Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: KWg8U+SgN7YD/+iIq4Xn/KTAENymMRpXCJeiw+zkzYI=
Subject key identifier: 33:C2:5E:7E:3F:84:84:58:1C:75:A0:3B:49:CE:37:0D:E6:CB:B9:3D
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019CAC1060F01C5D7645551364C37B99EC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0309
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: AnF5wefr3fTHNWRF0LXi1jqtnDeOkUZKIg/QLIPvPGg=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:60:f0:1c:5d:76:45:55:13:64:c3:7b:99:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=33c25e7e3f8484581c75a03b49ce370de6cbb93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:bd:51:bf:cf:0e:32:bb:69:64:8c:93:98:
4c:a9:93:68:a5:07:14:e1:a9:8c:23:d9:1a:1c:64:
71:86:21:04:eb:9a:e5:5e:97:47:d9:18:06:aa:ef:
eb:e0:73:8a:c3:e9:8c:64:52:a5:70:aa:6b:37:3a:
f8:60:ac:42:84:9c:34:01:b4:55:7c:42:e2:35:6e:
36:e9:6c:43:2f:3b:3c:d2:c9:84:5f:a5:9c:8c:fd:
20:32:b6:38:98:1c:55:e1:4e:c1:5a:75:10:04:03:
cf:c2:23:c3:06:8d:02:52:f2:c1:5d:29:8a:ed:e4:
93:df:67:e3:06:c6:81:f3:64:37:5f:52:d1:f0:eb:
75:7f:57:de:7a:81:8d:67:db:ef:82:c7:80:f8:5a:
b3:59:f1:2a:3d:55:66:6d:b7:d1:00:7d:15:03:48:
47:22:39:bd:ff:65:1e:b0:51:84:c2:69:5d:07:9e:
e8:a3:92:01:5d:24:70:b6:ac:ac:58:45:17:e0:06:
90:7d:ff:3e:83:56:f7:31:b5:82:02:c5:e6:be:1b:
c3:db:c3:6c:65:c7:d0:ed:a0:16:4a:5c:f5:ec:34:
32:36:8b:47:3f:73:d8:7c:c2:e4:f3:65:5a:96:8c:
88:5f:e7:4c:3d:4f:87:08:cb:fc:50:ea:67:6e:be:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:5E:7E:3F:84:84:58:1C:75:A0:3B:49:CE:37:0D:E6:CB:B9:3D
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8e:0b:87:81:0a:1e:8b:94:2d:ff:99:4c:aa:61:05:00:cd:
6e:a7:6c:30:37:ae:0c:2c:c8:94:8b:3e:5c:4f:bb:a6:13:e9:
ba:f9:70:fc:b1:24:c5:1e:b1:81:03:a0:10:38:4a:d4:cb:2a:
f5:c2:92:51:7a:2b:91:e6:f1:02:aa:18:f1:cc:24:58:39:95:
91:b7:36:80:55:3b:46:90:ba:f6:3a:82:de:f4:f7:26:0b:03:
68:0f:1d:2b:db:29:d1:c8:48:1a:c5:bd:63:be:a1:4e:7f:8d:
1c:fd:fc:85:a8:ad:30:a9:24:07:95:f5:af:6b:cd:78:61:7a:
d0:39:bc:35:56:e6:22:3b:7a:24:5f:85:be:d3:ed:40:f3:0e:
60:9d:7f:be:ff:94:fb:dd:7b:c7:28:5f:82:59:b5:c5:b0:37:
d7:eb:f8:3b:81:e6:07:e6:7f:db:3e:18:d7:27:b7:90:51:c8:
d3:03:57:9e:68:fe:a0:66:b6:c5:28:48:cf:06:5c:4b:05:2b:
88:b5:83:93:59:2d:62:f4:50:7e:80:fb:8d:d6:bd:78:7c:a2:
8b:08:e5:b9:28:43:37:c8:4b:fd:aa:c7:1b:5a:ec:2e:cc:4b:
d5:6c:9f:bd:60:44:e2:5e:55:3e:f8:84:4a:15:09:34:3d:ba:
99:47:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:55 2026 by rpki-client