Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: H7IYbJ5Ara226sgV0csGp/1b90qx42wUbxFwhj1Mhw4=
Subject key identifier: 60:7E:DA:5D:C9:EC:1B:D0:C3:49:74:04:CD:2E:09:66:EA:C4:BD:C0
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019CABD8E6038C018EA018B615DBED724D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 0633
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: BqP2jaPZz+p4cCwDX/328z0oYFa1j+LL170BDa54ZCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e6:03:8c:01:8e:a0:18:b6:15:db:ed:72:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=607eda5dc9ec1bd0c3497404cd2e0966eac4bdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:d2:cd:f7:6b:90:d8:31:a2:08:06:48:50:
89:6f:65:b2:2e:60:b7:5c:a8:a6:bc:63:74:c1:52:
cc:26:82:06:43:cf:de:2f:46:e2:18:47:a3:40:a3:
be:49:12:ce:74:53:04:5e:71:7d:39:c7:76:2a:f9:
b2:43:fe:7b:b3:9b:e0:a8:49:a9:ed:d6:de:af:98:
b7:0b:67:77:81:d1:e5:80:8c:36:e1:c9:90:ec:7e:
b9:3f:da:9a:93:77:12:51:24:b7:bf:f1:4e:80:6c:
10:db:4d:55:eb:52:81:40:14:b8:b0:b5:74:eb:19:
54:51:6e:5f:81:73:34:d5:fa:fb:8d:08:93:4c:35:
c4:56:a0:2c:a9:43:15:2b:3d:46:9f:e0:48:5e:5d:
0b:6a:cb:38:35:41:ca:21:fd:99:14:21:5f:c4:66:
28:ec:e6:57:fb:ff:ed:a8:f3:b5:ad:cb:43:9a:78:
90:86:e8:c2:10:60:d2:e4:d8:5f:f0:24:ce:22:3e:
c5:16:7f:25:47:d1:af:35:9b:72:a1:ec:ae:eb:7c:
dd:2d:26:e1:03:35:11:ac:96:f9:3f:fa:c3:f6:69:
b7:66:75:8e:51:5e:4d:8d:19:a6:3e:4a:72:eb:a1:
a0:d9:15:df:fb:3c:0e:2e:27:cb:dc:c4:1f:b9:f0:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:DA:5D:C9:EC:1B:D0:C3:49:74:04:CD:2E:09:66:EA:C4:BD:C0
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:38:8a:a4:88:08:f9:61:9a:06:0b:f4:12:fe:1c:14:d8:c3:
44:b7:ed:cc:54:21:fc:83:42:6e:bd:58:9e:ca:11:0b:e2:2e:
58:3e:72:29:f7:2e:6f:5d:2b:be:0d:99:d3:dc:2c:0b:ec:29:
01:18:da:98:89:4b:ef:d5:71:df:a4:2b:3e:62:dd:36:3a:2d:
1f:55:a2:45:0f:89:bc:e0:5f:e0:a7:80:d2:17:c8:e7:7e:96:
9f:ea:8b:7c:c3:91:a1:de:b9:2d:6b:9b:85:11:31:b2:8f:5f:
52:6c:7a:cf:62:5f:7e:55:82:e0:fe:17:fe:87:9b:62:a8:a3:
8d:53:e2:8b:fc:22:5e:0c:2f:69:02:ee:63:65:cc:90:6b:35:
c7:45:26:34:9d:3e:ad:11:fd:11:6a:ab:42:91:b2:f0:6b:a2:
77:55:4e:c2:0a:83:67:a0:39:6f:c3:42:ff:49:b6:36:db:6f:
da:f9:a0:d0:27:09:27:c3:e1:ce:67:8b:b3:86:79:78:c3:ed:
11:0a:d6:c3:4e:9b:1c:88:54:5f:81:93:c9:ae:a6:82:f7:de:
3a:3d:d2:63:91:ec:80:d5:35:09:68:56:a3:ef:d5:82:d0:ed:
30:fd:24:8c:db:03:56:14:3d:5c:27:36:7a:9f:66:60:02:34:
28:26:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:10 2026 by rpki-client