Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: 8VDGDA1AvbY+GBBN93QPjU6lIPzYhQ/8Oil+1Blj2S8=
Subject key identifier: 0B:A7:3F:75:C8:24:17:DE:67:F2:BD:8A:F7:6A:C2:21:4B:2F:90:B6
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019E3005392F7E2627AAAE992C590695971B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 068E
Signing time: Sat 16 May 2026 09:01:49 +0000
Manifest this update: Sat 16 May 2026 09:01:49 +0000
Manifest next update: Sun 17 May 2026 09:01:49 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: d5MFVN4I9c80LycEzVUnpEudrxNXRX59gflWVBBONgw=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:39:2f:7e:26:27:aa:ae:99:2c:59:06:95:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: May 16 09:01:49 2026 GMT
Not After : May 17 09:01:49 2026 GMT
Subject: CN=0ba73f75c82417de67f2bd8af76ac2214b2f90b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:58:33:5b:7c:70:32:f7:ef:02:63:7a:d6:
df:18:23:0a:17:f6:52:70:94:4b:35:71:34:85:a7:
f5:31:a2:6f:8c:35:0d:0e:5d:46:e7:ce:6c:e1:08:
7c:6f:6e:1e:94:5a:fc:06:0e:43:10:59:f4:14:0b:
37:9f:fc:ca:a4:e7:b7:ee:15:2b:04:3b:f0:b2:8b:
2c:08:54:07:6e:cc:f2:60:77:f7:bf:9c:94:ba:91:
2c:f0:a9:f7:85:81:20:a1:0b:96:bd:c8:8e:14:0b:
9d:9e:15:dc:80:66:0c:5d:5c:a1:03:61:61:05:e1:
3c:a6:15:d6:7c:75:0a:db:3a:97:84:f2:08:e7:2f:
5d:b9:cb:49:8b:9a:d1:bb:56:0e:86:c4:1f:fb:e0:
fa:b9:b0:a4:15:a7:1c:10:08:58:1a:4d:a0:42:93:
65:c3:d0:e7:2a:8d:de:7d:c9:72:c7:97:ad:d7:b3:
e0:b9:83:a5:45:a3:a9:a2:9b:b5:ed:59:28:f2:79:
04:93:df:95:8d:6e:b9:2d:3c:8d:4f:f8:2b:9a:41:
1e:4f:82:a4:06:e5:96:c4:86:c7:6e:c8:05:e7:d4:
b6:88:81:28:56:8a:7d:53:17:a0:5e:de:d6:05:41:
cf:ce:d0:5c:ff:7b:f0:4c:1b:76:f9:7e:af:05:57:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:3F:75:C8:24:17:DE:67:F2:BD:8A:F7:6A:C2:21:4B:2F:90:B6
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:8a:89:f8:b5:99:1d:a2:e0:02:c5:13:de:17:4d:3a:74:
1b:6e:12:4c:f6:9e:9c:88:35:7b:4e:02:f4:e2:47:a8:ac:44:
bf:8d:29:c4:7c:c0:96:bc:c3:a6:fb:d8:c4:b1:fa:6c:8a:f7:
eb:ac:8d:99:51:08:62:37:23:c2:5f:a1:c3:1e:98:a7:5a:b4:
ab:f2:2d:54:43:5a:49:97:da:46:14:b4:fa:04:f0:05:83:f6:
45:b6:56:9d:b1:70:61:55:a8:01:7e:ed:bf:76:7a:d3:7d:23:
42:78:b4:d2:bd:32:86:bf:a0:ee:41:3c:11:3e:89:77:fb:85:
a4:d4:f7:8c:52:09:e7:96:00:98:c4:fa:de:e9:7d:e9:6b:db:
0d:9e:c8:db:20:75:13:a4:12:4e:7e:53:f7:09:db:81:3a:f5:
ba:4d:32:8b:ec:c4:d9:ba:b3:f9:21:f6:f0:45:2e:b1:a4:6a:
a1:b6:c3:f1:9a:94:02:03:ca:4d:67:ba:3f:75:8d:6e:29:71:
a0:43:1d:96:08:bc:1b:20:b3:88:eb:d5:68:3c:64:4a:13:54:
e4:33:d2:cf:e3:78:15:65:5f:25:96:64:ad:c9:b3:98:e2:de:
5f:83:3e:ed:b0:41:68:d5:52:f4:c1:8d:8f:25:25:27:7d:da:
4a:a4:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:40 2026 by rpki-client