Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: xTqOfGkc02OYk9rQXxYfhCg0sie93sF622WfVNa+GbE=
Subject key identifier: F2:C2:B2:89:88:C4:BD:E1:1B:13:2B:C3:D1:C9:53:00:FE:93:FE:92
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019E910220F5BCE49B1DBE73EF8A3308901F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0C33
Signing time: Thu 04 Jun 2026 05:01:36 +0000
Manifest this update: Thu 04 Jun 2026 05:01:36 +0000
Manifest next update: Fri 05 Jun 2026 05:01:36 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: y0SYQn5MlrAJJX4cZA9t/zm+MJM9TTkGiTE4VLQ7qyA=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:02:20:f5:bc:e4:9b:1d:be:73:ef:8a:33:08:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jun 4 05:01:36 2026 GMT
Not After : Jun 5 05:01:36 2026 GMT
Subject: CN=f2c2b28988c4bde11b132bc3d1c95300fe93fe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:2d:b9:c0:d5:3e:fb:4a:3a:bb:c8:4d:35:
45:85:e9:82:d6:09:e4:6c:6f:36:79:65:36:a2:08:
dd:8c:14:fe:bc:8b:0b:db:04:de:9a:90:4a:77:fd:
58:d1:2c:84:21:9b:63:53:a3:f3:1e:ca:80:2d:f5:
d4:e1:f6:ec:71:33:f2:70:68:84:f3:45:f5:39:1a:
d6:c7:97:7c:3e:f2:6e:02:6f:19:fd:bd:09:f8:12:
14:8f:75:74:34:1f:7c:74:93:57:57:96:a5:d6:24:
99:6c:65:31:00:52:ae:06:db:d3:e3:57:4f:d4:86:
2c:2e:73:4b:9f:46:2e:52:7b:93:39:83:1f:c1:cd:
f1:19:96:94:91:51:ab:a6:2e:1d:69:b6:9a:a7:50:
a9:e8:0a:f8:64:e6:49:22:dd:5e:e2:d2:5f:1e:ac:
ad:cc:75:34:42:20:49:d0:9f:bb:25:ba:42:a9:4c:
3c:2a:97:1b:e1:38:ce:4c:64:5b:ca:c4:1b:a8:86:
07:45:11:e8:79:f7:c1:ae:cc:67:96:63:99:6e:0b:
62:65:32:f1:b1:29:44:dd:28:03:15:75:d6:02:3d:
dc:46:e8:3b:1f:69:c2:1b:70:cf:30:fa:48:09:0e:
7b:b1:d0:87:a7:da:7d:80:f5:c7:b7:19:62:a9:08:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:B2:89:88:C4:BD:E1:1B:13:2B:C3:D1:C9:53:00:FE:93:FE:92
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:c6:71:cf:80:a3:de:a9:ac:a1:02:a1:3a:5f:f5:eb:02:
04:82:33:ed:10:f3:78:47:50:bb:e4:da:f7:21:be:ed:93:31:
1f:71:f8:28:f2:b6:b1:fd:4c:c4:d2:14:ac:68:c4:ab:38:a3:
f6:e8:a9:48:79:66:a5:57:9e:63:87:05:20:f5:d6:0b:3e:f3:
15:6d:81:ca:84:91:ac:99:08:54:e7:44:db:57:f5:80:8b:72:
8b:2a:f6:ef:e2:b8:63:b9:88:f1:53:5f:00:73:f7:68:45:91:
f0:d2:7f:88:37:c7:0c:95:9b:79:74:14:7f:e1:b1:27:90:70:
78:83:24:e8:1b:10:7f:62:cc:f7:49:93:4e:60:42:1c:c9:f4:
fa:4c:ae:a4:bc:84:18:5d:0e:25:38:e1:59:c5:e2:97:ad:a1:
f8:66:ab:01:7d:f9:6d:c0:77:10:1b:5d:0d:d1:59:71:3f:f0:
5e:42:20:c7:e7:7d:23:33:08:32:c0:e4:26:8a:ae:8c:61:12:
6e:87:f3:3b:77:a8:a2:04:c3:ed:38:20:dd:bb:d8:c7:9b:b6:
4a:d8:1b:55:48:76:ab:3a:0d:a2:7b:e5:82:8a:32:38:38:64:
d1:dd:a8:af:2f:9e:70:46:44:c3:83:df:f8:aa:ce:89:25:c2:
21:ec:67:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RAiD1vOSbHb5z74ozCJAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw
Y2RjYzEwHhcNMjYwNjA0MDUwMTM2WhcNMjYwNjA1MDUwMTM2WjAzMTEwLwYDVQQD
EyhmMmMyYjI4OTg4YzRiZGUxMWIxMzJiYzNkMWM5NTMwMGZlOTNmZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKotucDVPvtKOrvITTVFhemC1gnk
bG82eWU2ogjdjBT+vIsL2wTempBKd/1Y0SyEIZtjU6PzHsqALfXU4fbscTPycGiE
80X1ORrWx5d8PvJuAm8Z/b0J+BIUj3V0NB98dJNXV5al1iSZbGUxAFKuBtvT41dP
1IYsLnNLn0YuUnuTOYMfwc3xGZaUkVGrpi4dabaap1Cp6Ar4ZOZJIt1e4tJfHqyt
zHU0QiBJ0J+7JbpCqUw8Kpcb4TjOTGRbysQbqIYHRRHoeffBrsxnlmOZbgtiZTLx
sSlE3SgDFXXWAj3cRug7H2nCG3DPMPpICQ57sdCHp9p9gPXHtxliqQiuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLCsomIxL3hGxMrw9HJUwD+k/6SMB8GA1UdIwQY
MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt
YmJlNjBlYTIyMmM1LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1
LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbHGcc+A
o96prKECoTpf9esCBIIz7RDzeEdQu+Ta9yG+7ZMxH3H4KPK2sf1MxNIUrGjEqzij
9uipSHlmpVeeY4cFIPXWCz7zFW2ByoSRrJkIVOdE21f1gItyiyr27+K4Y7mI8VNf
AHP3aEWR8NJ/iDfHDJWbeXQUf+GxJ5BweIMk6BsQf2LM90mTTmBCHMn0+kyupLyE
GF0OJTjhWcXil62h+GarAX35bcB3EBtdDdFZcT/wXkIgx+d9IzMIMsDkJoqujGES
bofzO3eoogTD7Tgg3bvYx5u2StgbVUh2qzoNonvlgooyODhk0d2ory+ecEZEw4Pf
+KrOiSXCIexngA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:26 2026 by rpki-client