Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: SFXPjzkrQZsOtt1Jl2OmlNfV0r3lwzuJB87UXca0lbQ=
Subject key identifier: D6:46:D4:89:BA:EB:C2:DC:F3:DB:89:F9:EE:09:ED:D8:B5:13:2D:A5
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01A06FF1DA046A91D67868477A0DC381D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0D2B
Signing time: Sat 05 Sep 2026 05:01:55 +0000
Manifest this update: Sat 05 Sep 2026 05:01:55 +0000
Manifest next update: Sun 06 Sep 2026 05:01:55 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: GKKWTJeLMfwaH6dlY5SjwN5kSNM42/CrluycBweMlZQ=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:da:04:6a:91:d6:78:68:47:7a:0d:c3:81:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Sep 5 05:01:55 2026 GMT
Not After : Sep 6 05:01:55 2026 GMT
Subject: CN=d646d489baebc2dcf3db89f9ee09edd8b5132da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:6b:9b:6e:49:ed:72:3f:e4:bc:58:38:d7:
9b:ac:e2:ee:d4:27:c8:f3:34:b2:04:d7:9f:60:93:
53:7b:db:84:ce:fc:9d:c4:16:3f:26:83:9d:bc:94:
ad:d2:f5:5a:3b:16:1f:b7:52:22:cb:05:cb:61:0d:
18:72:8f:ff:a4:53:87:c6:35:a3:b3:09:8f:55:0e:
9f:b3:f1:52:74:c6:f1:69:71:7d:ba:02:6c:8d:39:
84:9d:c8:8a:20:2e:4a:60:79:ba:c3:34:a7:3c:57:
9f:cd:78:bc:48:3c:62:f5:3c:f9:f6:e2:90:36:15:
99:f5:ca:20:7d:b3:3c:ca:39:77:6e:94:f4:46:b3:
48:40:22:e1:19:b5:b5:92:09:fd:a4:d1:01:0f:a1:
7d:05:a4:c3:b4:48:61:9d:ec:7d:bf:65:73:ce:99:
cd:c6:c6:f7:de:43:a8:8e:07:5c:f7:ba:94:eb:34:
dc:b2:9d:17:98:f3:b1:ff:9e:87:91:19:0b:f1:24:
27:c9:65:2f:2a:fe:dd:c9:56:01:51:06:b9:e7:77:
da:d9:ed:d9:06:a5:ba:0a:d9:79:8a:64:41:7b:fc:
09:e3:9d:e4:db:17:26:92:a8:54:55:19:4d:44:72:
4e:da:7f:d3:9b:f9:a6:e2:03:07:81:04:73:9b:a2:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:D4:89:BA:EB:C2:DC:F3:DB:89:F9:EE:09:ED:D8:B5:13:2D:A5
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:f0:3f:13:4b:56:a2:6e:dc:9c:37:90:4b:ca:91:f2:c1:
9d:3a:8c:48:c8:03:ff:d5:4f:64:33:7b:f2:88:a7:1f:57:e7:
a7:7c:1a:ca:ea:6f:06:24:51:84:0a:b1:a3:03:6a:dd:0c:97:
14:fb:93:26:75:c4:08:62:59:e8:2a:c6:a7:7c:81:5c:58:ce:
54:e0:cc:00:0f:e5:a4:db:13:5a:2e:c0:9e:cd:39:91:d2:71:
b1:61:6f:51:ba:b6:d4:34:e9:12:e6:62:11:d0:4a:6c:53:51:
7b:b0:27:1d:08:78:d6:ed:f2:c5:84:fc:5a:e7:f2:08:a8:ce:
cb:ab:c2:ca:74:10:79:4e:83:90:cb:61:12:d4:53:45:38:c1:
48:dd:c6:55:f7:36:9a:e1:9b:95:35:04:c0:ab:27:e2:c1:0c:
7c:47:78:08:d6:ca:1d:1e:1d:d1:1f:72:d7:d7:fd:37:84:1e:
56:28:32:35:b5:b7:cc:00:ee:48:fd:d4:13:dc:5d:64:06:1a:
ed:3e:c2:dc:c2:1b:44:4e:fc:32:d0:a0:27:61:13:46:99:7d:
aa:ba:53:3d:1f:8d:a4:15:6c:22:f7:cb:d9:45:16:3c:a0:b3:
04:37:ea:8b:38:91:f0:c3:52:1e:bd:c4:68:af:20:99:d6:f2:
96:7f:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:41:25 2026 by rpki-client