Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: wf5prGiuVIwqorE1mHXZo4cfAnE7nKPx/HgQlnyFMBw=
Subject key identifier: E6:00:12:99:E7:A2:F4:F3:58:A7:9E:A9:49:0B:4E:EB:17:EC:92:95
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A16BDA749AC712C7FB2C633C6FCBD66382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 08AE
Signing time: Sat 24 Oct 2026 03:00:41 +0000
Manifest this update: Sat 24 Oct 2026 03:00:41 +0000
Manifest next update: Sun 25 Oct 2026 03:00:41 +0000
Files and hashes: 1: 2PXpkbOya40vTQHIdgmb6-Yvhtk.roa (hash: AaumXjEA8LjC2M8f8E/wqT+3wmcC/IhOMfP5g0mboTM=)
2: 5hDOOQsTTCjOImFp0cfR8PWMank.roa (hash: TIt9ckAHrPYzJk9BHkOJ9Ahcnyy8GesCV0EQ3TrmcgA=)
3: YAi-xagsnA29kSG597NdlLhgXpA.roa (hash: CthKdljk1MHBI5XoiHbC1Qc+gFI17jk9lL7Z7MPhu00=)
4: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
5: iNPIzu2qyT3cvwGIycy3-fO4BYU.roa (hash: 6cBLWk2ZAQrVk1F3PnbiXR+1S8lxvCnwDzwGQcEQOoY=)
6: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: jxA6CZ/8HYjEDbb+LiVj1/vTT0gLI1f7yDnNufyO1pY=)
7: oe_EDtclx2PYOjjt6p14PQvkHVU.roa (hash: f9S6PmhMujGIulF8NtJi4QGmujd3tw4Oh+5oXA+NYvE=)
8: rWWpjYstmDZvfA_3JAVTB9z60Xc.roa (hash: /nuyUoKJGePmF1O5A9LBDBTzkBOzvKaLNR9LioNZzCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:74:9a:c7:12:c7:fb:2c:63:3c:6f:cb:d6:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 24 03:00:41 2026 GMT
Not After : Oct 25 03:00:41 2026 GMT
Subject: CN=e6001299e7a2f4f358a79ea9490b4eeb17ec9295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:af:4a:c2:3b:04:ec:7a:7d:d6:aa:c2:d9:
51:86:78:90:ca:d5:2f:a8:b8:38:9c:d0:19:cd:b9:
18:f2:87:4a:67:98:b6:f9:3d:ca:97:ec:ad:34:d9:
8f:3d:0c:bb:f7:1d:8d:05:c7:e9:43:fd:cb:d3:62:
b7:36:81:e9:4f:04:6f:80:f0:10:72:2c:98:f5:47:
03:4b:65:e2:5c:b0:4f:38:41:99:2d:32:0e:c5:0b:
da:0a:a4:5c:79:ac:56:ce:75:90:7a:f7:09:55:29:
66:d3:1a:7e:33:5b:26:bc:c9:33:b2:02:e0:64:8c:
5c:f7:11:1c:98:04:6e:5f:86:92:40:90:ed:ce:1b:
33:50:c7:d3:03:be:ca:62:de:f8:88:b1:aa:37:91:
3c:76:8e:e9:6f:20:52:c1:a3:81:e7:45:9d:fe:30:
71:22:68:b9:6c:e3:2d:7f:2a:4d:a5:dd:21:69:68:
d3:31:da:3e:cb:c1:f6:22:61:e6:e1:33:5c:62:9d:
f6:ff:5a:56:b3:5a:29:97:64:ee:ca:cf:e3:87:28:
e3:4b:54:5a:62:4e:8b:c7:ad:8d:ca:8e:ce:1b:36:
60:a1:c0:b3:4d:eb:8d:c8:9c:da:94:3a:2a:95:d2:
29:ae:9f:71:7d:b3:34:2c:a8:c9:9e:05:7c:94:ee:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:12:99:E7:A2:F4:F3:58:A7:9E:A9:49:0B:4E:EB:17:EC:92:95
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:86:0f:77:80:62:5f:1f:83:43:b5:6e:97:6c:bf:2a:0c:
0d:ac:dc:ab:2a:58:2f:84:fd:fd:ea:c4:7a:5c:28:e6:0c:07:
55:33:d4:40:59:3f:ea:5b:74:31:dd:1e:73:95:6f:a9:00:65:
de:4b:33:22:d8:55:d6:64:6b:30:06:d0:10:bf:72:5c:56:fc:
4e:08:67:7e:3e:26:c3:68:4c:ce:9b:d6:77:66:74:7d:c7:a0:
0c:72:83:c2:32:1f:da:80:19:19:50:3f:5c:a9:de:0d:61:e2:
a6:7e:74:02:3e:5c:b5:a6:ea:2a:c8:b4:23:f9:ed:51:1c:9a:
6c:52:d8:d1:d3:b2:55:cf:a6:e4:ba:39:bc:96:19:5e:ce:5b:
a1:56:08:18:9b:45:96:af:3c:a5:e8:82:da:7c:3b:6b:fa:c5:
23:4e:6f:c8:73:a1:ab:fe:83:a3:24:48:99:99:3a:ba:a5:3b:
82:84:f4:b0:6b:0e:96:22:0f:3d:b0:46:cd:29:fe:13:d2:a2:
11:09:8a:33:2d:ac:79:cb:75:49:8c:b6:ba:62:e6:43:61:5a:
b8:18:c3:0f:44:ab:85:1d:50:fe:e3:9e:07:0f:50:d6:28:0b:
84:9b:14:d8:7d:02:f3:5d:00:db:9b:ed:34:52:04:3a:54:14:
b8:32:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:59 2026 by rpki-client