Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: hiNJ+5E6KKIf7bH+8T/ZSjk+COEbeaQgoTC43GryjPk=
Subject key identifier: 49:5E:A4:2C:81:02:AA:C5:28:E8:BF:A8:CB:23:03:DB:7B:25:93:91
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 01A089B0B0F7C3960714F9DF5BBCC5D1F4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 12F9
Signing time: Thu 10 Sep 2026 05:00:53 +0000
Manifest this update: Thu 10 Sep 2026 05:00:53 +0000
Manifest next update: Fri 11 Sep 2026 05:00:53 +0000
Files and hashes: 1: L4UpAkdF8b839N44FTHNh-gC55s.roa (hash: NDtnroxc2AqyKTb6om79If+wTLdHZt92uAc1INrbcN8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: a42HoMUfrMxA7CbvLnTlEcCwHzCqdRHR1jv3MDMqj6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:b0:f7:c3:96:07:14:f9:df:5b:bc:c5:d1:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Sep 10 05:00:53 2026 GMT
Not After : Sep 11 05:00:53 2026 GMT
Subject: CN=495ea42c8102aac528e8bfa8cb2303db7b259391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:01:32:27:00:88:89:4f:7f:c0:7c:3d:ea:
b6:7f:e7:2e:ec:6c:b5:06:4a:88:51:ac:52:e4:1e:
a1:01:26:b5:f6:f8:4a:f4:ca:ce:53:4f:14:88:0c:
5a:8b:cb:25:e3:0a:0e:86:0f:e0:65:96:63:60:35:
27:3e:7a:78:76:70:3b:13:cc:e6:6e:38:ba:7e:62:
3a:83:cb:46:15:fe:6a:b7:bd:8e:f6:e1:61:4d:5e:
b1:51:b2:a7:a3:61:0b:9b:94:70:d7:8b:eb:68:10:
17:0d:a1:de:93:68:c0:aa:57:c7:0a:23:a9:17:05:
e7:ce:d2:f8:54:e0:49:83:92:9b:92:ca:b9:cd:99:
01:90:29:38:b5:9e:ef:66:2a:3d:61:82:a9:d0:c0:
7c:30:47:ee:e0:63:73:be:d4:17:19:7c:02:35:0b:
cf:fe:63:f9:0a:f4:8b:be:7a:51:69:8a:f4:2b:f2:
a2:49:11:ee:8f:d4:be:35:8b:9b:2b:b5:ec:71:29:
8d:d6:d1:51:a9:02:58:e9:b3:e3:36:16:8f:df:b6:
85:6d:02:19:6e:92:3b:a5:67:17:80:f8:a6:a9:51:
33:6c:32:40:01:03:cd:c0:9e:11:ff:31:82:d2:86:
ac:55:4e:88:fd:9f:c5:1b:26:93:f9:2b:8b:f6:52:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:A4:2C:81:02:AA:C5:28:E8:BF:A8:CB:23:03:DB:7B:25:93:91
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:99:1e:3a:7d:1f:ba:af:53:9f:d0:3d:80:c0:2f:af:42:
2a:44:eb:61:df:e4:a4:2c:92:1d:9f:94:05:1c:e5:ae:84:c8:
12:cc:8f:94:a8:6f:f5:1d:4d:02:69:74:d1:ad:c3:ea:c6:05:
5a:58:34:dc:9a:98:39:4c:5c:4b:f2:07:f5:e1:70:89:89:ee:
00:5d:49:6c:14:d5:4e:61:7c:ae:f4:53:b0:b4:e4:77:20:fc:
50:24:93:13:06:c2:95:c9:92:fa:eb:c6:1f:c9:03:a6:f2:a1:
09:b0:65:c2:2e:af:d5:7b:63:5d:0c:12:32:b4:b0:b9:68:8b:
bb:6c:d5:22:1b:5d:a9:76:6c:11:a9:87:e2:56:07:ef:d3:0d:
59:aa:28:f5:05:a9:2a:6c:d4:05:77:9f:49:da:15:61:f5:05:
66:ef:f4:9c:18:d5:51:7f:45:cf:95:54:83:75:7b:de:54:a5:
f4:25:29:cb:86:67:b9:1f:09:d5:29:36:bf:27:26:18:0e:5c:
63:9c:06:f1:f5:53:50:97:77:9d:9b:ca:53:47:3c:78:05:91:
b0:65:25:52:c0:47:03:c9:70:67:3b:6c:61:87:d1:b0:7a:2f:
d3:23:2b:03:3a:28:e4:97:ee:29:bd:92:f7:18:00:b1:bb:77:
8b:ae:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:11:29 2026 by rpki-client