Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: 44X7bn7fCLVmNZlF6LN5PMsW46/4wQ6I5ylTNbCPQ5o=
Subject key identifier: AE:4A:34:B8:E1:D5:EA:EB:9C:F9:A3:7F:D5:05:BB:DD:E5:EC:62:B9
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 01A0E7E3F192618EE95123F54C15578F2C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: 0268
Signing time: Mon 28 Sep 2026 12:01:10 +0000
Manifest this update: Mon 28 Sep 2026 12:01:10 +0000
Manifest next update: Tue 29 Sep 2026 12:01:10 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: 2Q9/eQY5x+nb4rmpsQZ9RsW4peek8Femjsj4EjI4Jrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:f1:92:61:8e:e9:51:23:f5:4c:15:57:8f:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Sep 28 12:01:10 2026 GMT
Not After : Sep 29 12:01:10 2026 GMT
Subject: CN=ae4a34b8e1d5eaeb9cf9a37fd505bbdde5ec62b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:11:66:51:77:6b:0c:3d:d7:d6:80:7e:10:
91:fe:55:3a:0f:3a:2e:3f:6b:25:91:84:ef:55:0e:
3c:e5:0a:98:d5:88:a7:c4:c3:cc:52:00:20:a5:11:
83:36:7d:fe:12:aa:90:28:53:e1:dc:07:a5:95:b9:
fa:c4:94:dd:93:48:73:bd:06:66:22:4c:2c:5d:b3:
3a:27:2c:2c:a6:fd:48:1a:fc:b0:31:ae:22:3b:cc:
17:25:1a:8e:a5:16:3b:b2:7d:f1:9b:45:4c:75:27:
f2:ee:58:ab:5a:4b:0e:68:3b:8d:b9:74:d9:7a:1a:
ff:fd:3b:ec:d4:dd:19:e4:5c:59:1e:ce:43:a7:4d:
72:dd:48:77:ae:41:cc:ca:9c:24:ef:50:9e:5a:7d:
67:2d:74:7c:59:a0:72:78:96:ea:08:da:ca:7f:14:
c8:6a:5b:6b:05:df:d0:ac:fd:18:10:b2:f9:d2:a1:
82:2d:06:38:ed:ba:22:97:f5:d4:eb:f1:b5:7f:a0:
95:fb:30:d7:23:8f:90:01:62:87:70:5c:61:6f:a2:
b4:cd:86:64:84:1f:aa:04:b9:38:19:34:ff:51:dc:
b5:6f:3e:72:3b:9d:f8:41:f8:d7:e3:f6:98:df:6b:
96:27:cf:a3:7e:c0:ac:0a:84:8f:58:31:8e:fb:66:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4A:34:B8:E1:D5:EA:EB:9C:F9:A3:7F:D5:05:BB:DD:E5:EC:62:B9
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:89:37:0b:8a:80:52:32:e2:52:03:d3:2a:ac:70:8e:1f:e4:
76:2e:81:cc:74:aa:5e:04:55:b4:eb:a3:09:ee:87:81:b3:6f:
9d:64:63:e1:9a:3d:0e:97:00:01:df:dc:c4:c1:38:e3:df:7e:
ab:67:45:7f:23:25:f0:a7:cf:1f:a9:07:4b:3d:28:09:7e:a4:
01:1b:a3:6c:29:bd:a7:9a:87:74:71:a0:2f:9a:fd:56:b0:ac:
95:45:57:c1:05:ea:8f:45:d8:7c:0e:cb:c9:fe:a9:ce:d3:5e:
b2:06:78:c5:71:04:3a:3e:f8:9e:30:9a:ef:20:fd:7e:7d:c3:
76:5a:31:8f:a0:2f:43:13:55:3b:b1:00:ce:23:7d:68:5c:a3:
00:94:bb:7c:b2:0b:39:cc:20:b7:64:cf:e8:c1:21:ea:9a:da:
1d:be:43:4d:0e:f4:97:7a:f5:97:40:d7:8e:1f:6a:fc:4d:b3:
be:c6:ef:50:46:e1:fd:da:a2:39:1b:82:29:5f:7a:40:d0:2f:
27:21:4c:96:92:79:13:fe:86:ca:cf:15:19:15:cd:0b:ee:0c:
ca:2f:1d:ba:81:de:62:a1:c2:ad:14:23:3b:02:89:92:9d:38:
02:61:46:9e:f8:01:3e:44:ee:c1:b9:b6:0f:01:e2:c9:70:b5:
c1:99:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:30:02 2026 by rpki-client