Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: CicHSZHWB9rIkZadA7UCbn2XsyGTpZF7HAgMnhlbbbE=
Subject key identifier: 65:54:F9:F0:D7:69:3E:12:8E:1C:75:B3:6A:F1:EB:4E:C2:E0:88:6F
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 01A140157F18BFFD2F20BF1F68958A9F899A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 0824
Signing time: Thu 15 Oct 2026 15:01:52 +0000
Manifest this update: Thu 15 Oct 2026 15:01:52 +0000
Manifest next update: Fri 16 Oct 2026 15:01:52 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: IIwQrX/ZMHK1IDgiJiQrUXVfk28EGCzil5mDkNqnUTM=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:7f:18:bf:fd:2f:20:bf:1f:68:95:8a:9f:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Oct 15 15:01:52 2026 GMT
Not After : Oct 16 15:01:52 2026 GMT
Subject: CN=6554f9f0d7693e128e1c75b36af1eb4ec2e0886f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:96:02:d2:fb:f9:6b:cf:53:b8:d7:a1:5d:
23:d7:48:28:a0:32:f5:8b:ac:b4:60:15:34:c0:7d:
37:4a:9f:29:6c:5a:3f:1f:66:26:69:d2:02:9c:3b:
24:49:1c:62:9b:7c:82:d9:a8:c5:4f:2a:8b:4a:74:
d8:35:01:9e:93:e5:92:3b:76:41:a5:7a:ad:08:8f:
20:6a:ec:cf:cd:f9:34:69:b9:5e:21:21:1e:9b:c8:
8c:d2:1b:77:f0:3e:6f:10:6b:e8:6f:fa:ab:35:53:
eb:5a:a5:36:11:44:29:23:94:67:58:78:56:5e:57:
2e:57:31:30:36:cf:f2:42:54:7a:0b:cd:5d:ed:5c:
33:af:98:94:39:fa:95:0f:e4:b5:05:16:49:c6:fb:
67:59:cf:eb:42:7d:35:46:9a:c8:35:98:ee:40:cc:
2c:99:f8:23:c3:1c:68:8a:60:74:4e:70:27:fe:e3:
37:de:44:51:ef:1a:80:6d:68:ee:c2:34:90:4e:c6:
c3:b5:f3:9c:e7:81:27:70:f1:b6:ed:4f:96:69:53:
53:15:60:ee:15:51:d1:f3:2a:20:39:9e:67:84:47:
e5:34:ff:23:d7:2f:a9:86:d8:67:2a:fd:b5:74:08:
7c:0b:29:34:43:46:37:26:30:ef:86:50:25:28:8f:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:F9:F0:D7:69:3E:12:8E:1C:75:B3:6A:F1:EB:4E:C2:E0:88:6F
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:5c:c5:32:8b:a9:63:0d:65:c3:1f:91:82:b2:87:60:9d:
f8:96:67:20:f2:95:38:77:a8:a0:ec:1a:37:c2:45:a5:18:1e:
26:70:35:2b:9f:51:e5:2b:44:82:a8:c3:b8:12:03:04:20:c0:
24:c3:c4:16:d4:39:ed:55:d3:da:5e:62:ff:d9:68:91:c2:28:
d2:1d:c9:74:84:85:17:11:2c:75:48:06:48:6c:58:2b:cc:2e:
47:e0:e0:de:61:be:93:69:77:75:10:7d:3c:15:2b:3e:1c:3c:
49:b2:92:64:8c:85:17:59:31:60:b2:99:d6:7e:48:1e:01:6f:
f8:d8:a2:b8:0c:71:c9:1f:f2:cb:53:a9:56:d6:d0:a0:d6:14:
69:75:b7:54:83:d5:e0:a8:f4:54:84:d2:7d:a5:59:60:67:fe:
65:24:1b:a0:5d:05:8e:72:b7:9c:91:3d:91:13:5e:78:fc:e7:
4b:54:7f:5c:f2:d6:e7:b6:ac:78:0c:52:23:b4:3c:60:45:b7:
2a:8d:16:04:9a:97:d0:c7:86:5b:e1:0b:ba:6e:4b:9d:19:1b:
53:b2:ec:13:36:0e:39:f7:7c:0d:d4:15:3a:86:ac:3f:dd:af:
db:ca:75:a0:76:f8:46:c6:f4:e5:33:72:b4:e0:78:d5:31:f3:
d4:2a:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:29 2026 by rpki-client