Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: ZctowAY+egc6YJpVFXiEmoz4zfNUnz/mxkc490grOBs=
Subject key identifier: EA:2D:05:2A:03:2C:96:02:47:B4:4C:5D:70:CB:2E:E6:F7:1C:B6:36
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 01A0BEE7585B1C08E713EE7CDA5C218D27BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0525
Signing time: Sun 20 Sep 2026 13:00:27 +0000
Manifest this update: Sun 20 Sep 2026 13:00:27 +0000
Manifest next update: Mon 21 Sep 2026 13:00:27 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: N25vVtEqRVe5588S2ltcNsmdz/+aVwWyzoZrJaPGMjc=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:58:5b:1c:08:e7:13:ee:7c:da:5c:21:8d:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Sep 20 13:00:27 2026 GMT
Not After : Sep 21 13:00:27 2026 GMT
Subject: CN=ea2d052a032c960247b44c5d70cb2ee6f71cb636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:7e:8e:a1:20:5f:72:d9:2f:ca:7f:03:79:
d2:60:9c:95:f5:aa:2d:3e:5d:eb:7b:6d:ba:96:81:
84:ee:1e:4d:f2:15:89:b6:71:8d:aa:e3:b9:75:66:
5f:8c:6a:60:95:17:35:f6:f3:e8:8d:da:9a:ac:5c:
eb:f5:88:d1:8a:f1:89:c0:f8:25:c4:f0:ee:ce:ba:
d5:7c:08:66:44:45:91:ca:e6:43:fd:ff:0d:fc:48:
c4:0b:4f:39:35:07:0b:7c:88:91:44:5a:be:11:e2:
a6:a3:ad:7f:c1:d0:c1:45:41:1d:21:93:eb:6b:18:
0d:54:37:df:6d:6e:27:29:21:c0:12:68:cf:9c:13:
2e:64:c1:ba:ce:fa:0c:17:51:d7:a7:67:a1:f4:a0:
e3:6a:02:38:6a:50:15:a2:ff:eb:4b:af:ef:13:0e:
32:ea:3a:33:77:92:57:0f:3c:de:be:69:75:d0:e9:
dd:dc:1c:e7:23:87:06:c2:21:bd:92:73:e1:f0:e5:
95:ff:68:a7:1a:e3:c4:4f:53:ab:4f:21:4e:7b:12:
2e:61:50:60:9f:1e:a6:9d:dd:17:4b:27:28:60:61:
f5:2e:64:36:82:3f:2d:88:a2:7f:dc:e5:ba:54:9a:
76:d8:bb:52:e6:c1:ea:eb:39:62:45:0f:d2:a4:36:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:05:2A:03:2C:96:02:47:B4:4C:5D:70:CB:2E:E6:F7:1C:B6:36
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:9e:6b:a4:87:05:01:58:45:9b:29:df:91:aa:37:b7:98:
04:5a:95:3c:a5:d3:b6:4b:1c:1f:1a:83:81:89:1d:23:68:6a:
12:db:76:37:d1:21:84:ce:e6:55:7b:29:c5:c1:4e:dc:ab:64:
90:b4:78:f9:d3:3e:34:ac:eb:88:16:67:18:ce:40:81:16:25:
6d:53:cf:19:96:dd:b5:e9:66:80:1b:62:a2:48:58:6a:b1:5c:
77:1f:f5:d9:0d:f9:37:db:be:8c:95:b9:b5:ff:b3:4a:aa:50:
73:db:aa:c5:d4:77:b6:a2:f5:17:01:45:34:72:2c:2c:e4:6c:
b7:9a:13:b9:18:c5:1e:bb:f3:51:8d:29:6d:a8:d4:ae:39:67:
8b:cf:a6:f6:ca:52:41:5b:ab:7c:08:3c:cd:58:a7:38:8f:dd:
43:89:2a:d3:b1:d5:fb:d8:50:26:dc:40:d6:b8:e8:09:e9:76:
fd:cb:f9:3a:66:41:72:66:dc:10:e7:37:6c:53:4f:e7:a1:3f:
c0:b3:ef:c9:05:3b:49:af:f7:ac:3e:b2:70:3a:6b:e7:81:5a:
7f:4e:28:ba:48:1f:43:51:d3:15:f6:d3:86:dc:be:57:cb:c0:
6d:86:ab:6b:cc:19:66:85:2e:fa:ec:92:99:1c:33:b7:64:3f:
e6:78:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:41:55 2026 by rpki-client