Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: 247iMKhkm84/XmyGsNayUe4btsdtXbxrQ/IhYlZJ0Ng=
Subject key identifier: 79:4A:BA:E8:60:32:BB:67:FE:55:BB:E7:66:FB:E0:15:32:80:6D:35
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019F17C320F6642CCD28294C1406329D8D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 0706
Signing time: Tue 30 Jun 2026 09:01:31 +0000
Manifest this update: Tue 30 Jun 2026 09:01:31 +0000
Manifest next update: Wed 01 Jul 2026 09:01:31 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: Ny5FE7sihlrNIWRa0ld75u4VRMhglg7R5HDxtr+c5fI=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:20:f6:64:2c:cd:28:29:4c:14:06:32:9d:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Jun 30 09:01:31 2026 GMT
Not After : Jul 1 09:01:31 2026 GMT
Subject: CN=794abae86032bb67fe55bbe766fbe01532806d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:9b:65:83:6e:54:61:ea:7f:3d:ec:47:6d:
04:fc:70:48:ea:c8:b7:24:b5:82:9b:2b:f2:79:e1:
26:d9:5c:86:5c:17:4d:cd:8a:47:cb:a5:df:b0:f7:
9a:44:e6:ae:24:11:51:95:e1:f3:94:98:cb:f6:d4:
5d:2a:3e:2a:dc:32:16:10:0c:ad:5c:51:6b:95:9d:
5e:93:d4:c3:c3:c7:3d:a6:34:29:e3:00:ed:d1:88:
21:4b:62:6a:a4:30:ab:5f:7b:6e:39:5b:2c:a0:2b:
e7:d5:02:d5:6d:ac:9b:c1:ab:59:01:da:7d:af:88:
b8:7c:9a:5d:bc:6e:93:66:36:f5:15:a4:7c:a7:2c:
f0:28:21:64:fe:81:e0:26:0e:cc:1f:cc:41:b9:8c:
69:6e:77:46:d0:75:1a:52:5f:33:f7:ee:3d:15:ee:
e6:71:84:4a:f6:3f:73:2e:32:46:28:cb:78:7e:ee:
9e:ed:bc:75:87:39:3c:1d:e1:68:b5:c0:3f:1b:42:
32:1a:d1:87:0c:79:18:36:8f:f4:d0:de:38:24:21:
ed:88:8c:e1:e0:6e:f0:8a:f9:db:b4:df:6c:54:69:
c1:23:f4:df:4d:1e:5b:c5:9a:93:f5:d5:c1:45:8f:
68:ff:3e:fe:d7:6b:e9:03:8d:fb:2e:b6:49:64:16:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:BA:E8:60:32:BB:67:FE:55:BB:E7:66:FB:E0:15:32:80:6D:35
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e7:ff:2e:13:9f:3b:d6:eb:bf:98:be:ca:df:c5:3d:06:c2:
97:1c:7f:97:45:4d:d4:eb:de:62:4f:1c:5e:31:e1:53:49:d5:
67:7f:12:c5:06:17:c4:b9:d3:55:52:95:ca:ad:7f:c9:d5:39:
5b:2d:15:be:22:bd:75:b1:08:96:1b:95:10:24:53:32:8b:f5:
f2:99:8e:f3:c2:ce:5d:f3:fa:73:a7:0c:b9:fc:7d:6e:e6:e5:
9f:bd:3a:0b:1f:04:a4:48:d9:96:df:46:d3:1d:dd:fd:6c:02:
4e:9d:c5:51:68:03:aa:36:44:02:d8:79:81:5e:8c:3c:70:33:
d5:ea:e9:bc:f6:6e:82:dd:91:85:66:bc:44:87:30:aa:ca:c1:
84:65:b8:56:c7:66:31:55:70:fd:8d:02:3c:59:ff:16:5b:1c:
f7:98:42:4e:e4:44:9d:8f:e8:93:43:ac:d0:90:1a:48:41:4d:
b9:bd:92:57:83:5c:76:a4:4d:df:3d:d7:13:13:83:d8:c7:c3:
87:d2:21:f4:17:bb:fb:2d:d4:b8:25:bf:93:bc:2e:4f:be:8f:
d2:be:b7:63:23:be:db:c0:2c:e9:11:4c:5f:9b:39:58:1d:75:
fe:d8:ef:5c:45:7d:fc:1f:ab:c1:db:88:0f:0c:7c:5c:b3:0e:
81:cd:aa:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwyD2ZCzNKClMFAYynY0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw
YzcyMmEwHhcNMjYwNjMwMDkwMTMxWhcNMjYwNzAxMDkwMTMxWjAzMTEwLwYDVQQD
Eyg3OTRhYmFlODYwMzJiYjY3ZmU1NWJiZTc2NmZiZTAxNTMyODA2ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96bZYNuVGHqfz3sR20E/HBI6si3
JLWCmyvyeeEm2VyGXBdNzYpHy6XfsPeaROauJBFRleHzlJjL9tRdKj4q3DIWEAyt
XFFrlZ1ek9TDw8c9pjQp4wDt0YghS2JqpDCrX3tuOVssoCvn1QLVbaybwatZAdp9
r4i4fJpdvG6TZjb1FaR8pyzwKCFk/oHgJg7MH8xBuYxpbndG0HUaUl8z9+49Fe7m
cYRK9j9zLjJGKMt4fu6e7bx1hzk8HeFotcA/G0IyGtGHDHkYNo/00N44JCHtiIzh
4G7wivnbtN9sVGnBI/TfTR5bxZqT9dXBRY9o/z7+12vpA437LrZJZBY8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlKuuhgMrtn/lW752b74BUygG01MB8GA1UdIwQY
MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt
NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl
LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOf/LhOf
O9brv5i+yt/FPQbClxx/l0VN1OveYk8cXjHhU0nVZ38SxQYXxLnTVVKVyq1/ydU5
Wy0VviK9dbEIlhuVECRTMov18pmO88LOXfP6c6cMufx9bubln706Cx8EpEjZlt9G
0x3d/WwCTp3FUWgDqjZEAth5gV6MPHAz1erpvPZugt2RhWa8RIcwqsrBhGW4Vsdm
MVVw/Y0CPFn/Flsc95hCTuREnY/ok0Os0JAaSEFNub2SV4NcdqRN3z3XExOD2MfD
h9Ih9Be7+y3UuCW/k7wuT76P0r63YyO+28As6RFMX5s5WB11/tjvXEV9/B+rwduI
Dwx8XLMOgc2q3w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:26 2026 by rpki-client