Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier: Rgc4rVaL0YQCAK4rP3ATEaZWwMr5rRz+odSZyzv1QBY=
Subject key identifier: 3F:CC:69:C3:7A:1E:40:7D:0E:4C:38:4B:3F:80:11:FC:4A:18:12:D6
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial: 019DCC06621B4B3A48CAAEE0C9335F1DB098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number: 0214
Signing time: Sun 26 Apr 2026 23:01:03 +0000
Manifest this update: Sun 26 Apr 2026 23:01:03 +0000
Manifest next update: Mon 27 Apr 2026 23:01:03 +0000
Files and hashes: 1: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: c8tQoQDNJ4dIPfBzeeTjtsGLspspWWYuHAYLklj3Gdo=)
2: FQxNg7AnkMBIxSPt-ywRlwPzZU0.roa (hash: mDMc0kRW89SXaN2WszngnBY0Vg6QXvcafmxW2mS8Fw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:62:1b:4b:3a:48:ca:ae:e0:c9:33:5f:1d:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
Validity
Not Before: Apr 26 23:01:03 2026 GMT
Not After : Apr 27 23:01:03 2026 GMT
Subject: CN=3fcc69c37a1e407d0e4c384b3f8011fc4a1812d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:61:49:8e:55:60:c6:6c:63:a0:c6:a7:db:
01:f3:7d:ea:03:95:50:b2:14:2f:0f:dd:8b:6d:95:
21:1d:c5:c2:e2:81:3a:d3:94:7d:f0:c3:39:20:e8:
d2:91:57:f8:58:4a:0e:1a:1b:a4:ea:f0:0e:51:fa:
17:a7:0d:1c:7f:ba:31:0f:f6:1c:8d:38:6c:5e:e0:
2f:94:4e:d6:12:1f:4d:d3:98:e6:3f:a3:b5:8b:85:
a4:15:82:c1:20:78:7f:4a:bc:0a:07:9f:cc:64:68:
f3:7e:32:af:c8:10:b7:1f:7c:7c:06:e9:97:bf:cf:
d9:d2:94:ef:06:cf:42:f3:91:68:99:45:0c:f6:56:
4e:eb:45:05:45:ec:48:2b:3b:1d:84:98:f5:ad:e0:
f8:05:11:d2:ad:32:72:60:db:34:72:aa:c7:c1:d0:
45:56:82:53:bb:bf:f2:50:63:a6:f3:95:f1:9f:25:
e0:81:5b:81:47:eb:59:24:8c:c4:10:14:48:5c:dc:
77:2f:21:aa:22:da:e0:78:4b:d6:bc:ae:77:35:bb:
1e:7d:01:b6:c0:a3:73:63:b3:00:20:2c:bb:58:f5:
11:69:32:01:8d:00:13:4d:1c:50:69:a1:f4:8b:51:
7b:62:a1:9b:9a:80:e9:e5:a3:09:27:15:4a:34:c5:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:69:C3:7A:1E:40:7D:0E:4C:38:4B:3F:80:11:FC:4A:18:12:D6
X509v3 Authority Key Identifier:
keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:b7:77:7c:18:62:3d:c2:89:d0:55:df:ea:80:99:cd:85:
7b:93:0e:57:11:1c:4d:5a:aa:4b:1c:8b:bf:99:2c:22:f5:d3:
26:74:1b:06:63:31:dc:49:9b:98:c6:56:db:e9:55:3b:f0:fc:
d8:90:15:71:12:37:52:4c:20:b4:e5:df:99:a0:13:51:80:80:
6d:6e:b4:82:7a:63:98:d4:f4:b0:3f:57:49:03:f2:66:f3:d0:
1c:1a:b3:9e:70:e9:50:74:f8:3d:07:8f:a9:d3:70:ac:84:ce:
8b:7f:4f:01:f0:03:fa:d2:5d:10:bc:3c:4d:4c:3b:fc:4f:2f:
51:35:06:ce:8e:7d:5e:7e:29:a8:0c:47:c4:5c:8e:b9:52:6b:
62:a6:e3:7c:e7:0d:5f:59:63:85:40:22:b3:7f:b7:61:26:e9:
01:f9:51:e1:8d:da:b6:2c:db:c4:8d:a3:89:63:27:33:da:34:
92:4a:15:c5:29:74:56:e5:7c:8f:b8:1f:00:20:a4:3b:f6:2d:
13:fb:cc:9d:91:58:66:39:7c:a0:40:cc:9f:82:73:7d:2e:4f:
f2:92:01:c3:cb:ac:cb:81:32:13:81:06:a8:03:21:67:3e:c7:
05:dd:79:7b:bf:1f:a5:2b:6a:7a:a0:2e:ec:48:a0:b2:5d:42:
dd:f9:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:11 2026 by rpki-client