Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: JOut5ZbXnRXmrQf0/lrNnCQqJUlePz381zsDaDqG+kA=
Subject key identifier: 07:B8:F8:97:FB:C8:2A:AA:C3:36:09:67:FD:37:10:B1:70:6E:99:FF
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A0BEB13B4EE77A9F0F127F8F892285704F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 084F
Signing time: Sun 20 Sep 2026 12:01:21 +0000
Manifest this update: Sun 20 Sep 2026 12:01:21 +0000
Manifest next update: Mon 21 Sep 2026 12:01:21 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: 9BL2R/Sfrbfrx0Ek/hC2DHZnmXyrGqkyykuCRX4+0uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:3b:4e:e7:7a:9f:0f:12:7f:8f:89:22:85:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Sep 20 12:01:21 2026 GMT
Not After : Sep 21 12:01:21 2026 GMT
Subject: CN=07b8f897fbc82aaac3360967fd3710b1706e99ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:e6:44:b8:bd:89:11:09:60:e3:c6:20:5f:
72:93:34:53:a4:db:0d:c4:70:53:d8:4e:60:89:77:
49:af:c5:a3:a5:ea:0f:db:f6:6e:26:b7:08:6d:23:
d9:51:ed:c7:39:1d:98:71:74:74:2e:e3:25:d5:f3:
7b:a6:f8:dd:34:0e:9f:f4:bf:f9:59:bb:8c:c2:33:
f5:31:77:4b:d4:7b:25:18:cf:f4:d1:61:28:30:19:
4d:9b:04:d0:72:40:38:d3:7f:23:d3:ed:c0:ef:f9:
f7:59:ec:ce:d2:31:53:e0:e5:7a:ee:8b:45:35:eb:
4f:d4:87:f1:29:3a:84:3e:7f:6a:2b:35:53:65:a6:
2f:af:0e:1d:96:38:22:96:8f:b0:df:8e:0b:0b:3f:
3b:49:ff:8e:8f:8b:18:9d:2f:6a:5c:58:a9:77:32:
2d:0f:bd:1f:b2:94:14:21:28:0e:b8:e3:b1:f6:1a:
21:63:fc:24:db:67:a5:0a:bb:98:63:40:a4:c7:1c:
5b:d0:bf:1c:74:18:e7:1f:a1:11:68:0a:3b:21:83:
f8:a5:a7:a6:00:64:bd:f2:19:b9:43:c8:9e:d4:53:
8d:30:2a:f3:dc:f9:36:3b:fe:93:f3:b3:40:73:33:
bf:24:b5:10:14:5e:fe:28:02:73:68:96:d1:46:52:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:F8:97:FB:C8:2A:AA:C3:36:09:67:FD:37:10:B1:70:6E:99:FF
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e8:6e:5e:96:9c:cc:20:27:8d:59:1d:78:0c:b2:99:63:06:
f1:9a:5d:cb:2a:e1:43:d4:f6:e3:03:39:c6:7a:1d:d4:64:5d:
4e:92:05:72:03:af:1a:6e:e1:26:1e:89:b7:b0:5e:3c:e0:97:
e2:54:2e:cc:70:f0:8b:a8:41:fe:41:2e:73:0e:08:ca:30:e0:
d4:ca:1c:66:55:02:b8:89:f0:d4:e3:49:0f:6e:6d:2b:7b:43:
a1:8f:6d:91:9b:b3:19:bf:0d:90:84:cf:31:8b:50:1f:99:7f:
19:53:b1:3c:19:c7:e6:49:1e:14:79:6e:10:43:79:91:5d:df:
15:5f:18:ff:6c:75:9e:f5:7d:82:09:63:88:53:f1:35:89:bd:
4a:61:b8:80:5c:d1:1d:cb:63:84:30:4a:a6:96:96:7f:d6:fc:
db:32:c7:e1:ee:9e:51:6e:97:fe:36:aa:6e:a3:30:58:8a:9e:
34:98:f6:53:a4:0d:ba:4b:19:d5:48:84:5d:d9:68:3a:af:80:
27:51:63:05:1a:2e:00:15:4b:c5:57:38:9d:f5:18:fe:38:4e:
a4:28:24:d3:88:d6:65:f1:4b:e9:5f:c6:c6:2b:6e:36:90:a5:
f8:17:68:44:b9:2e:b5:2e:82:26:46:52:dd:4d:a5:1a:9e:58:
83:18:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:40:22 2026 by rpki-client