Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: W43DLI02aEF4e1ta9duvQMiEZ2lMKUoVhcQNWlDLDDw=
Subject key identifier: 22:75:C9:46:3F:03:85:3C:76:5A:77:FA:44:6D:72:33:F2:77:00:94
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 01A159665E4AB8D2E94A70295DCF433F1F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0575
Signing time: Tue 20 Oct 2026 13:00:43 +0000
Manifest this update: Tue 20 Oct 2026 13:00:43 +0000
Manifest next update: Wed 21 Oct 2026 13:00:43 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: oI3x8p8cm2aDhuJC12EzL0zoobCOflF6HTu/G5e+ps8=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:5e:4a:b8:d2:e9:4a:70:29:5d:cf:43:3f:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Oct 20 13:00:43 2026 GMT
Not After : Oct 21 13:00:43 2026 GMT
Subject: CN=2275c9463f03853c765a77fa446d7233f2770094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:f6:06:65:15:fa:37:00:ac:55:bf:47:de:
52:19:5e:4c:74:79:5d:88:b3:17:45:04:e0:5e:56:
4f:a8:7d:e2:2d:a5:58:c7:96:e7:d1:44:e0:69:df:
5d:7b:40:c5:e9:9e:e6:26:16:2c:87:cf:ca:e4:82:
37:69:a2:b7:c4:b9:28:20:23:94:26:f6:29:d0:1d:
c7:cb:d1:27:f7:70:11:ca:ed:0d:26:ab:67:64:e5:
a4:e4:ee:a9:d4:a4:27:c9:87:c9:a5:ea:32:e8:63:
64:c4:c9:37:5d:7a:50:7f:27:32:1c:7f:86:97:4c:
82:ca:7f:02:6e:0d:3a:98:2e:e2:b6:68:f2:ec:17:
73:a8:94:bd:5f:1e:8a:45:b7:c9:1c:61:0c:23:3c:
df:0d:44:88:8c:25:e2:bc:28:58:f7:10:31:d0:9b:
b6:0e:64:8f:8b:a2:86:f3:82:02:68:11:10:ee:19:
2d:5f:ab:bc:3d:44:d3:8a:7d:1d:32:da:d8:7f:06:
25:23:19:fa:2c:fe:51:35:24:a8:64:6b:b9:5e:43:
b2:24:a6:e4:b9:f2:d4:8b:7f:ec:dd:b8:c1:41:da:
13:e4:8f:73:d5:44:9c:f8:18:4d:0c:90:0f:5c:d5:
3b:75:7a:4a:1e:23:d9:aa:a6:e7:dd:0d:2a:cd:e2:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:C9:46:3F:03:85:3C:76:5A:77:FA:44:6D:72:33:F2:77:00:94
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d1:55:e9:6b:44:9a:d7:71:7f:27:31:79:9f:f7:49:bb:94:
ca:84:c4:71:28:15:a2:ab:e4:bf:4a:6d:cd:4c:4e:0a:6c:53:
18:f5:9e:f6:15:ad:d8:1a:48:32:32:04:62:2f:ba:fa:57:af:
81:0a:76:05:39:9d:3a:59:f3:90:4d:e6:af:6b:ea:16:07:93:
d3:60:78:83:c2:48:e1:75:ad:ec:c2:be:ec:82:bd:d6:ae:79:
b5:3e:ef:16:48:7c:8f:36:96:4b:24:14:82:dd:d0:4e:4b:b2:
ec:46:90:b5:60:f9:f6:8b:d3:fc:bd:94:a1:1e:ed:9f:9a:bc:
52:52:c8:45:c4:86:11:be:b7:97:23:ea:96:6e:a9:73:17:05:
88:99:e2:f9:dd:c6:30:3a:6a:7f:f2:d2:0c:0d:ee:ba:58:68:
a8:f9:2e:13:46:13:4f:cb:bf:91:04:f3:be:3f:ec:ba:a4:3b:
4c:cc:ed:6d:95:9b:c3:00:0b:00:04:7f:fb:29:35:37:70:68:
08:f4:77:72:58:7f:19:c8:53:0b:d9:1b:2b:2d:33:62:5d:06:
c0:fe:8f:b1:46:4e:31:6d:ae:9f:7d:07:38:9c:2c:1c:e1:77:
28:e5:68:bc:e3:00:f0:93:a4:24:26:e6:15:1d:94:b4:8f:2b:
3c:e7:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:28:54 2026 by rpki-client