A:4D:AB
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019D37533C9E3F62F25F70224B5706F3B7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 1858
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: DxUkfPnF7ZfGL2DZYPPWQg/5AAir7wHK49QxkengbcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3c:9e:3f:62:f2:5f:70:22:4b:57:06:f3:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=bc4b0383b3e4a7836bb863a10a23c9950d2a4dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:e8:a4:1b:a4:07:3c:fc:9e:76:ae:88:f8:
a6:c4:7d:71:df:68:23:79:7b:b2:53:26:c7:3f:35:
bb:74:6a:96:68:3e:e7:ec:55:3c:0c:f2:f5:b2:a1:
6d:64:d5:49:63:c2:1d:0f:76:b5:f4:ba:27:2c:e2:
2b:ac:e6:fa:c0:4b:ca:62:5c:59:54:fb:90:ec:a2:
90:a0:3e:c8:61:68:cb:b7:cf:3f:85:48:a7:37:ac:
a2:3d:f9:68:9b:d2:e9:bf:e7:8b:3e:1a:24:27:fd:
43:6c:63:f2:fe:a5:4a:75:18:e7:70:51:fe:66:14:
65:d3:6c:54:d6:7b:3c:9e:24:38:90:6c:0d:bc:b0:
cb:42:94:4b:ac:e8:ea:07:d9:3a:a1:b7:90:d1:08:
fc:18:0e:1e:f2:95:9b:0d:7c:bb:a8:dd:8c:1f:d1:
78:1c:46:b0:33:6e:3a:b4:fa:30:ab:68:95:7a:a6:
f1:ae:42:30:6b:3c:0e:97:3c:ee:f4:85:b3:14:58:
f9:49:12:56:ee:59:56:23:f3:88:72:0f:5c:0f:63:
c7:08:8b:f8:87:b9:96:b0:5a:6c:c7:d9:2a:c5:fd:
e4:82:ed:ee:a5:85:a5:9b:c9:cf:6e:4a:b3:8b:2a:
02:9a:fb:1d:37:39:dc:49:b8:cc:3b:85:c4:8a:3c:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:03:83:B3:E4:A7:83:6B:B8:63:A1:0A:23:C9:95:0D:2A:4D:AB
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cb:3b:e9:51:1f:c9:a8:56:a1:4a:44:82:a1:9e:7d:27:ba:
7b:7d:bf:9d:35:c4:57:ea:84:72:3e:c9:3b:13:77:7a:f2:55:
97:ed:36:f4:0f:61:fa:9a:d0:a2:3d:ac:02:92:c7:6a:1e:69:
14:b1:74:f3:62:18:28:6e:71:a8:72:80:75:46:4f:10:08:67:
fa:92:8c:bf:e7:ec:f9:3b:f9:ab:bb:76:e3:60:1c:54:5d:c6:
c2:fb:2c:e7:36:69:77:96:d1:7f:10:0c:f6:32:77:ec:76:6f:
b9:75:7d:2c:f6:b1:01:28:97:7c:ff:e9:5c:78:01:76:dc:5d:
71:7d:79:db:6d:7e:21:69:ad:a1:0d:39:fc:79:b6:a3:14:87:
6f:bf:63:63:1f:93:59:5e:d9:7e:43:65:5f:c5:30:01:d1:d5:
0a:f6:8a:3e:cb:1e:77:e7:e4:b3:d1:51:99:19:7d:fd:5f:01:
7d:43:77:92:89:02:66:77:50:e6:96:f3:7d:d4:be:d0:41:00:
da:75:f7:98:56:54:a8:3c:45:89:be:93:6d:50:96:55:04:17:
4f:8f:36:8d:21:66:9c:33:d2:c2:57:c1:be:ce:ba:6a:88:2a:
cc:d8:b5:3f:d7:3e:2d:10:62:a7:7a:f4:70:9f:a6:35:f3:a6:
83:f2:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client