Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: P/4jFpDWUS78F9m5w+oBUQ1y2mJKlN243UCgsS3YQuk=
Subject key identifier: 00:8A:E6:2B:20:A6:08:CB:0E:97:3E:63:72:00:F4:FD:58:7D:60:16
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019D37C015703DDB135765F952F3DAE257A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: fXfjVdp9tUNquEAYbmOidYyvZ2m6APeavTgSvexxwPo=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:15:70:3d:db:13:57:65:f9:52:f3:da:e2:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=008ae62b20a608cb0e973e637200f4fd587d6016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:bc:a1:09:c3:c1:38:40:68:4b:a5:a4:56:
be:58:f4:a5:09:44:0f:ff:0b:fa:37:ea:d3:70:15:
87:a5:7f:bf:aa:95:07:9d:bd:76:84:2a:eb:12:37:
d2:40:20:cd:96:9d:6d:98:98:eb:d7:a3:35:86:7b:
8e:9d:73:72:58:07:62:0c:fb:de:0e:8c:65:60:6f:
3b:e3:bf:9d:05:1e:df:71:fd:58:a1:1e:b0:41:26:
6d:bb:93:81:25:1a:8a:25:5b:f6:b4:5b:20:db:e0:
9a:e4:e4:6a:df:c3:4b:84:5c:05:6c:ee:e8:e0:2c:
f5:de:cf:18:1c:b6:d0:4d:a0:89:4f:3d:6f:fd:30:
24:cf:d2:3c:01:0e:e7:74:69:a1:6b:de:6f:30:d1:
91:4f:00:a3:28:34:44:ef:80:95:77:c9:d6:5d:24:
ca:35:be:e8:d0:75:14:b8:fe:87:17:25:59:4a:aa:
18:4f:82:af:ea:fd:f4:2c:9f:a8:58:98:4a:04:b2:
51:1a:15:cb:0a:4e:0f:d1:1a:47:48:96:13:de:7f:
56:f8:a1:b8:0f:f7:f2:b8:9f:5f:3d:62:3f:58:d3:
df:56:7d:32:c3:14:a1:e2:ed:f3:67:98:e7:e2:d5:
3f:4f:bb:67:2a:34:cb:b8:50:60:e7:06:ba:1d:80:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:E6:2B:20:A6:08:CB:0E:97:3E:63:72:00:F4:FD:58:7D:60:16
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:56:d5:f8:11:be:b0:2c:c2:7e:cf:e5:41:ba:e8:38:73:
19:70:c5:8b:cf:40:95:90:a2:22:d1:2a:df:6f:57:7b:24:6d:
ca:7e:91:41:67:1b:56:9a:ba:0d:22:fb:77:c9:af:f1:b0:07:
08:0a:57:de:ca:ad:2d:7b:ea:2c:36:5f:06:a9:5b:eb:27:78:
9b:ba:6b:52:37:d5:21:ab:d5:fc:df:a3:eb:d8:27:0d:fe:90:
46:f6:5c:e1:91:26:c1:a4:10:d4:ac:4b:fb:9a:9c:d2:6f:38:
2e:25:97:79:65:95:33:71:8a:b2:36:f7:94:ab:aa:a9:ad:97:
ac:66:8b:1e:ad:19:b5:6e:ea:78:36:b6:8f:03:ac:52:64:a4:
42:e3:50:70:a8:76:7b:e5:0e:f6:22:33:ef:39:76:bb:1e:09:
c9:51:c1:98:69:d3:89:2c:71:25:45:fb:77:7a:9b:a9:c7:99:
c1:0d:01:dc:28:cd:ca:21:5d:6c:bf:d2:b0:3f:5d:7a:f8:1f:
86:cf:7b:5e:f8:70:a1:38:b3:e5:81:9f:af:22:a7:2b:2e:01:
7a:13:e4:1e:f1:bc:64:a8:14:78:82:14:cf:07:c4:07:78:fa:
a0:69:cf:2b:48:94:06:10:2f:c9:58:44:bc:a9:04:6b:85:cb:
d5:10:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:41 2026 by rpki-client