Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: FOaQ9/43emlVJrNdmwQw+TE2P34B6FrslT+sVCPGDNY=
Subject key identifier: F1:C4:B2:FF:46:98:78:A3:5D:E5:21:75:2E:08:D3:26:4E:E8:05:69
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 01A12FFCEBF8AF71B1D8EC98AD61AA1E6F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 0A23
Signing time: Mon 12 Oct 2026 12:01:06 +0000
Manifest this update: Mon 12 Oct 2026 12:01:06 +0000
Manifest next update: Tue 13 Oct 2026 12:01:06 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: cAZWCGnjQd6b/uQysiteJux7uoe7HTlK/rZU2Ear1lg=)
2: yfnlg-tNJYqqOyWJj67EGZSv6yo.roa (hash: KnHV4wZ2GDmYibIqluVpP6AfHpgamKHbICtl13z8MtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:eb:f8:af:71:b1:d8:ec:98:ad:61:aa:1e:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Oct 12 12:01:06 2026 GMT
Not After : Oct 13 12:01:06 2026 GMT
Subject: CN=f1c4b2ff469878a35de521752e08d3264ee80569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:2e:16:8b:09:5d:07:f4:cc:2f:8e:6f:2a:
73:70:bf:cc:1e:c5:1a:4b:38:e2:45:68:b7:92:3f:
83:ed:f3:09:25:45:22:7f:86:d0:5d:18:b9:26:3c:
de:70:e3:d7:7c:e2:f5:43:8d:73:8b:68:eb:11:f8:
25:37:8b:5d:c7:11:63:9b:b7:a2:c8:20:51:14:94:
53:54:5d:cf:98:d0:6c:41:88:9b:07:5a:d1:54:e7:
93:4c:2c:24:0b:b5:a5:61:1d:19:7b:0d:75:a3:c9:
54:35:e2:f5:f9:ca:e2:1d:2b:e6:60:7a:0f:23:91:
0e:1a:b1:ca:47:e6:5a:1f:13:ae:08:67:6a:be:b5:
b1:26:9f:52:a9:36:5d:d7:f9:9b:7e:df:fc:5b:46:
4d:7e:12:98:11:2f:c2:24:f8:0a:09:85:fe:62:e5:
05:50:44:31:47:cf:ca:80:c3:f2:7b:f1:6d:39:df:
93:a3:c2:df:48:c5:40:1f:dd:21:b3:dd:d0:b2:e6:
75:84:20:51:02:00:b1:56:71:73:a7:93:a5:06:c4:
0c:6b:bd:86:f4:21:b0:65:62:33:bc:99:48:d9:96:
60:a0:28:41:96:a9:1e:69:12:9e:28:99:a4:31:09:
9c:da:89:58:d8:05:5b:61:ff:27:ca:17:d2:77:2c:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:B2:FF:46:98:78:A3:5D:E5:21:75:2E:08:D3:26:4E:E8:05:69
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e2:3d:ef:84:bb:9a:70:d3:62:60:12:ca:73:ce:a9:cc:1b:
83:6e:2c:78:56:4e:fa:56:24:65:81:11:35:87:8b:80:bd:6b:
64:2b:75:ab:76:be:7f:da:05:9f:14:13:4a:e7:9a:79:70:00:
fb:c3:16:ca:18:a6:9c:b7:a3:4c:5b:45:d0:00:0b:fb:47:da:
43:a1:82:99:85:28:12:ab:43:51:69:01:85:4d:26:77:a6:b8:
94:6f:46:9d:d6:ba:1b:1c:3a:b0:86:1f:70:72:44:f6:16:ba:
3b:3f:3f:d7:85:29:15:18:86:de:99:44:13:e7:fc:e0:9f:d2:
9a:bd:cb:7a:c3:5f:de:cf:67:dd:da:31:e6:98:00:88:6a:6b:
cd:e8:a8:7a:60:53:94:13:0f:9f:69:5b:ac:56:b5:19:15:68:
67:cf:77:b9:34:74:cb:1d:ce:ae:0b:be:e4:9d:a1:1c:37:86:
9b:10:b5:fe:48:cc:f8:c4:ba:bd:c2:57:52:91:bd:34:bd:b5:
ab:02:57:6e:5a:fc:90:48:eb:34:98:ed:73:c3:35:d8:37:d3:
7f:b5:27:11:f1:61:df:9d:97:89:bf:81:d6:6c:a1:87:c6:d9:
e1:42:de:ee:e9:06:05:f9:c8:04:d0:02:ba:17:66:3c:7f:5f:
c1:4e:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:34:57 2026 by rpki-client