Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: joXNv2T9OARVDEw4X0wBqioKCMbg16AV1fKIxr+thnk=
Subject key identifier: 3B:F9:7C:50:68:E1:D2:1D:E0:0D:9C:1E:B0:1E:24:7E:54:35:EE:D8
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019D38658C5F186473EFAED46A770259A30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: ZXFhg265hYYVoVe3H9/ythLX7F51lz9YtTgQNfpXN0o=)
2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8c:5f:18:64:73:ef:ae:d4:6a:77:02:59:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=3bf97c5068e1d21de00d9c1eb01e247e5435eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:2e:ef:c0:66:6b:b6:16:b3:84:97:21:61:
6d:c3:58:a1:c8:a1:16:91:49:bf:da:4e:d4:15:b2:
63:97:6a:9a:b7:bf:53:8c:2a:85:69:12:fc:d0:e2:
f4:5c:d7:46:6f:33:c8:74:37:c9:16:96:53:94:96:
52:cd:8c:9f:46:f6:ec:9c:5a:7f:76:9f:c6:58:91:
cf:a9:cd:bc:6e:ec:06:c7:85:9b:cf:71:8b:00:93:
ba:b7:8c:88:83:0e:58:54:17:08:8f:4c:a1:85:14:
fc:c6:04:b4:02:21:6b:b6:b5:de:b7:78:0e:57:0e:
a6:6c:a5:14:49:fa:9b:d0:47:58:5e:60:0d:99:ff:
50:4b:87:5d:fc:88:07:60:cf:ad:c5:12:d0:69:1a:
08:3f:6c:8c:8b:21:f2:01:bf:9c:3d:94:c7:17:43:
8d:78:56:3b:89:06:14:05:73:9b:0b:c2:6b:81:28:
4d:d7:22:05:a6:a0:12:a4:40:87:6d:8b:e3:a9:ea:
25:62:98:97:00:df:88:c8:41:fe:8c:57:52:48:17:
09:a4:d0:11:3f:97:26:81:2f:e0:34:54:4a:39:2c:
d3:d2:10:51:73:d6:f4:e1:7c:26:50:b4:46:99:d4:
dc:44:c7:eb:8c:9e:2a:79:64:1f:4c:fd:96:4c:06:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:7C:50:68:E1:D2:1D:E0:0D:9C:1E:B0:1E:24:7E:54:35:EE:D8
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:94:c1:55:7b:33:f9:09:71:82:da:93:2f:79:24:f5:73:
97:df:42:a6:bb:e9:20:78:d4:c3:cf:f3:74:2b:e6:7c:94:ef:
28:99:c3:a0:fc:ca:b5:56:7b:aa:0b:e3:a5:f0:a5:54:e5:ec:
9c:2d:43:cd:bb:87:e5:76:7b:19:76:05:5c:d7:28:63:3d:4e:
65:2a:e5:4f:3c:b1:42:3f:08:c4:7d:75:4f:b2:38:67:74:52:
18:fa:37:67:d2:36:a0:b5:87:16:1b:e1:6a:ee:b8:c3:33:2e:
8a:dd:99:06:e5:83:04:1a:ef:3c:37:59:f9:29:d7:33:71:b3:
e1:d5:cb:97:2b:db:97:68:ec:84:42:f0:3f:35:44:d1:9b:c2:
34:f9:a9:dd:75:b8:18:da:87:96:90:76:a7:2c:7b:83:68:f0:
c1:4e:4c:44:70:80:97:9a:e8:1a:34:64:9f:e1:98:fb:73:ce:
55:b7:54:75:8d:55:59:c1:73:cb:7e:af:38:d6:9a:f6:e7:03:
9b:55:96:1a:af:29:76:af:93:57:bc:5b:e2:09:0a:05:89:ab:
fc:54:b2:2f:76:7d:e3:30:49:2b:d5:e4:cf:70:fd:4c:ad:e5:
59:3b:59:73:2c:c7:7e:fa:70:24:6b:bf:36:15:e4:61:94:c8:
d1:70:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:44 2026 by rpki-client