Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: i78FyfISA+JTsjaSW/BJaSWaoUjQ2LSZ8Go+NNuXgxo=
Subject key identifier: A9:E4:15:CB:BD:C7:90:E5:E5:AE:55:78:60:DC:D4:D1:B0:63:A1:CE
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 019EB87CCAAA700033545E8A23B2CC4B6B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0FED
Signing time: Thu 11 Jun 2026 21:00:46 +0000
Manifest this update: Thu 11 Jun 2026 21:00:46 +0000
Manifest next update: Fri 12 Jun 2026 21:00:46 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: 2V7phhg5N1gtMaXN43/RWLbHioDFw3yGpffWPQ6oo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ca:aa:70:00:33:54:5e:8a:23:b2:cc:4b:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jun 11 21:00:46 2026 GMT
Not After : Jun 12 21:00:46 2026 GMT
Subject: CN=a9e415cbbdc790e5e5ae557860dcd4d1b063a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:3d:ce:04:d3:3d:c1:1f:ef:3d:fc:f2:a2:
c4:2a:51:eb:ce:c6:7c:c6:57:71:f4:25:62:ed:a5:
15:3a:3f:2c:68:4f:bf:42:fd:c9:07:09:2d:30:d4:
00:be:02:b2:3f:74:b5:e5:68:3a:4b:96:87:0e:7e:
28:28:f5:0f:33:75:8a:79:d6:1c:1d:63:25:d0:66:
c9:52:1d:b5:1e:93:3c:7d:04:cf:53:87:a0:aa:f9:
35:03:74:2a:74:5b:97:bc:ca:80:1e:5c:5f:14:5f:
df:be:b6:e0:a6:12:91:5f:bf:15:3d:ae:79:d9:bc:
d7:3e:9a:9d:30:f5:3a:8c:7b:a7:43:96:c7:63:f5:
ea:7f:fc:c4:55:03:ae:ff:ec:7f:4f:89:b2:4e:22:
b7:da:ee:b4:09:d9:5d:73:bb:89:1f:5c:36:12:d0:
3d:fd:43:4c:be:2f:68:74:23:df:67:4b:88:fb:4e:
0b:46:d2:62:58:e0:c4:dd:f6:2c:a3:99:a3:6c:42:
db:12:01:73:24:f6:47:5b:97:2c:2f:66:b4:8e:4b:
6f:d6:6a:d1:1b:68:20:af:11:46:78:b7:82:6c:1a:
63:52:6a:d7:aa:64:4f:fd:c0:65:43:c3:c6:bf:82:
00:59:f3:b1:84:14:c4:be:d7:64:05:ad:76:c6:0e:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:15:CB:BD:C7:90:E5:E5:AE:55:78:60:DC:D4:D1:B0:63:A1:CE
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:90:dc:a1:76:80:c9:54:b6:04:40:96:32:cb:e6:db:d1:
22:8d:a3:65:ab:30:80:fd:da:2b:2d:ae:59:c9:5d:ee:e9:95:
68:92:a1:0d:5a:f5:fc:d1:f3:ac:b3:91:dd:d1:ff:43:64:65:
9c:0d:b6:3d:e2:bf:af:59:43:f2:63:18:77:bb:b4:47:2f:96:
16:9c:fd:e5:a1:8d:a3:ba:d2:fc:02:0e:92:8d:b6:93:74:05:
f3:18:89:9c:af:1c:ee:8f:13:3b:02:ad:3c:e8:7f:27:66:40:
b4:4f:c4:2c:d5:7e:81:0d:1e:3c:68:7d:5b:6b:38:c9:8c:67:
4c:12:82:98:b0:1e:ce:ef:03:9e:5e:32:f8:e6:7b:2c:02:9a:
cb:0f:7a:82:1f:07:8d:b4:6d:b2:7a:ca:d3:5b:ad:a3:40:27:
1e:d7:64:2e:ff:3d:a0:58:69:6f:12:98:d9:0f:c8:67:3c:33:
31:8d:2d:8b:05:13:0a:93:68:4c:5c:00:57:2d:8a:6e:6d:e0:
13:ef:90:03:7a:bd:b9:c8:ff:06:53:7e:f7:e6:a6:5a:87:61:
6f:1a:22:b7:a3:67:98:15:eb:98:5f:37:dc:e0:d6:f8:30:0c:
b7:66:7d:b3:5e:cb:d7:63:c9:bb:1d:74:c9:de:78:5e:25:7b:
8e:59:86:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fMqqcAAzVF6KI7LMS2suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk
ODQ3Y2YwHhcNMjYwNjExMjEwMDQ2WhcNMjYwNjEyMjEwMDQ2WjAzMTEwLwYDVQQD
EyhhOWU0MTVjYmJkYzc5MGU1ZTVhZTU1Nzg2MGRjZDRkMWIwNjNhMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jo9zgTTPcEf7z388qLEKlHrzsZ8
xldx9CVi7aUVOj8saE+/Qv3JBwktMNQAvgKyP3S15Wg6S5aHDn4oKPUPM3WKedYc
HWMl0GbJUh21HpM8fQTPU4egqvk1A3QqdFuXvMqAHlxfFF/fvrbgphKRX78VPa55
2bzXPpqdMPU6jHunQ5bHY/Xqf/zEVQOu/+x/T4myTiK32u60Cdldc7uJH1w2EtA9
/UNMvi9odCPfZ0uI+04LRtJiWODE3fYso5mjbELbEgFzJPZHW5csL2a0jktv1mrR
G2ggrxFGeLeCbBpjUmrXqmRP/cBlQ8PGv4IAWfOxhBTEvtdkBa12xg7yTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnkFcu9x5Dl5a5VeGDc1NGwY6HOMB8GA1UdIwQY
MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt
YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh
LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUqQ3KF2
gMlUtgRAljLL5tvRIo2jZaswgP3aKy2uWcld7umVaJKhDVr1/NHzrLOR3dH/Q2Rl
nA22PeK/r1lD8mMYd7u0Ry+WFpz95aGNo7rS/AIOko22k3QF8xiJnK8c7o8TOwKt
POh/J2ZAtE/ELNV+gQ0ePGh9W2s4yYxnTBKCmLAezu8Dnl4y+OZ7LAKayw96gh8H
jbRtsnrK01uto0AnHtdkLv89oFhpbxKY2Q/IZzwzMY0tiwUTCpNoTFwAVy2Kbm3g
E++QA3q9ucj/BlN+9+amWodhbxoit6NnmBXrmF833ODW+DAMt2Z9s17L12PJux10
yd54XiV7jlmGLg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:28 2026 by rpki-client