Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: yvHMMMNvpdWK8xYljFliMUoWe+TkeHc1CUY4mkbUsCw=
Subject key identifier: A4:4D:D4:FC:C9:30:4C:BE:5A:BF:3F:A9:CE:4E:8B:AB:95:1A:C9:9B
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 01A06CEFCDF10604729878F9CF46AD7E4776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 10CF
Signing time: Fri 04 Sep 2026 15:00:50 +0000
Manifest this update: Fri 04 Sep 2026 15:00:50 +0000
Manifest next update: Sat 05 Sep 2026 15:00:50 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: TR4sIVPqJgpytH9mG9F1Cfp/oM0C/2s05CCkVZ20uBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ef:cd:f1:06:04:72:98:78:f9:cf:46:ad:7e:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Sep 4 15:00:50 2026 GMT
Not After : Sep 5 15:00:50 2026 GMT
Subject: CN=a44dd4fcc9304cbe5abf3fa9ce4e8bab951ac99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:03:98:34:ad:b7:19:8d:f5:50:e8:fb:73:
a8:c9:0f:40:6c:17:cc:83:d6:ab:d1:a6:b6:f8:ad:
32:f6:07:91:87:e0:fd:df:33:41:23:87:a2:ba:30:
07:06:13:74:db:95:a9:ca:8d:ce:e4:2f:50:c6:ab:
b5:dc:8d:31:99:90:97:4a:90:36:3f:1d:0d:29:83:
96:b5:ff:5a:73:e3:ef:af:9a:82:b5:a7:a9:d4:a8:
2b:02:34:13:26:52:c5:77:79:68:5d:4b:28:58:a8:
f3:63:73:26:eb:4e:7c:29:e0:49:de:b0:27:10:52:
06:d4:6b:6a:c5:c0:5a:82:d2:82:48:d2:cd:2f:9f:
cf:7c:37:12:4d:51:5a:bc:06:b8:1c:71:ba:0b:77:
ce:5d:f1:11:d1:b5:2f:5f:6e:f7:d5:fc:5d:f8:eb:
4b:98:d1:a7:02:b2:53:05:fb:76:e3:ca:02:d2:42:
39:78:40:9d:17:69:de:8d:00:17:49:34:45:02:0c:
c3:77:35:46:90:73:3c:70:b7:a6:ee:34:a4:9f:88:
02:44:4c:04:f6:cd:62:77:44:a6:51:b3:2e:b4:1c:
6d:8d:78:f0:25:f6:9e:88:ef:bf:11:30:f0:6e:76:
af:2a:10:be:5a:ed:5b:9f:a6:96:69:92:52:c2:12:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:D4:FC:C9:30:4C:BE:5A:BF:3F:A9:CE:4E:8B:AB:95:1A:C9:9B
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a0:78:90:b3:ac:4d:95:c4:a5:aa:5d:98:52:8e:8f:cb:0f:
4e:f8:b6:fc:80:04:b1:89:fc:28:59:c4:f2:e5:0e:26:f1:a6:
b4:73:bf:3b:44:94:5f:3d:66:c0:68:7b:cd:9f:59:fc:3a:08:
99:93:ec:14:04:ce:ee:b7:45:44:47:fa:0c:5c:63:57:67:50:
5a:06:97:95:dd:68:57:97:27:1f:6c:0a:ef:5a:ef:81:e6:a1:
52:fc:a0:b4:59:04:05:5d:ca:76:8d:94:29:50:7c:3d:ce:09:
62:40:26:97:33:80:67:45:2b:26:cb:d0:78:1e:1a:d7:7d:35:
14:64:09:f2:31:40:e6:96:de:4a:9f:71:86:3d:26:e1:87:52:
dd:a5:34:9a:60:b9:fd:78:13:95:74:3c:fa:6f:26:7f:d5:0a:
b2:ac:18:98:cb:87:a7:49:fa:8a:99:a3:28:0d:72:8e:2b:fe:
63:fe:2d:8b:88:65:90:6b:46:c4:a1:70:5a:d2:83:d6:f4:ff:
01:96:7e:bc:19:6b:6d:9e:a0:4a:b6:a2:6d:c4:5a:9f:0e:f7:
25:e3:3b:91:e6:92:d7:04:57:f7:2c:f2:44:d7:f4:b5:51:dd:
e3:32:a1:31:fc:b7:3b:64:8f:73:48:b3:e2:3a:51:18:3f:01:
88:93:97:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs783xBgRymHj5z0atfkd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk
ODQ3Y2YwHhcNMjYwOTA0MTUwMDUwWhcNMjYwOTA1MTUwMDUwWjAzMTEwLwYDVQQD
EyhhNDRkZDRmY2M5MzA0Y2JlNWFiZjNmYTljZTRlOGJhYjk1MWFjOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZwDmDSttxmN9VDo+3OoyQ9AbBfM
g9ar0aa2+K0y9geRh+D93zNBI4eiujAHBhN025Wpyo3O5C9Qxqu13I0xmZCXSpA2
Px0NKYOWtf9ac+Pvr5qCtaep1KgrAjQTJlLFd3loXUsoWKjzY3Mm6058KeBJ3rAn
EFIG1GtqxcBagtKCSNLNL5/PfDcSTVFavAa4HHG6C3fOXfER0bUvX2731fxd+OtL
mNGnArJTBft248oC0kI5eECdF2nejQAXSTRFAgzDdzVGkHM8cLem7jSkn4gCREwE
9s1id0SmUbMutBxtjXjwJfaeiO+/ETDwbnavKhC+Wu1bn6aWaZJSwhL4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRN1PzJMEy+Wr8/qc5Oi6uVGsmbMB8GA1UdIwQY
MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt
YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh
LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6B4kLOs
TZXEpapdmFKOj8sPTvi2/IAEsYn8KFnE8uUOJvGmtHO/O0SUXz1mwGh7zZ9Z/DoI
mZPsFATO7rdFREf6DFxjV2dQWgaXld1oV5cnH2wK71rvgeahUvygtFkEBV3Kdo2U
KVB8Pc4JYkAmlzOAZ0UrJsvQeB4a1301FGQJ8jFA5pbeSp9xhj0m4YdS3aU0mmC5
/XgTlXQ8+m8mf9UKsqwYmMuHp0n6ipmjKA1yjiv+Y/4ti4hlkGtGxKFwWtKD1vT/
AZZ+vBlrbZ6gSraibcRanw73JeM7keaS1wRX9yzyRNf0tVHd4zKhMfy3O2SPc0iz
4jpRGD8BiJOXNg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:51:18 2026 by rpki-client