Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: dNXutOZyCzQOa1xr2NfJFvz/l0s+FwuGmxAICAgP1EQ=
Subject key identifier: D1:3D:A7:82:6D:51:72:E2:3E:39:07:F5:1C:14:72:A6:D7:DC:D9:C5
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019EF914B57FF7A9BDFFDC00BA1BDC3F3C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 043A
Signing time: Wed 24 Jun 2026 10:02:24 +0000
Manifest this update: Wed 24 Jun 2026 10:02:24 +0000
Manifest next update: Thu 25 Jun 2026 10:02:24 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: 71YSZct4RfrncIFa58gQyR6C1WDRoCL050+VCO6N7p4=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:14:b5:7f:f7:a9:bd:ff:dc:00:ba:1b:dc:3f:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jun 24 10:02:24 2026 GMT
Not After : Jun 25 10:02:24 2026 GMT
Subject: CN=d13da7826d5172e23e3907f51c1472a6d7dcd9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:d8:0f:b4:3c:79:a9:fc:19:0f:e5:f6:96:
6a:a8:29:6c:2d:48:5c:81:90:97:d2:3d:6a:44:ff:
84:37:5c:d4:2a:7a:8d:e9:42:4f:b1:a9:f1:2f:5a:
c9:7c:21:79:40:99:1c:e7:b4:17:50:82:85:e2:9a:
ec:6c:a7:02:68:f0:a9:3c:79:4c:a0:fa:cd:92:e3:
f5:8a:68:d5:e3:c7:21:54:bf:cd:ee:68:35:19:78:
18:5d:1c:ec:c5:0d:34:95:ea:d5:2c:bc:2f:bc:d4:
b3:c2:07:10:9f:0e:db:f6:75:e0:6c:25:0a:ad:2e:
f5:36:7a:9c:c3:04:37:55:81:55:5c:8a:6d:35:5e:
58:aa:53:b4:30:0c:1d:c3:27:db:88:30:6c:9a:92:
91:5c:9f:97:0e:6c:69:eb:be:db:59:c4:46:15:c3:
ed:a4:0a:31:76:41:f3:66:ad:cb:27:61:8f:1b:a1:
b4:d4:e0:6c:ea:3a:f1:3f:d0:71:8f:17:75:bc:fe:
29:45:2b:19:42:d5:e2:9f:c6:74:fb:84:71:1a:c5:
ec:19:cc:c4:bd:53:c2:4d:8d:38:a7:94:eb:1f:6b:
f2:c3:5b:a6:6b:2b:43:b5:33:24:d8:98:29:99:88:
57:41:67:5e:96:e1:fc:75:eb:5b:b6:8d:97:6e:00:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:A7:82:6D:51:72:E2:3E:39:07:F5:1C:14:72:A6:D7:DC:D9:C5
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b3:b9:d3:ad:77:ed:c1:f0:71:ac:ec:b5:8e:38:f0:ca:40:
72:07:93:cc:11:23:22:b2:10:a6:62:c5:6a:2e:bf:11:19:56:
fe:5d:5f:2c:74:75:3f:c2:0d:19:5a:e9:8d:95:05:2b:13:a6:
23:1c:9d:b3:0b:0a:ff:93:22:40:55:c7:64:4a:d3:a7:09:ab:
a3:84:7f:b4:ec:74:0e:42:82:6c:25:66:41:7b:43:55:f5:c8:
ba:5b:7e:44:22:ab:a5:66:46:64:61:77:66:3c:6e:6a:98:3c:
07:21:be:e5:95:18:f9:b9:70:30:db:71:cf:c8:75:03:af:b0:
0b:28:d7:29:28:78:cf:2a:cb:e6:4a:72:a5:a7:cf:38:cb:2e:
0c:40:6f:98:47:96:7c:1d:3f:1f:40:07:75:5e:75:59:4c:05:
78:66:da:a3:1a:1e:27:ee:27:02:27:af:72:e3:6d:81:af:36:
4c:60:03:0e:ea:8e:67:9c:54:57:fd:13:74:eb:42:4b:23:43:
9e:e2:1b:16:f9:4c:39:98:45:69:aa:6d:3b:ec:49:d2:dd:9a:
f5:fe:02:b4:fd:45:a9:0f:3a:45:b1:bb:4e:18:3e:50:63:e5:
33:67:a4:d3:eb:51:40:e0:45:1d:c8:07:db:3e:63:a3:cd:62:
03:db:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 13:34:12 2026 by rpki-client