Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: wBrvPH503prO4MDkFuS6QfgD1V3QE5KvUunXVHq1TZ0=
Subject key identifier: BB:85:EF:B6:1C:48:62:6E:9D:62:92:E7:57:C1:26:E0:E5:E6:1D:97
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019D99990EEB4E8DBBF82194C67AECD8A002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0384
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: iRd6kbChG5B4CpYX5pYfjrP01RnwDb/QJgPISkBAk08=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0e:eb:4e:8d:bb:f8:21:94:c6:7a:ec:d8:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=bb85efb61c48626e9d6292e757c126e0e5e61d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:c5:1e:38:f0:5a:1f:6c:7e:e3:5a:27:56:
1f:08:0e:01:6e:e8:ed:56:a2:86:0f:87:3b:fd:af:
63:cc:c2:fc:2e:80:84:c9:77:0b:3d:c3:70:47:51:
e7:53:09:12:e0:99:4f:c2:52:74:de:3a:0b:c5:f5:
1c:6e:6e:d0:a1:d6:38:db:85:bc:22:52:8c:9d:1b:
bf:c3:b0:be:a8:05:8b:a0:91:fd:66:e5:20:36:fe:
e7:46:f3:c9:48:11:e4:d9:de:24:b0:6c:51:55:e6:
33:18:b0:e3:d2:a2:8a:1e:58:a2:0e:e0:81:1c:4a:
47:bc:91:c4:0b:da:9c:16:a4:b1:bf:f9:ae:cf:8e:
6b:7a:08:f4:ff:29:a3:d9:5f:14:de:22:ef:4e:ba:
a3:5a:0e:cd:df:75:7c:56:12:1c:97:35:3f:e3:84:
c3:06:25:ea:d3:e6:50:3d:01:bc:97:e1:dc:59:38:
c2:c9:1b:04:d5:ea:a8:af:25:44:4e:bb:88:e5:7c:
b4:b8:c4:53:72:8c:3b:65:3f:b8:ee:65:ad:ec:c9:
16:85:9b:e2:8f:f2:8a:c6:bb:65:04:f7:39:d9:c2:
24:44:ae:b6:26:27:c5:95:5c:85:c8:b1:dc:7a:3a:
34:bb:f9:f3:95:63:c0:8f:ad:c7:a7:01:7f:d3:82:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:EF:B6:1C:48:62:6E:9D:62:92:E7:57:C1:26:E0:E5:E6:1D:97
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8e:e9:9c:82:9e:b2:75:12:18:bc:de:ab:64:1c:40:62:c9:
1c:7c:78:34:37:74:7c:9f:da:27:e5:d9:64:0f:30:e9:7d:88:
ea:d9:a8:21:ae:99:1c:f4:fd:99:96:f6:68:5a:6a:0c:21:e6:
b2:ea:47:46:18:f3:3b:ee:38:4d:32:1c:cd:f4:ea:e1:8a:46:
14:95:ab:81:2b:14:8e:11:28:c7:02:3f:19:ca:e3:35:75:8d:
9d:16:9f:57:4b:fa:59:6e:6d:a7:e8:d4:42:a6:f8:ea:e2:ef:
a2:1b:cb:3a:15:ea:3b:5c:54:bd:ae:93:f9:15:20:ba:f4:0c:
e8:23:ce:39:be:9f:3f:d9:5c:b2:73:db:9c:ce:e4:d0:3c:1a:
59:9a:61:99:84:cf:88:57:42:f2:db:be:d5:08:74:bd:5e:73:
15:09:34:35:79:e3:30:ed:0f:fd:be:f9:fb:29:47:8d:83:9e:
ce:ed:ae:3c:a4:1e:fe:7f:f1:b4:49:4a:c5:ef:36:72:fb:29:
ca:47:18:ef:86:73:bb:eb:43:77:b7:f7:89:7e:10:6c:34:14:
07:ea:48:79:40:bd:e0:7f:bb:bf:97:7f:81:6e:cb:35:9b:c1:
0c:14:01:36:1a:00:23:87:fb:5e:3d:b0:52:88:75:81:90:25:
2f:9a:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:57 2026 by rpki-client