Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: secyV1RslJPIgras1p2Pcf9dSD3YK5rzm8DiGLPzdxU=
Subject key identifier: AD:8D:C7:6F:83:9F:EA:3A:DA:E6:71:50:5A:3D:ED:C2:D6:A4:35:03
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 01A129561366780427CDD76E4DA2DFBB780F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0E8D
Signing time: Sun 11 Oct 2026 05:01:09 +0000
Manifest this update: Sun 11 Oct 2026 05:01:09 +0000
Manifest next update: Mon 12 Oct 2026 05:01:09 +0000
Files and hashes: 1: 3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa (hash: hh8lqhzxp65qpWrKmiGr9OM0XCPYC84fwBd1q1LAGsc=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: aQLpH/tc6kNJhrgK9q/lGhRaqui4n0lv5sgxFYTu8QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:13:66:78:04:27:cd:d7:6e:4d:a2:df:bb:78:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Oct 11 05:01:09 2026 GMT
Not After : Oct 12 05:01:09 2026 GMT
Subject: CN=ad8dc76f839fea3adae671505a3dedc2d6a43503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:30:bc:21:b6:55:db:52:1d:51:b7:d8:35:
6d:87:8d:f5:df:b9:9d:76:c7:a9:44:65:73:47:13:
f1:77:2d:fd:81:d8:34:9e:a0:ed:4b:63:74:a7:02:
df:40:a2:3a:d8:87:f7:ee:33:e4:57:4c:df:a4:7a:
3a:53:4d:ba:e6:48:ea:7f:2e:55:2b:aa:b4:42:82:
f7:88:b8:8a:a6:03:31:23:96:8b:6e:ae:a9:46:37:
18:e6:e1:bd:e2:07:b9:59:b5:d5:73:25:ea:0e:51:
b3:ef:f6:86:54:95:1c:77:3f:3a:bb:a4:9f:2c:43:
84:b6:a5:92:06:c9:26:0e:e9:ac:09:94:2f:22:b4:
77:9b:82:fe:95:8e:c3:b8:a5:c0:27:b2:4d:f2:6a:
a6:d9:b8:93:b0:24:a7:5c:b1:d7:d5:6f:ab:e7:1f:
e1:e8:47:62:ab:c8:04:4b:ec:bc:31:60:0b:3b:30:
4e:ea:cf:f7:09:56:54:65:e3:0a:bc:ea:6d:d6:ba:
cd:29:d4:60:81:b4:b4:0a:d7:71:6e:ed:40:f8:e8:
21:76:44:78:be:2a:14:92:01:01:f1:8b:20:67:2c:
c3:2a:8b:35:22:05:de:39:08:77:69:c0:27:d7:47:
c1:a9:93:de:a9:f1:17:59:f8:16:af:59:ce:d7:a1:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:C7:6F:83:9F:EA:3A:DA:E6:71:50:5A:3D:ED:C2:D6:A4:35:03
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:8f:a1:42:02:20:35:d1:0d:9c:d4:aa:2d:ff:40:77:05:
95:07:7e:c6:cd:f5:f1:84:88:05:d6:bd:57:82:ec:97:56:fa:
d7:9f:99:34:2a:03:c9:c9:55:19:c7:c1:b4:51:ea:57:3e:62:
73:c8:a5:a6:ca:dd:4e:f3:66:90:24:76:c0:5c:aa:7a:a6:d0:
5c:73:56:be:59:80:64:44:60:1e:d5:29:c6:72:aa:56:f9:8a:
a4:f0:9a:b2:2b:d9:15:0b:00:ca:19:02:6c:15:ac:01:dd:f5:
98:84:2b:ca:fd:b3:46:20:bf:38:e4:d0:c8:ce:08:c2:29:8e:
12:77:a4:99:a9:8a:4c:ed:fc:3d:24:65:55:3f:3c:d0:e1:ba:
5d:ba:64:c8:e3:47:ca:bd:5c:c2:75:c8:01:76:cd:07:51:ba:
37:8a:a8:de:5e:3f:a5:94:24:9d:47:38:da:a5:77:d0:98:12:
52:dd:55:3a:3f:ee:d6:80:e2:52:3e:a9:0f:85:5a:fb:ae:a8:
b0:c0:fb:c5:39:b5:29:71:01:f1:7c:d9:99:26:5f:5a:0d:46:
ea:dc:97:bb:ea:c2:62:c6:cf:d3:10:ab:4e:a0:10:70:e6:c7:
01:c0:49:f1:76:cd:5f:bd:5a:d2:92:15:29:5b:1a:dc:ac:65:
c6:fd:60:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:41:50 2026 by rpki-client