Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: JnxYx6GJHpBnyf8vUVAPt1/k5h9tZfhILLRhjDejtfA=
Subject key identifier: 9E:0A:66:28:E9:2A:A3:54:23:85:1F:1F:81:D8:8D:15:A3:E0:87:81
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019EC0DBBC4F209831383390198848D52521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 0747
Signing time: Sat 13 Jun 2026 12:01:26 +0000
Manifest this update: Sat 13 Jun 2026 12:01:26 +0000
Manifest next update: Sun 14 Jun 2026 12:01:26 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: J5fYgicdq9nkz0jTfNJBp7LTSA5FUN6uZP1u6sLiP7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:bc:4f:20:98:31:38:33:90:19:88:48:d5:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jun 13 12:01:26 2026 GMT
Not After : Jun 14 12:01:26 2026 GMT
Subject: CN=9e0a6628e92aa35423851f1f81d88d15a3e08781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:db:5a:cf:c5:ac:b1:dc:6e:2b:45:99:6c:
6f:3c:d5:06:bc:c5:c7:e0:db:e7:64:2c:42:01:46:
4a:c8:77:73:8a:7b:a4:ad:12:78:7b:2e:10:11:13:
3e:fd:2a:f2:24:58:08:77:f2:bb:45:70:92:35:70:
81:e4:3e:23:fc:6b:19:5c:d2:fe:da:14:42:c2:35:
d7:99:61:6a:8c:ea:23:d8:7e:ee:6b:b8:ee:75:80:
52:6c:19:89:32:76:f4:7c:85:65:3c:4d:40:95:a8:
02:67:4e:0a:13:42:15:5c:3d:19:79:8b:94:17:19:
2b:80:b9:9c:45:74:95:2e:9f:54:f3:e9:4c:bc:86:
e0:e7:c6:0c:63:18:ee:28:05:6c:b1:91:e5:77:cc:
5d:e1:0f:0c:31:46:a6:c0:13:c7:d2:66:cf:90:8d:
cb:a6:08:15:b8:f9:11:73:75:c7:0c:8f:f1:68:d2:
21:d6:43:f0:59:fb:f1:3d:26:cd:20:5b:55:7f:93:
e0:fd:48:48:b8:3d:59:c0:fb:8b:88:89:4b:c0:2d:
37:2b:cc:13:4f:11:0a:1a:81:a2:a9:73:6a:02:e4:
d5:b2:89:96:9a:69:45:73:7e:64:8e:ca:05:77:d5:
0b:97:15:df:92:f5:3b:69:10:84:08:44:ba:59:ad:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:66:28:E9:2A:A3:54:23:85:1F:1F:81:D8:8D:15:A3:E0:87:81
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c3:49:ca:97:9d:68:1f:8e:12:4a:b9:fd:3b:90:a4:f4:ef:
ae:d8:4c:d9:75:b2:02:c0:b3:ca:2c:e8:cd:88:e0:21:9f:2c:
41:28:e4:23:99:96:14:27:48:62:ad:c7:a3:8e:b1:4a:6a:b1:
ce:d6:fb:f6:08:99:e2:a0:ce:7f:e9:c9:c9:a8:99:46:46:c9:
8f:a5:5f:b0:43:e6:f9:c6:c6:42:ed:3a:ca:7c:45:79:46:76:
8c:9f:c2:d7:bd:24:70:d6:40:8e:1d:08:5e:a0:f9:22:68:60:
a2:8f:d1:b0:94:58:2c:ac:9d:4d:c7:94:ad:84:7f:62:0a:2c:
fc:1b:3a:1f:a8:f3:89:f7:04:d1:20:fe:37:85:ac:46:66:61:
d5:27:f5:40:eb:51:87:82:3e:b8:10:2b:4f:44:4b:3b:41:ac:
25:a8:e9:b2:76:43:67:76:7d:90:07:89:3a:bd:6e:b3:77:f8:
69:5d:93:e3:64:21:da:51:ff:31:07:1c:68:2b:88:64:d0:9d:
4e:d7:b3:9d:0c:29:1a:70:2c:03:af:70:12:bd:bd:20:f9:9d:
03:30:c6:07:df:af:d4:67:c6:fe:28:b2:e1:bb:81:a6:72:78:
14:18:23:67:39:47:a3:19:6d:d5:a3:ca:30:df:d4:03:26:d5:
5f:dd:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:53 2026 by rpki-client