Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: jTFRhlDgcUIbpnAevI8Knp3r65Irnypowff2tzndTNI=
Subject key identifier: C5:54:3B:3B:28:07:5F:57:39:8B:B3:56:8F:05:D9:85:87:F1:0A:3D
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019D3909A82F001E9EE408E32586BD81154A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0C82
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: u6aX2e4WVUcLCsO9M/ZqL+qwI+MBQ2qM2E1kqII0KM4=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a8:2f:00:1e:9e:e4:08:e3:25:86:bd:81:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=c5543b3b28075f57398bb3568f05d98587f10a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:e6:f7:43:2d:68:78:c6:eb:83:a8:ad:ff:
1d:bc:6c:69:eb:a2:28:d8:65:97:60:d9:ec:ba:8d:
65:68:c7:1b:78:4a:95:ee:9b:9a:9c:a8:9c:e3:cf:
47:cb:d8:a2:88:c0:fa:86:f8:77:f0:ad:70:c3:c2:
3d:b6:d7:3e:9a:f8:11:60:91:bc:de:6a:ad:d7:72:
c5:d0:4a:00:78:6b:da:df:d6:40:b5:b3:02:3b:d0:
cf:8c:91:26:6d:68:2e:c6:dc:26:41:ed:0d:e5:69:
19:cc:8f:b8:9f:fe:74:d8:03:5f:83:15:94:2d:b5:
bd:d2:f7:a4:64:14:1c:2b:78:e2:5d:cd:21:be:e1:
6a:68:b4:78:06:9f:4c:33:eb:da:2b:35:be:f7:d8:
9c:25:68:9f:9a:ae:b4:c6:26:16:23:09:ff:f8:66:
4e:c9:51:02:7f:cc:7e:6b:0f:f2:4f:93:8c:6f:dc:
7f:2f:4a:d2:3f:5d:f7:32:04:b1:22:c3:37:19:a9:
da:ca:6c:23:5b:90:22:c6:b8:79:d0:3e:cb:14:0c:
d2:95:24:c4:4a:b1:cb:a5:c4:5a:a8:87:d9:36:4d:
ba:57:99:7b:ce:7e:9a:92:6f:f3:a6:9c:80:3b:83:
d6:45:ed:15:90:fc:4a:7b:9d:5a:f6:18:da:a1:e0:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:3B:3B:28:07:5F:57:39:8B:B3:56:8F:05:D9:85:87:F1:0A:3D
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6e:19:42:22:ff:81:20:f2:dc:39:07:8b:d0:d3:0f:58:2e:
36:f0:58:14:27:e2:19:21:6e:6a:1f:18:4a:b5:96:75:4f:c3:
86:18:8a:23:d2:de:d8:14:5c:cf:36:16:ba:fc:c9:93:ed:f8:
e2:d3:fb:fd:d5:c8:61:db:a9:51:ca:71:74:a6:3a:fd:63:2d:
57:3b:bc:9a:f4:b5:ab:a2:b3:67:fa:ac:63:8a:0b:23:e5:91:
a4:8a:cf:e1:28:2b:9c:83:7a:b1:10:68:17:51:69:3c:ba:46:
11:82:ae:b4:1f:cc:6b:6e:a7:c7:fd:26:d3:84:22:81:00:12:
b5:80:c5:75:30:67:9c:32:d8:c9:78:48:c5:c5:43:89:6a:fa:
dc:30:55:43:66:65:bd:ce:fc:7e:21:49:a1:e5:4d:46:30:72:
4d:ff:13:07:d3:fa:c6:39:ed:f0:fb:05:d4:8e:88:0d:24:2f:
ed:6f:f8:51:de:98:29:09:ed:5e:e4:d5:97:27:c7:1e:ff:74:
53:dd:f2:2a:5b:ea:d3:71:78:51:27:ba:f4:5d:f9:87:ee:3b:
e0:a5:b6:0e:c3:29:0c:1e:f9:e0:45:3d:ef:82:eb:2c:f8:5a:
17:0c:ee:a0:18:57:ad:96:5e:42:d4:e9:6c:6c:a1:47:75:af:
e8:85:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client