Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: O1GnBqMp7TrcvIFYv7hPiJYOlKE+qRd3gjnAPE4drsA=
Subject key identifier: D7:8F:A9:2E:F3:CE:A2:26:B2:DC:A6:3B:5B:35:6B:BC:C6:0C:1F:B1
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 019CE47ED0785321A156D8966647E196C0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 0235
Signing time: Fri 13 Mar 2026 00:00:41 +0000
Manifest this update: Fri 13 Mar 2026 00:00:41 +0000
Manifest next update: Sat 14 Mar 2026 00:00:41 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: ECNxAqoDgQ78Lh9ydPlq3w0O8U7Hc1XOhbIx25k0kwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:d0:78:53:21:a1:56:d8:96:66:47:e1:96:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Mar 13 00:00:41 2026 GMT
Not After : Mar 14 00:00:41 2026 GMT
Subject: CN=d78fa92ef3cea226b2dca63b5b356bbcc60c1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:69:41:93:f1:5a:39:59:20:2d:c9:55:99:
f6:49:7f:63:7a:fa:6f:ce:fa:76:99:60:e2:b3:b0:
3b:06:c5:7e:39:2f:3f:ac:93:0c:a9:37:89:ff:3b:
64:bd:d1:44:8e:92:fc:fc:b2:47:44:c1:c9:de:d2:
61:1e:80:64:85:17:63:19:42:c5:15:36:aa:4b:22:
2c:ba:28:4c:b1:41:0c:9a:20:b7:e3:03:06:dd:75:
3d:68:20:4e:6a:f5:03:34:c7:61:3c:4b:ec:45:27:
90:3e:8d:78:58:53:b2:99:a3:54:47:18:23:13:7a:
23:54:df:10:bf:65:02:cd:67:7f:a6:bb:d5:1f:d3:
33:23:58:c0:13:5f:37:40:7e:cb:88:28:38:b0:fc:
4f:65:88:45:1a:e3:e3:99:a3:f9:80:16:1e:12:62:
e6:2b:00:62:fe:c4:8a:a9:96:f3:67:19:80:5b:51:
00:ea:ad:50:7e:b9:48:b2:3d:23:48:44:1f:35:bc:
47:89:af:58:31:31:0a:c9:94:de:9c:76:99:d5:23:
98:71:78:18:bd:3c:9a:12:f4:54:f0:3c:a0:4a:3f:
29:84:48:62:98:10:80:70:ef:3b:64:9c:bc:82:79:
06:c3:1e:9f:68:56:c3:af:c3:86:bc:23:07:c7:a7:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:A9:2E:F3:CE:A2:26:B2:DC:A6:3B:5B:35:6B:BC:C6:0C:1F:B1
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:ea:2b:63:17:0f:05:5e:a0:73:03:f7:17:bd:6c:e5:ef:
88:ac:5c:9a:67:ab:b7:34:ac:1a:7b:17:4e:d0:e1:6a:df:31:
10:3a:9e:2f:05:66:a6:e3:62:ad:c3:65:52:ac:93:d3:3e:54:
a0:72:cd:41:f6:b3:18:19:8a:a6:7c:e4:05:ad:55:10:0b:dd:
19:8b:60:d4:03:be:3a:09:9f:a0:9d:4b:c1:f7:74:96:0a:6a:
68:4a:fb:63:19:90:6f:90:11:a0:82:6d:26:1c:97:26:65:60:
d6:f4:b0:e8:06:96:06:c4:32:ca:ad:83:fa:12:b5:65:97:e7:
02:de:c7:9b:4f:64:30:e9:a3:4e:f0:0c:a1:67:c5:29:36:a4:
01:4e:61:c4:3f:c1:7f:51:fd:37:62:eb:52:b3:27:3a:15:08:
bc:7b:64:af:1c:bd:33:71:ef:b6:1a:1a:c5:e9:1a:34:94:4e:
4f:00:47:1e:e4:2c:97:73:b9:45:42:fa:28:82:8d:a8:c7:f2:
a6:11:f1:7f:f8:da:ec:68:ad:94:85:56:f8:a7:43:d6:b3:9c:
1f:ec:00:34:ea:82:7c:6e:10:d3:28:7f:5a:68:dd:61:35:22:
1f:2b:ee:6c:6d:59:90:ab:0e:67:ee:57:d1:9b:c7:cb:68:a7:
0d:e8:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:03 2026 by rpki-client