Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: xVZEGF9RoEcq2s7g8CcEv7EyijqoYEpMf9aOueeC+Ro=
Subject key identifier: A7:E1:F0:F0:CC:AF:79:E2:E0:78:A6:E3:7B:72:0D:26:33:23:5F:B1
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019F86441EE264A9F5378E828509B7794361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0CB2
Signing time: Tue 21 Jul 2026 20:00:39 +0000
Manifest this update: Tue 21 Jul 2026 20:00:39 +0000
Manifest next update: Wed 22 Jul 2026 20:00:39 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: +cdiz2TnlajCcPu4PFVipH0HD8wB9AthEP36U6149os=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:1e:e2:64:a9:f5:37:8e:82:85:09:b7:79:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jul 21 20:00:39 2026 GMT
Not After : Jul 22 20:00:39 2026 GMT
Subject: CN=a7e1f0f0ccaf79e2e078a6e37b720d2633235fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:3b:3f:ad:72:8d:c1:ab:96:74:b3:66:f1:
3e:63:95:67:15:43:b6:14:16:19:05:ba:d3:3e:01:
01:2c:ae:12:d7:41:4e:e7:4d:9d:69:fd:c8:41:ef:
34:b4:68:62:62:cd:8c:6d:ce:a8:92:06:e0:2e:2a:
3f:82:d8:00:3d:99:d7:6e:3c:d1:e7:7c:f1:3e:5e:
96:53:9a:f9:8b:a4:ea:b6:bd:10:df:da:c6:b8:9b:
5a:df:bd:37:8f:ba:f4:05:32:8d:cf:56:86:7d:7c:
a4:f7:f7:27:98:96:d5:de:92:72:07:79:34:be:af:
6a:59:cb:c9:ce:32:65:40:a2:dc:eb:ce:ca:1a:f9:
e7:76:f7:1a:5d:30:7d:dc:16:5d:35:6c:bb:11:a8:
eb:b3:c5:8a:c8:3a:e2:36:03:f7:0c:c6:4b:ef:06:
9e:3a:3d:40:53:41:91:ce:28:cf:ff:2c:d2:f2:c5:
58:31:d3:3a:db:df:47:12:35:2d:b4:85:51:ea:d9:
41:a1:18:02:f7:3b:db:dd:cc:e7:89:d8:8c:72:4f:
87:d6:43:50:d0:c4:77:18:01:99:d7:e4:da:a4:f0:
54:88:b8:9b:6f:4b:ec:d5:9b:93:02:2f:f0:8f:75:
99:64:df:88:3c:c9:8a:e8:da:6f:b2:c8:44:a2:78:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:F0:F0:CC:AF:79:E2:E0:78:A6:E3:7B:72:0D:26:33:23:5F:B1
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:58:e6:aa:66:2c:24:ee:97:5c:15:f3:c8:ab:0c:d6:ec:1d:
37:62:f8:7b:ad:e2:27:8e:c4:97:62:b9:f7:76:58:77:20:10:
0b:3f:24:62:a0:2d:a2:96:b0:40:03:4a:63:1c:8d:2d:cd:02:
b2:19:19:75:1f:62:da:e8:68:7c:f8:e2:00:59:4e:01:6b:2f:
d6:95:78:52:5f:b1:2a:1f:b7:88:03:78:90:2a:ba:4f:20:95:
ca:13:d4:d3:0e:4e:4f:b1:79:f5:18:4c:57:c7:62:9c:c5:d0:
9c:73:52:b0:b7:17:fd:e6:6d:5d:8f:d2:38:96:f4:11:db:56:
01:c1:39:62:ff:1b:e4:24:20:4c:0a:44:a5:68:4c:e6:ba:45:
2d:56:02:c6:99:11:d4:49:29:f1:5c:6c:82:b0:0f:9f:ae:a0:
07:f5:c7:41:e9:0c:ba:f2:d6:10:f3:f3:37:fb:7e:17:88:88:
e6:e4:74:07:35:1b:9b:ed:63:79:ca:38:f3:c5:92:40:40:f7:
ce:82:68:52:75:7d:84:e9:2f:29:62:24:6a:17:03:99:83:49:
f2:91:d1:88:dd:b2:1c:61:58:41:49:fa:b8:a4:cc:12:fc:7a:
5f:15:84:7c:9d:13:57:1f:00:0b:f2:88:da:a7:b2:88:8d:d3:
49:85:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:26 2026 by rpki-client