Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: CaF2FZ3nqlzyPBtuczpCVr31DVUz/PoMDJ8xzYYOuP0=
Subject key identifier: A6:80:0F:24:BF:46:02:B5:9C:C0:0A:C4:6C:85:8D:3C:E6:95:B4:DC
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 01A03F72CDA1ED1A678DDEA228AD41BB98FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 04E3
Signing time: Wed 26 Aug 2026 19:01:23 +0000
Manifest this update: Wed 26 Aug 2026 19:01:23 +0000
Manifest next update: Thu 27 Aug 2026 19:01:23 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: mUNf24ESzFhHNIU9AwDI9AR7lldyI46h/kYzS0mrvhE=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:cd:a1:ed:1a:67:8d:de:a2:28:ad:41:bb:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Aug 26 19:01:23 2026 GMT
Not After : Aug 27 19:01:23 2026 GMT
Subject: CN=a6800f24bf4602b59cc00ac46c858d3ce695b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:2e:90:5c:72:c7:4d:ea:70:74:c7:06:3d:
f2:61:58:13:16:c9:4c:06:ca:36:8d:3f:79:03:98:
b7:60:86:ce:32:67:0b:f1:ca:6c:df:19:e1:30:f8:
02:a5:e7:cd:15:84:0f:2e:87:96:eb:9b:80:40:62:
5e:06:a1:7c:d8:33:61:24:55:08:79:51:a8:6a:d6:
18:7e:95:19:b1:5c:78:65:d2:fd:92:55:5a:ab:6d:
18:ab:cb:34:e2:db:29:3d:06:22:ea:40:4a:d2:45:
20:7c:90:56:a7:27:e8:c9:9a:fa:f2:bc:50:7a:0b:
4f:02:26:36:e1:75:f5:dd:a6:7a:14:80:19:d6:7f:
bb:63:10:d7:b2:0f:51:97:a8:d8:c6:d0:1d:90:f0:
b0:74:9c:0a:30:ae:a7:99:8b:b3:cd:e4:05:a6:4c:
09:8b:8b:73:77:65:e5:60:6d:93:0c:24:0b:fb:bf:
81:01:f8:c5:ec:7a:c3:fb:70:0a:c2:7b:74:3c:89:
d5:aa:c6:10:eb:b1:ed:f6:1f:98:82:99:cf:f8:36:
6a:a7:7e:07:ec:ed:70:5e:37:5a:0c:8d:8c:f8:02:
e2:4e:b0:09:36:17:97:ab:9b:f3:fa:53:d6:93:20:
ec:d7:76:ec:82:6b:39:fc:16:1a:e2:0f:6b:b4:75:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:0F:24:BF:46:02:B5:9C:C0:0A:C4:6C:85:8D:3C:E6:95:B4:DC
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:49:d3:a6:74:9b:b6:fa:55:5e:17:15:5f:86:73:71:f1:e1:
11:ef:ef:2b:3f:09:52:e2:84:18:ff:c4:03:1d:64:83:d9:38:
b8:25:60:07:e5:5b:62:cb:63:58:d1:64:42:b5:34:07:cb:6a:
f9:fe:25:12:57:d1:96:66:5f:52:d5:f5:ed:c9:51:c6:f6:e3:
43:1c:75:49:2c:22:f0:c6:a3:64:be:2f:64:0b:53:0a:66:14:
db:0d:91:36:c9:73:87:d4:56:75:db:51:fd:f8:46:3c:ed:46:
e5:84:07:d1:e0:9b:80:8d:2b:c1:1d:56:e4:26:a1:5c:85:ae:
60:0d:19:34:28:c3:fd:2f:20:86:63:8e:1d:d4:bc:8c:9f:9e:
72:32:c8:2a:30:23:d3:ce:33:df:59:fc:9a:75:d3:e0:96:de:
ce:30:2c:a5:40:ba:b0:8f:0b:ba:3b:5d:16:c7:b9:ef:6a:91:
be:82:4a:fb:0e:da:96:0b:e8:b3:ff:77:7a:7e:6b:8b:02:6a:
6a:1b:fc:0c:ae:ea:ec:d8:73:e4:0c:d8:8c:5f:05:81:32:74:
fd:97:26:31:5e:c9:96:6b:b0:29:d6:32:d8:9b:db:d6:31:2e:
6f:fd:88:a7:e6:e9:02:c9:c2:28:b3:ac:67:84:d1:05:6a:33:
f3:41:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:58 2026 by rpki-client