Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File: b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier: 8TLhXq9ZhOLBeNqriRjJ8pAGvaK0//h9KsO7L/H0Wvo=
Subject key identifier: A3:18:95:A3:72:5E:DD:EB:9F:25:FD:D5:60:93:BC:6B:51:E5:E7:3E
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer: /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial: 019DDD9EBEAF39EEA8222741A2F48E19DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number: D5
Signing time: Thu 30 Apr 2026 09:01:01 +0000
Manifest this update: Thu 30 Apr 2026 09:01:01 +0000
Manifest next update: Fri 01 May 2026 09:01:01 +0000
Files and hashes: 1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: eKsVkTRPoW7HW+FSdfEl56YXj8mDKrwWOAhjJnGYdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:be:af:39:ee:a8:22:27:41:a2:f4:8e:19:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Validity
Not Before: Apr 30 09:01:01 2026 GMT
Not After : May 1 09:01:01 2026 GMT
Subject: CN=a31895a3725eddeb9f25fdd56093bc6b51e5e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:cb:2c:f9:80:5b:49:e7:31:e2:11:8f:83:
df:32:ca:d8:b3:69:67:34:2a:4f:45:b9:3c:9f:67:
ad:9e:9f:cb:7a:7e:0c:65:46:cf:bf:12:39:e4:c0:
12:f7:48:78:66:65:b2:54:28:f7:9b:05:89:e2:26:
a7:7a:cb:be:f5:8a:f9:83:5e:7a:8a:a1:02:b3:fe:
02:46:74:3f:61:f8:22:d1:37:59:38:5e:fb:14:18:
40:22:e5:b5:6e:4c:96:ec:91:c5:12:d0:41:ad:d3:
40:c0:73:f5:59:81:b7:85:fd:d9:5a:7c:24:c0:4f:
9a:c9:40:c8:c1:e3:e0:3d:b1:d8:d7:50:45:04:82:
13:58:c2:79:ea:17:8c:41:12:79:7f:fa:e8:b5:ea:
c4:db:6c:8c:51:30:39:bc:5a:7a:f2:ab:59:56:70:
d4:01:3d:35:87:ea:02:61:f0:9e:76:d6:7b:f8:c1:
d5:75:ef:cd:af:6f:c4:f2:4c:7d:d1:0f:f6:51:16:
25:0b:e6:c0:ba:71:37:9a:0e:92:30:ed:57:26:d4:
b9:fe:35:89:61:b0:08:8f:83:82:35:67:b4:8b:d6:
0c:57:a3:03:a3:3f:84:f3:42:c1:fd:40:93:fa:01:
af:8d:3d:cc:56:50:a6:bf:5a:09:e3:b3:c3:59:3e:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:95:A3:72:5E:DD:EB:9F:25:FD:D5:60:93:BC:6B:51:E5:E7:3E
X509v3 Authority Key Identifier:
keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:93:0f:27:e3:b5:f6:69:95:b3:c8:3e:17:07:5d:74:af:
ab:14:7a:8f:93:da:df:71:ab:cb:81:cd:c3:4e:5e:fb:db:cf:
65:6d:d8:98:81:de:8b:e2:03:b7:23:4f:4a:a9:7b:1f:77:23:
fe:5b:36:73:39:88:71:03:89:2d:b6:5d:a5:94:35:b4:90:20:
61:ca:83:1e:d9:a9:12:2b:2d:60:94:fa:97:f3:1e:ae:60:2f:
74:06:0f:a8:6b:ed:ee:be:b1:c2:25:e8:9a:8a:63:3f:1d:f1:
07:92:f6:32:42:6a:72:1b:13:1d:64:e5:16:6a:3d:98:f7:dd:
23:39:2e:5a:50:c2:83:6d:c8:80:df:30:82:66:0d:43:f4:b1:
c5:c2:b0:7f:87:5c:69:ff:37:90:ef:c9:d2:69:c3:c3:d8:17:
28:ac:5c:94:25:91:7d:be:ee:c5:7b:d2:76:73:b6:cd:eb:d0:
6e:ea:fc:31:10:48:d5:c2:7f:01:33:d3:fc:a7:81:7a:34:d6:
5e:73:54:2d:b5:1b:a4:7b:74:79:b5:c1:c3:4e:7e:73:fb:4b:
67:20:34:73:a3:e1:17:ca:a6:85:9a:fc:fa:a6:45:7b:64:ee:
e4:46:3c:12:e8:93:ff:d6:77:f5:fe:31:a3:17:b1:cb:0f:88:
34:6a:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:51:42 2026 by rpki-client