Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: 7A0CeVZRftfpX2ZKEILJyjJd2B4koppapdPLD17ZoTw=
Subject key identifier: BB:D2:48:03:B2:83:F8:C8:58:36:BE:22:0D:C0:A2:E8:A6:DB:74:3C
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019E2F28B44F6486AFED04261B91AC983CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0DA5
Signing time: Sat 16 May 2026 05:00:57 +0000
Manifest this update: Sat 16 May 2026 05:00:57 +0000
Manifest next update: Sun 17 May 2026 05:00:57 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: ESBQLS1QKXeoZ/AycKfu7Q4UH1gLnDjGxKPrOahxQko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:28:b4:4f:64:86:af:ed:04:26:1b:91:ac:98:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: May 16 05:00:57 2026 GMT
Not After : May 17 05:00:57 2026 GMT
Subject: CN=bbd24803b283f8c85836be220dc0a2e8a6db743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:06:c3:fe:21:62:47:5d:32:73:91:71:e6:
38:58:03:43:e1:bf:1f:2b:75:c8:66:11:ac:f2:80:
c7:de:f1:78:b8:71:81:f0:e5:e8:c8:1d:3c:c8:e6:
a7:c6:23:fb:87:a6:4d:43:62:3a:b3:6e:1a:3d:57:
41:04:b8:bf:95:5c:1d:87:73:ac:ba:35:45:0b:40:
cf:52:8a:40:e1:2d:fd:57:e9:dc:d7:b8:77:bb:ba:
86:4e:10:28:a0:94:67:b2:50:03:28:37:75:9e:59:
44:b7:a7:2d:55:6d:37:c3:4a:80:d7:d5:2a:1f:32:
e2:b5:68:dc:9a:3c:22:1a:fb:5a:eb:7f:83:65:c3:
eb:33:13:25:12:bc:97:fe:7e:7c:e2:cf:48:3a:0d:
11:3f:26:36:64:6c:0d:bc:d8:f0:42:1f:12:6b:15:
8c:6b:9c:ec:32:cc:fd:db:64:77:92:8a:2a:58:7b:
d7:70:87:8b:6a:93:91:7d:ea:36:41:94:e4:6d:51:
69:7e:74:06:e4:47:e9:1b:de:c9:8e:36:ff:e1:69:
48:ed:75:8a:35:d8:e3:e6:b9:9d:b8:f3:35:6a:ab:
bb:13:46:1d:d7:3f:3a:12:e3:75:44:7e:44:19:bd:
c7:90:b0:9f:2f:dc:de:b7:7e:b7:cb:18:6f:5d:19:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:48:03:B2:83:F8:C8:58:36:BE:22:0D:C0:A2:E8:A6:DB:74:3C
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:94:9b:7c:8e:2d:a3:4d:7a:d9:2f:7a:8c:60:31:40:f2:
76:d4:9c:cd:f1:9d:a0:5c:76:3d:a7:e1:44:f3:36:91:d4:a4:
bb:8d:2f:4e:bd:cd:7d:37:4a:ce:67:29:84:25:c7:18:96:79:
6f:d7:71:0d:6e:1f:bc:89:2d:63:fc:14:2c:b6:ef:7a:d4:d6:
a2:8a:83:4b:7e:0b:3d:70:f7:b8:6c:56:2b:d7:69:2a:c5:c1:
a5:0c:2e:b0:04:12:56:7a:76:39:34:ee:cf:f4:35:2e:60:09:
07:a4:a8:a0:6b:7e:d3:b5:55:5a:3e:4a:4b:ac:5e:8a:27:81:
8d:39:b9:fe:a0:7b:99:cc:7e:e8:93:99:72:5d:a6:0d:ea:4c:
2c:ab:51:1a:29:81:61:3d:a7:b3:9d:4e:a9:3e:c6:6e:91:87:
d2:15:b6:4c:eb:4a:44:1a:34:d6:21:f3:f1:fa:00:fa:c4:15:
43:94:7a:dd:a1:e4:8f:95:b2:b9:6e:3d:ba:91:36:11:a9:b1:
7c:46:9c:81:47:3f:c1:e9:c9:94:08:ac:d5:e0:90:09:7f:6a:
d9:ae:19:1e:39:ba:4b:f7:f7:d9:78:e0:fe:50:07:24:c8:71:
11:b6:39:a5:a8:98:d6:a1:0e:73:72:0e:5d:0d:26:dd:95:cd:
fb:55:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:07 2026 by rpki-client