Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: /9nRyG7D2qvP6XQLrHvuGj3kveMxnbEKRC5tQ0yde/8=
Subject key identifier: 46:8F:02:97:A4:B7:CB:C3:9E:E9:26:DD:75:32:4D:C2:44:0E:9A:A5
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019D99620074F22E949A1FCE76BB952D44B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 06AE
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: VVOJMHgBgbIm4Lj8/6ETtKul+DJ4mIlibunb0xaL/jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:00:74:f2:2e:94:9a:1f:ce:76:bb:95:2d:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=468f0297a4b7cbc39ee926dd75324dc2440e9aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:a7:7e:0c:6a:ce:f3:68:72:6e:62:d1:fd:
f7:fa:93:dc:91:b6:3d:1e:13:a6:5c:fb:02:5d:99:
4c:25:6b:61:bd:40:b7:f2:37:95:50:bb:76:7e:23:
ae:3d:30:91:fa:99:bd:0a:4e:71:ec:e2:81:c8:3a:
4b:a3:f6:03:40:44:2b:19:06:57:f6:0a:5d:16:b4:
e1:d1:1a:10:05:fa:6e:5a:4e:01:fc:d3:95:9e:11:
96:8b:81:4f:aa:81:e9:e0:fb:4e:13:43:69:20:f0:
ea:73:92:df:2d:e9:53:b6:2c:fa:e8:9a:33:06:07:
21:57:e3:6b:5e:ed:f9:94:40:8e:8b:2e:fe:30:a5:
5d:76:ee:5b:74:e4:96:ed:05:41:74:27:e5:5b:67:
36:5b:40:18:0c:80:7c:7d:d6:3d:5f:73:6f:b3:cd:
fd:82:6b:43:3a:11:ac:84:35:f9:cb:cd:3d:36:32:
5e:f7:1f:4a:f3:4e:75:68:aa:2d:89:99:9b:c9:54:
4e:70:fc:55:19:15:3f:f9:2c:97:39:54:1d:be:0a:
38:14:71:7b:5a:23:ff:aa:2d:2a:7c:b1:ff:3f:3c:
95:06:f2:d5:05:ed:f2:69:48:e4:3e:9b:2e:a0:2d:
6a:31:11:88:3f:b2:f0:df:b2:a7:d2:d6:c9:9c:34:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:02:97:A4:B7:CB:C3:9E:E9:26:DD:75:32:4D:C2:44:0E:9A:A5
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:3b:03:ba:6d:81:a6:0a:56:6f:e2:7a:0b:3b:f9:4b:5f:
1b:ae:7f:57:43:a5:b7:a9:73:5f:fb:18:3d:14:8d:cc:73:15:
a0:21:c7:9a:32:39:7a:84:ae:1a:5e:80:a9:11:67:8d:b5:48:
d2:d9:f6:4f:95:68:41:ee:ab:ed:11:91:4a:99:5a:fd:19:4b:
07:a2:6e:3e:8a:81:d7:88:c5:b7:23:61:04:d5:5f:d9:d0:c0:
86:a6:e7:36:de:6c:25:e0:19:07:e9:73:24:c8:29:fc:b4:7e:
08:9e:c0:4e:65:23:93:b8:b3:43:44:bb:53:86:0d:9a:c7:3b:
95:e8:ec:f1:6c:64:92:1e:2c:9a:2c:06:2b:30:cc:d1:48:94:
65:2b:17:a0:a7:8c:48:90:ec:88:3b:f6:07:77:91:62:30:c0:
f6:30:01:83:cc:84:e4:74:ba:fc:7f:d3:c1:94:8d:59:57:ad:
b3:80:a4:4d:31:76:34:d5:4f:ff:e3:ae:0e:1c:8c:23:1d:d9:
dc:13:3e:70:a8:c2:85:ad:a5:d6:82:22:c8:72:7d:ec:53:4d:
5c:90:aa:32:41:16:2b:ac:9b:0b:bd:26:5a:b0:42:ee:0a:a8:
97:93:61:64:0d:e4:05:c0:d9:93:57:4a:49:16:62:aa:34:58:
bb:7a:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:44 2026 by rpki-client