Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: OvHMcED2l7AiZ3v5zZTgHrQ0NfwsSVIV2UtoETOcyvY=
Subject key identifier: F2:97:95:AC:3C:AF:52:2A:B9:70:71:52:8E:6E:24:49:01:4C:CE:94
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019FAABF0BAD4F185D61D83E298573D3626B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0496
Signing time: Tue 28 Jul 2026 22:01:14 +0000
Manifest this update: Tue 28 Jul 2026 22:01:14 +0000
Manifest next update: Wed 29 Jul 2026 22:01:14 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: iP8oMspS4e3bsaSNm2PyomlZ11S/0wrcCru61edTGQo=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:0b:ad:4f:18:5d:61:d8:3e:29:85:73:d3:62:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jul 28 22:01:14 2026 GMT
Not After : Jul 29 22:01:14 2026 GMT
Subject: CN=f29795ac3caf522ab97071528e6e2449014cce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:55:b8:b9:b9:b2:cb:9f:b3:c5:1f:3e:7a:
31:9a:89:e1:40:b5:8a:71:7c:71:3c:83:29:d7:23:
51:ab:b4:9c:a2:59:cc:14:25:6c:87:d2:5f:ad:b8:
6d:dd:0a:a7:81:64:52:89:4d:4e:f4:2f:fb:5e:3c:
23:48:40:ab:a5:a7:5a:02:73:db:3a:5d:49:4f:49:
f1:92:35:53:43:bf:77:93:57:af:6e:b7:f1:34:e6:
a5:a6:6c:84:5f:2d:c7:8f:50:23:5a:5b:19:78:6a:
3f:c5:77:21:f7:7f:63:2b:cf:f5:37:55:33:0c:6e:
be:c0:af:e3:ab:86:3c:ad:c1:4c:a9:78:63:76:75:
e1:cb:64:b5:84:9a:df:c0:0e:42:bc:d5:1c:65:e2:
2e:d7:9c:20:34:e2:0f:ab:ec:be:d7:65:a3:1b:b8:
23:13:27:f5:c6:cb:90:b5:48:15:39:bf:2d:10:b5:
28:14:50:2a:84:38:ed:4f:12:a1:03:ec:b2:dd:90:
3b:f9:b3:06:0c:e5:26:36:86:91:51:17:83:44:19:
b8:f9:da:ff:e5:54:17:a1:8a:da:95:4b:4d:16:d6:
c5:73:f7:00:ca:4a:3f:a3:f2:94:b9:a2:b8:d5:02:
ae:8b:28:3b:8a:93:a0:e5:88:95:f4:e9:fc:1d:b1:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:95:AC:3C:AF:52:2A:B9:70:71:52:8E:6E:24:49:01:4C:CE:94
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:6a:cd:2b:90:fa:34:25:8d:1c:d9:c0:42:7d:81:4b:a4:
49:39:b8:85:45:e5:f0:33:c7:a4:ac:0c:97:55:99:99:96:a2:
63:2d:9d:63:fc:33:93:e4:70:4e:35:77:af:1e:a9:58:ad:48:
94:89:be:9b:4e:9c:d9:27:9d:8f:71:05:4c:99:f0:80:7e:95:
3d:8d:e0:44:9e:0f:8b:31:30:41:2e:a9:c2:0f:85:d8:3e:53:
28:17:ca:12:56:89:88:f3:10:6a:67:28:30:43:ef:33:0e:01:
0b:82:5c:87:29:24:46:d2:a1:f0:b3:1b:1d:62:92:62:00:f4:
d4:85:01:82:95:a9:d0:34:44:c3:a3:eb:2e:14:b4:51:52:c1:
06:0e:f7:0a:a4:ff:9d:5f:ad:af:16:b8:4d:fe:31:1c:8e:11:
b5:77:e9:66:11:e8:50:97:fe:51:b8:5f:9f:4c:ef:ae:66:c6:
b6:b8:cb:0a:39:bc:5f:71:0e:5c:4c:66:b9:a9:83:e9:24:4e:
f6:76:f2:de:f5:08:f3:ed:8b:29:e0:d0:6d:56:10:de:dc:0e:
be:f4:31:39:37:f4:aa:88:15:7e:c0:57:79:97:04:3c:f5:ba:
f7:d7:ce:37:18:77:87:a5:63:9e:b8:61:22:f5:b7:74:41:0a:
99:f8:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:06 2026 by rpki-client