Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: AvgCxNKAHcR7wSkkq2j/eo9cktyVo5k2uWJQpAHSwao=
Subject key identifier: 72:CE:85:57:F7:8D:8B:2C:66:4B:11:AF:CF:6A:94:6A:78:09:32:B1
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019CC598BE79F7CDD38C5C848373E262A6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 44
Signing time: Sat 07 Mar 2026 00:00:47 +0000
Manifest this update: Sat 07 Mar 2026 00:00:47 +0000
Manifest next update: Sun 08 Mar 2026 00:00:47 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: TDG2VhmN6FA2xPMa93SJWoHyp3/2Z2VPQwLueiiNeiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:98:be:79:f7:cd:d3:8c:5c:84:83:73:e2:62:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Mar 7 00:00:47 2026 GMT
Not After : Mar 8 00:00:47 2026 GMT
Subject: CN=72ce8557f78d8b2c664b11afcf6a946a780932b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:7f:9b:63:7d:54:2e:2e:e5:15:f5:41:23:
95:41:50:61:82:73:2b:6f:30:01:24:8b:f4:e8:28:
65:5b:73:eb:84:a0:82:e6:36:da:9f:63:25:42:6c:
2b:93:dd:47:ff:b8:e1:88:de:f8:8b:e5:f3:c8:1d:
65:c9:88:f5:c0:92:ef:03:e9:25:d4:f2:66:c3:e2:
da:7d:2c:ff:1b:ae:d7:41:6a:d8:7e:b9:d5:0b:e4:
23:e4:7f:bb:ac:ea:96:4f:eb:05:ab:ec:f3:e4:6d:
d0:eb:7e:00:8a:73:fe:25:c0:d5:c0:bf:c4:96:9d:
49:2e:b2:d5:be:9a:48:ac:4d:50:ba:bc:dc:db:16:
bc:38:1e:b6:be:c5:23:e3:1d:98:70:d0:e5:d4:4a:
45:76:23:72:53:39:f0:12:02:27:73:d0:ba:33:07:
9e:3b:a8:58:67:fe:5d:2d:95:26:92:ea:86:cb:6c:
a9:3c:e9:d7:c9:28:f3:75:6d:9e:3a:7f:c3:b9:95:
b4:a3:e6:c3:93:d2:5c:cc:5e:44:0b:fc:64:44:8f:
4a:39:bf:58:b4:e0:69:ab:70:1a:da:e7:88:01:c2:
d3:38:e6:4f:dc:e1:6f:e5:23:61:47:48:d7:ed:50:
f5:6d:e6:f3:ac:ee:45:09:a2:a6:db:38:5d:d9:8b:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:85:57:F7:8D:8B:2C:66:4B:11:AF:CF:6A:94:6A:78:09:32:B1
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:87:fa:f0:0c:2e:35:16:60:7c:c5:93:2c:31:dc:5e:a1:88:
00:78:4b:f4:cf:bb:6f:05:8e:79:ac:27:8b:67:82:b7:79:cc:
16:a6:c6:33:2b:4d:06:dd:42:29:59:26:ae:9f:b4:70:1f:44:
7b:77:76:35:9f:78:5b:7d:c1:46:f2:d2:8a:94:8c:81:52:3e:
e6:5a:27:7f:9b:1e:0d:67:a6:2a:e2:23:b5:07:84:3f:46:3a:
b1:2a:a3:a6:26:30:2e:46:6e:e7:fe:21:83:bd:f2:c0:95:0e:
d7:4d:71:05:38:e5:ea:fe:77:01:5a:46:c5:05:02:a6:5f:32:
1c:2b:f3:32:c9:81:29:32:cd:c0:77:fc:4e:f5:0b:0f:3c:11:
70:b7:76:a0:b8:4e:c9:16:c0:50:33:80:ec:bc:41:94:c9:bd:
d9:8b:b5:21:af:40:a8:bd:2a:c3:87:ac:57:cc:15:31:c5:36:
60:a3:d5:b5:be:91:fc:39:c6:52:b4:f0:10:ac:ae:b6:cc:74:
81:df:49:c3:20:ee:d5:f2:ea:a0:60:4e:c3:d7:40:14:4c:f6:
88:01:84:06:09:f5:e3:46:80:79:67:65:55:44:2c:1e:70:b3:
1b:03:01:fa:8d:6e:9e:83:ff:d2:10:97:be:60:2c:67:2b:82:
9b:73:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:41:39 2026 by rpki-client