Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: 0OiivWNIP7P7sbe/Zt+sO72yQZMgmV4vkZsndtHIagQ=
Subject key identifier: CB:74:D6:A9:27:6D:B6:72:CA:E8:BD:27:63:69:7C:59:69:1B:66:0A
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 01A000C9EA6E8379EDA5171D0F0C889F41A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0E3B
Signing time: Fri 14 Aug 2026 15:00:27 +0000
Manifest this update: Fri 14 Aug 2026 15:00:27 +0000
Manifest next update: Sat 15 Aug 2026 15:00:27 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: zejH0A6E5vcCMNEiCplopiYn7RZ8O/BTFOg4H8dxqKg=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:ea:6e:83:79:ed:a5:17:1d:0f:0c:88:9f:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Aug 14 15:00:27 2026 GMT
Not After : Aug 15 15:00:27 2026 GMT
Subject: CN=cb74d6a9276db672cae8bd2763697c59691b660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:34:af:38:28:68:b9:0b:45:0b:79:ae:e6:
6d:5f:55:e5:c8:e6:f7:b0:4e:36:f0:bd:20:8e:9a:
fd:5c:f1:ee:11:b4:5f:c8:ad:96:2a:62:9f:79:67:
82:28:8d:c5:97:87:0c:6e:87:6c:d1:57:a3:d0:8c:
b1:f5:d9:c8:82:50:f9:ed:e1:62:06:85:64:48:d8:
69:f1:16:aa:61:f8:83:a5:6b:c4:18:63:9a:dc:74:
0d:dc:57:bc:50:3f:23:68:fd:35:20:a7:d3:c8:35:
0a:dc:c0:f5:63:ea:6a:7c:5d:69:ea:a1:1f:5d:ec:
7c:03:37:e7:ec:47:12:d5:c1:e1:f2:82:9c:b7:4c:
32:55:21:7f:47:1f:7d:2a:9f:b8:f2:b8:dd:81:ec:
51:53:36:42:df:4e:bc:b2:47:0a:f0:96:31:93:24:
5a:d4:1f:30:b7:94:ca:26:e8:ec:fe:11:8e:5e:2c:
49:23:99:3e:28:55:d6:76:18:0d:d1:71:75:2b:74:
dc:aa:cb:c2:67:89:81:2a:fd:23:90:d2:f2:10:ac:
b3:e5:8d:2e:91:f8:52:7c:ba:01:2b:19:a0:89:a7:
f9:95:e1:9d:cf:40:10:8a:c6:8a:7c:60:c6:29:69:
f3:d1:48:1d:3e:68:c9:84:f7:15:e7:dd:e9:d6:8b:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:D6:A9:27:6D:B6:72:CA:E8:BD:27:63:69:7C:59:69:1B:66:0A
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:91:57:19:ed:e6:11:37:c8:b2:63:39:9d:87:d1:74:28:79:
cc:b0:e9:08:30:7e:49:6b:fc:93:b6:11:eb:59:08:5d:40:21:
1e:d9:8d:94:63:57:17:d0:b0:d0:98:c1:76:f7:07:86:33:6e:
37:b7:4b:fc:1c:02:b9:a3:20:f3:5c:aa:5b:7b:55:49:e3:be:
9e:37:52:3a:bd:cf:1c:77:3f:12:57:1e:97:49:be:61:71:b1:
2e:21:7c:11:96:21:87:68:54:44:4e:72:cf:53:58:36:7d:1b:
d7:0f:89:6c:3b:57:1a:1a:15:c9:38:c2:f6:14:1c:4a:97:94:
d5:9d:d7:5b:3a:ad:df:d0:20:16:6c:16:5d:39:09:f3:04:da:
9a:0c:db:5e:83:be:05:47:58:eb:a0:57:5c:52:30:b0:fc:be:
0f:cd:1d:c9:53:bd:39:7f:79:da:b9:62:0c:3f:e6:da:9d:eb:
6f:53:ff:8c:da:4f:84:c1:be:6d:d8:91:52:f9:28:33:e9:91:
14:c6:fb:92:1e:a8:97:89:e7:57:a7:98:9f:e3:4f:e6:5e:b5:
3b:24:eb:72:64:cc:a0:3e:98:5b:b6:25:d1:d6:41:c0:cb:39:
b9:aa:3d:3b:fa:b8:69:df:cf:a0:70:53:51:2a:c9:c5:91:b3:
41:08:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:30 2026 by rpki-client