Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: lpDxrXwqJblXSYBQRa1EgtNQxoWEaGW7YMHbAEaD0f4=
Subject key identifier: FE:05:A0:71:A5:CF:B9:1A:10:9D:24:83:B2:5E:34:ED:3C:05:58:BC
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 019FA0041E4B9E961CCCC92D06A3BF9B3CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 1280
Signing time: Sun 26 Jul 2026 20:00:52 +0000
Manifest this update: Sun 26 Jul 2026 20:00:52 +0000
Manifest next update: Mon 27 Jul 2026 20:00:52 +0000
Files and hashes: 1: L4UpAkdF8b839N44FTHNh-gC55s.roa (hash: NDtnroxc2AqyKTb6om79If+wTLdHZt92uAc1INrbcN8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: QH5evfXj/iIy7SyX9UHvkgj8ZraJPjcnpx74nagJd2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:1e:4b:9e:96:1c:cc:c9:2d:06:a3:bf:9b:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Jul 26 20:00:52 2026 GMT
Not After : Jul 27 20:00:52 2026 GMT
Subject: CN=fe05a071a5cfb91a109d2483b25e34ed3c0558bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:cc:ee:95:88:37:64:32:f8:c4:b0:a0:b3:
d6:98:5a:7f:35:9f:25:cd:3b:1b:87:a9:da:3e:a6:
28:48:aa:48:48:68:7b:71:01:a8:7e:1a:62:f7:6e:
83:5b:30:b5:95:a9:ad:99:71:92:fe:00:d6:13:51:
d6:3f:fc:a4:fc:21:54:54:e5:ec:9d:3f:75:cc:24:
e9:ff:af:e6:88:02:50:1e:ab:da:33:5b:3c:f8:e2:
d9:00:07:6f:7f:6b:71:23:5d:b8:da:a1:56:ff:5d:
af:98:19:81:f3:aa:14:d2:96:cb:e3:c1:29:81:f8:
c8:68:12:2b:31:8b:a4:8a:74:0b:13:21:bf:57:95:
93:0b:c3:02:b9:2f:18:d4:1a:75:6b:5a:3b:fd:d6:
6e:b6:d2:d5:73:64:82:28:e7:33:a4:7d:14:83:d2:
75:7e:78:50:9f:a8:d8:b7:81:85:6f:8a:0b:39:71:
c5:69:f1:1e:b5:ee:76:cb:c5:6a:aa:6b:7a:c1:58:
e7:9f:b4:d8:1f:7f:16:fe:a0:9a:28:90:ed:74:82:
f1:a5:a8:9a:85:29:75:3a:2a:02:47:b0:30:4e:13:
b6:86:a6:92:1d:2a:12:18:39:e8:d3:85:43:ad:a6:
a3:9d:a0:4e:8d:c3:4c:bc:f5:8f:7d:d4:cb:0d:f9:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:A0:71:A5:CF:B9:1A:10:9D:24:83:B2:5E:34:ED:3C:05:58:BC
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:cb:c0:29:fa:55:f4:1b:a8:82:02:c0:91:50:70:d7:2d:
f4:39:fd:97:a3:8b:41:99:81:9d:07:2f:a3:ed:13:79:4f:53:
fe:5c:cc:62:0a:6a:73:e0:fd:03:b6:88:6c:14:2a:cf:58:14:
01:2d:06:29:a5:6f:a2:fa:3e:cc:72:6b:51:10:bd:44:a4:9d:
90:f7:5c:95:ca:93:1c:69:c1:d9:c2:ca:4e:be:3d:a7:eb:ca:
9d:6b:ac:fe:69:2c:33:34:ba:f0:b8:06:c4:d5:b1:77:ec:80:
ff:a2:08:7c:e2:c4:5b:e1:ca:05:38:bf:32:75:f7:1d:41:52:
5b:9b:b1:85:19:ca:ff:55:1e:e9:73:7e:9e:d6:ac:47:9c:ff:
a0:83:23:4b:cc:c3:4c:7a:c6:6b:53:78:9b:ed:dc:84:f5:0f:
2e:45:59:c3:e6:9a:fb:19:69:35:09:95:32:34:38:09:43:65:
c3:6b:68:66:ed:e4:c9:29:b0:5c:6c:e5:b4:8e:a8:5e:eb:87:
67:6a:1a:69:bc:7d:3c:e5:d7:1b:3c:c2:98:c4:9b:c9:82:69:
95:1c:5c:34:c2:96:c0:58:35:d3:a8:d8:c3:7e:ac:7d:6d:1c:
e2:13:fb:5d:59:d5:e2:8f:30:95:f2:30:9d:a2:55:d5:43:ac:
47:f3:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:24:11 2026 by rpki-client