Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: 1tBiYzp4kBRJz7Dg9691185JDspXQXRiv3czRH5wrdg=
Subject key identifier: 69:18:90:14:3C:06:B4:F4:AE:A1:69:26:F3:C4:AC:5D:24:BF:8D:4A
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019F190D1328E4CFCD17BF7BB02618273D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0DC3
Signing time: Tue 30 Jun 2026 15:01:54 +0000
Manifest this update: Tue 30 Jun 2026 15:01:54 +0000
Manifest next update: Wed 01 Jul 2026 15:01:54 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: p7Da+DvNPAk9vKw14YqzXYWod4b8HGLLhBV/oHCTXNQ=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:13:28:e4:cf:cd:17:bf:7b:b0:26:18:27:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jun 30 15:01:54 2026 GMT
Not After : Jul 1 15:01:54 2026 GMT
Subject: CN=691890143c06b4f4aea16926f3c4ac5d24bf8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:ff:19:1a:33:15:a0:92:b4:03:f7:54:c7:
d9:d3:87:bc:e4:fe:c7:00:13:52:85:02:24:3d:25:
05:16:5f:76:31:75:ff:07:ed:88:d9:3b:6a:83:f8:
d3:4e:e3:96:cc:91:26:c5:ec:c8:7e:43:1b:a6:02:
fc:1e:e1:e4:83:2f:8f:04:c7:5f:49:a7:6c:fb:87:
1d:6a:ef:1b:f0:bb:1c:ba:34:6b:dd:87:bb:05:54:
fa:e0:d0:f6:90:9f:d7:d3:77:2e:ca:4f:7d:b8:93:
9b:df:cb:bc:1e:3c:2f:28:3a:a5:ea:a7:28:74:cd:
4c:05:09:5f:35:47:f7:37:57:b3:b9:d4:f2:e1:41:
51:66:1d:8e:c3:b6:c8:66:84:96:c5:8e:af:56:a6:
be:8b:3e:e5:7b:f5:b1:df:0d:1c:6b:00:35:bc:63:
6f:a1:79:1d:99:c5:11:19:55:5b:77:26:b4:ec:2f:
2f:3d:28:67:e3:ee:7c:28:1b:25:05:ed:af:46:fd:
dd:bc:11:ef:89:82:66:3d:39:39:37:df:cd:7c:7b:
cd:94:ee:08:d9:57:63:e2:97:c6:e6:be:bb:85:25:
2f:52:0a:8f:76:18:c0:f2:1f:9e:39:a3:28:d0:93:
d8:9d:50:86:a2:dd:ef:c5:dd:38:70:c5:da:e8:89:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:90:14:3C:06:B4:F4:AE:A1:69:26:F3:C4:AC:5D:24:BF:8D:4A
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:f0:a6:8c:74:71:61:5f:cc:95:02:60:81:98:30:1f:0c:
a2:79:30:fc:98:82:62:f1:7e:0b:b1:34:ee:fb:92:af:b2:73:
36:aa:59:82:57:18:14:37:ca:1b:21:1e:e3:81:d5:8f:9a:25:
4f:33:f0:9c:b8:f3:f8:56:9e:d8:1d:4f:6f:a4:90:7c:02:36:
7a:04:b0:36:19:5c:65:ae:f0:e0:90:e7:ad:b7:ce:c1:74:f5:
6a:24:88:0a:54:70:3d:23:75:75:fb:2f:00:fc:34:f7:ff:be:
3b:bf:99:ce:32:cc:3a:8b:a9:dc:d7:ca:9b:64:4d:a8:4a:84:
71:ea:c1:67:1d:f6:f8:7b:23:2f:cc:87:31:eb:f7:a1:40:f1:
0c:16:1f:62:cb:c8:b3:2d:42:e0:76:97:f0:43:62:9e:99:7e:
22:42:29:f3:54:33:19:48:f8:f3:cc:ba:42:05:2b:8e:27:9b:
f5:ac:20:88:f6:46:16:26:d5:d2:3f:ac:7e:ab:1e:aa:d2:c3:
f3:c7:81:31:47:2e:ef:3c:17:51:27:27:fb:72:41:2c:15:d9:
9e:1e:56:39:8f:a4:34:19:08:d6:12:fc:9c:17:2c:e4:be:e3:
81:bb:da:da:44:42:0d:83:95:9a:39:43:dd:b2:ec:81:2b:c8:
27:f5:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:43 2026 by rpki-client