Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: K4msGC2tmzy6Jc0AQsRv7Tez/x/itzCBUf18tmSHQUc=
Subject key identifier: C4:CA:69:71:E5:BD:6C:8B:EC:D8:23:E3:76:DD:2D:B7:9F:62:7A:41
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019D38D2C04F85531E7345874AC42C99B228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 060E
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: xhOBn8/h5jTysl9W42f56bk4FN6iTquwFG4VOJSFkmE=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c0:4f:85:53:1e:73:45:87:4a:c4:2c:99:b2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=c4ca6971e5bd6c8becd823e376dd2db79f627a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:26:fd:4d:51:57:f7:b5:63:45:a3:da:93:
bd:49:84:84:c4:04:22:70:ae:15:a5:3c:ef:b8:b3:
11:f1:8a:21:d8:4a:6e:81:25:b7:c2:dc:49:d2:b0:
4a:16:f1:08:73:bf:37:12:d4:28:fb:cb:68:1c:6c:
59:9b:31:fd:2a:75:92:cd:8a:1f:26:0b:fc:18:98:
07:09:41:7e:f4:eb:4a:c2:d8:ad:68:7e:34:fd:b5:
7b:5a:93:8b:23:81:0b:00:82:97:75:1a:b3:88:24:
4c:52:75:5f:94:9f:6e:ba:86:7d:da:90:26:3e:c1:
4d:7a:f0:b0:33:cf:15:ee:f2:51:72:fc:e5:aa:16:
a2:5f:2d:10:6b:58:39:12:85:13:13:86:1b:ae:db:
92:2e:b3:06:f3:69:50:aa:0c:38:30:79:58:55:9d:
32:bc:4f:62:ca:7e:91:07:28:40:61:25:6c:3c:c8:
13:35:59:a6:fe:c7:2f:d3:48:8c:ec:81:14:73:5d:
fe:36:58:f2:96:5a:12:20:55:9c:35:33:8a:bb:e2:
b0:7f:80:eb:24:ca:a3:d8:0b:9e:8a:06:71:ca:00:
c1:7c:6d:ca:4d:1c:6b:0d:aa:9a:12:69:7e:a8:d8:
ca:85:e4:57:71:9d:01:46:35:98:ce:60:d3:b3:ee:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:69:71:E5:BD:6C:8B:EC:D8:23:E3:76:DD:2D:B7:9F:62:7A:41
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:13:7c:42:64:bf:53:0a:26:1b:a9:06:3b:34:c2:a4:c7:
e5:73:88:ed:97:f2:d2:79:08:7c:cf:9d:c0:e1:67:ca:8a:05:
22:11:cb:08:66:f7:0e:63:0d:6e:ca:86:6e:d5:df:6e:e0:42:
7c:51:91:e8:83:38:ab:2d:dc:cb:1b:fb:82:6d:4e:9f:73:54:
d3:c7:6f:25:68:fa:e9:31:b1:e4:21:97:14:af:3b:77:24:92:
4a:d9:98:3d:9e:6c:7a:aa:12:6e:0f:d5:28:7b:92:de:99:57:
81:c6:3a:41:50:fe:42:2e:39:07:c0:0b:1f:af:02:7d:be:0e:
38:ee:b8:17:1a:e9:1e:0d:6c:eb:76:91:1e:2b:0e:59:a0:b8:
e5:f0:a8:d2:f0:3e:73:d1:6b:b0:1c:9b:5a:a4:f2:0f:90:33:
e3:9c:d8:e2:c1:b0:19:40:3c:87:ba:dc:21:88:3e:d2:cd:b2:
f1:2d:50:40:82:bd:70:c2:90:3a:09:3d:a1:db:60:56:c8:e9:
52:c0:33:93:a8:0f:6f:5a:88:61:0c:ce:f5:24:8d:f5:66:af:
99:91:9b:ff:e1:fc:6b:e6:cd:32:73:1d:a7:90:92:e8:72:1b:
4a:c7:af:4e:99:db:f9:d8:c8:d5:ca:ef:38:aa:df:68:cb:49:
89:94:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:52 2026 by rpki-client