Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: KI2P61cEJbwJbKQTNXnq17HnK3IoqS1za7j0d37pUFk=
Subject key identifier: 83:CB:42:26:F6:33:14:CD:75:BD:CE:BB:F1:BE:1D:5D:90:EC:93:3B
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019D382E3A31C0CF446A2BC8EE437139DEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0DE8
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: B6Nvm0yyodFa2QAujTyUhNZh6Fr9IHIRq+/CzUG4X4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:31:c0:cf:44:6a:2b:c8:ee:43:71:39:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=83cb4226f63314cd75bdcebbf1be1d5d90ec933b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:4d:cd:32:d1:33:c6:b4:7c:b9:24:e3:b5:
24:49:9d:49:62:01:53:21:e8:a3:5c:33:c0:8e:19:
39:38:03:c2:2e:22:fd:e8:cd:f7:89:ba:8d:65:81:
1c:b1:2a:31:29:5a:1c:59:63:35:ed:97:ec:e4:b5:
42:62:dd:19:bf:18:27:9c:60:8c:c0:fa:e9:72:d9:
92:55:04:12:00:25:d8:47:f6:a8:8e:c0:87:f6:e4:
05:8f:b1:31:94:9d:45:80:44:26:32:a2:3c:e2:83:
77:02:97:93:40:08:46:fa:ad:94:11:e4:2a:ec:fe:
7a:1b:39:f7:b9:e7:a3:12:03:97:64:56:58:88:5c:
a5:d1:b2:51:ef:96:50:83:20:b3:f2:b7:d0:07:4e:
10:b3:20:85:bd:d8:99:ab:22:29:df:4f:7e:c2:47:
0b:c6:e4:14:83:8c:fe:1f:06:de:4a:8a:1f:14:45:
5f:ce:cf:34:d9:e4:f8:c2:0d:f7:ab:8c:ac:89:5a:
99:07:c3:ba:59:6a:3e:d7:78:27:c7:72:5e:41:98:
74:ef:63:7e:e6:74:03:da:94:dd:3f:11:de:cb:63:
fd:a8:b8:ba:15:10:ed:6d:ff:bf:97:73:1b:6e:f8:
38:39:33:f6:4c:43:c6:bb:49:dd:8f:e2:b9:34:44:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:42:26:F6:33:14:CD:75:BD:CE:BB:F1:BE:1D:5D:90:EC:93:3B
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:69:52:e6:46:3f:4b:81:df:0a:87:ab:58:fd:ec:37:15:
61:43:34:a9:dc:e2:0f:d4:3b:1d:e9:8d:3c:13:50:9a:40:5a:
21:97:a3:9f:61:2f:83:53:06:57:b9:d3:0c:a9:18:50:8f:a0:
47:a7:a5:9f:80:9a:82:32:68:e9:bc:46:d9:4f:2e:01:fd:d1:
40:21:25:b5:f9:bf:00:61:33:ed:3c:d6:e5:28:e2:17:df:93:
2e:49:13:50:23:7c:71:f6:e4:dd:f1:d9:f7:f9:ee:0d:91:d3:
8d:3a:f2:d1:2c:ba:4a:df:f8:b9:4f:8f:db:db:77:ca:e3:9a:
9f:b4:ec:b3:7c:16:61:8b:ee:e5:7f:db:e3:54:5c:08:79:71:
ab:a5:1b:ac:62:29:0e:c2:f7:67:1e:a4:72:b9:0e:b4:1e:14:
b0:65:9d:62:79:72:4a:88:c6:4f:a6:cb:12:a6:e6:bd:3f:0d:
d8:fc:54:37:ba:d9:d4:67:fb:30:c1:32:9c:58:12:7c:a1:0a:
08:a2:69:2e:0a:30:fc:d7:d5:57:35:af:67:43:74:91:95:ea:
3e:c1:5a:53:d8:f4:48:ab:29:57:e9:ed:f8:87:4d:5e:c9:0a:
72:5a:6a:3b:1e:e5:da:3f:01:f1:1b:e5:74:b3:18:29:ae:21:
cd:fe:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:02 2026 by rpki-client