Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
File: O8RoMnEppQF7l23I7aydG56aFMw.mft (raw, json)
Hash identifier: CPga7vODnZtUGNnuWXVTQDAZ1bSMdv9BuhAbX7DTTVA=
Subject key identifier: BF:D9:F9:E8:F2:82:A0:9F:D4:2E:DD:6A:B0:CF:9C:D7:67:F7:1C:11
Authority key identifier: 3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC
Certificate issuer: /CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
Certificate serial: 019CAAC6BCE26EC181F4600DBBAF0F1100C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
Manifest number: 17D1
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: O8RoMnEppQF7l23I7aydG56aFMw.crl (hash: OS9asr3iGGYeCu/K2mExPpxmSGCPR9dNs17NyA+EHSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:e2:6e:c1:81:f4:60:0d:bb:af:0f:11:00:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=bfd9f9e8f282a09fd42edd6ab0cf9cd767f71c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:49:71:b9:45:13:94:92:bc:38:32:27:95:
d2:8f:e6:bd:d2:d8:e4:77:cf:63:2e:13:5e:0f:b6:
87:f7:d3:a0:73:59:fd:bc:af:b7:a5:57:d1:17:77:
34:bd:c9:5e:50:e3:ae:1f:00:36:d3:6f:3d:c7:21:
69:76:81:00:8d:4c:56:df:47:cb:e4:d4:b0:c2:f5:
76:48:b1:2c:aa:06:b9:b3:83:f2:00:59:c1:e2:9e:
97:e7:7a:47:4c:bb:f3:ae:d3:b0:e3:38:e6:d5:18:
57:57:d5:96:99:b0:9e:70:d9:ca:68:09:93:81:01:
c0:89:f8:80:01:fa:77:74:6c:5f:07:d6:df:40:91:
ca:df:ad:bf:46:9e:c2:86:e5:6a:d8:63:aa:80:70:
a7:aa:e5:d5:dc:70:93:ca:50:5a:eb:d7:31:87:a1:
40:da:a3:50:63:43:93:02:47:31:cd:2b:1c:80:7f:
26:e7:2d:46:8c:05:a0:5e:b5:40:31:36:98:d6:4d:
31:fa:bb:75:7f:a9:2c:12:e6:cd:08:a9:d6:71:a1:
1c:9a:e0:4e:17:c1:fa:67:38:97:ba:cd:fa:88:6a:
ef:bf:31:ba:1b:01:a6:ec:23:a3:26:e5:01:84:22:
37:2a:92:af:02:d8:f2:be:a3:52:1c:a5:38:c0:3f:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:F9:E8:F2:82:A0:9F:D4:2E:DD:6A:B0:CF:9C:D7:67:F7:1C:11
X509v3 Authority Key Identifier:
keyid:3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:38:0e:d0:8a:10:28:be:06:fb:65:4c:6d:9a:7e:b2:b6:
1d:4e:04:68:07:f8:34:40:f2:c1:62:64:bb:fc:4a:cb:16:1b:
74:99:58:6f:dd:f1:84:f1:64:1a:90:7a:99:57:d3:b7:f3:f8:
54:42:a5:de:1c:df:11:3b:7b:99:69:9b:f1:3d:39:c2:88:50:
bd:2e:eb:4a:7e:cc:8a:7a:ee:98:3b:e7:e1:30:d6:4c:62:de:
ef:17:71:53:c7:01:65:06:72:9c:58:bc:20:49:3d:20:32:b5:
8c:11:51:bb:27:99:8a:9d:ca:5d:08:c8:eb:4b:b0:ef:10:6b:
13:c9:ca:55:b7:da:8f:f9:09:e8:3a:e6:6b:b2:76:1f:94:bb:
ef:94:61:4c:5f:9f:40:7d:0b:81:a4:4f:7f:9f:68:17:5a:70:
89:c0:63:6f:99:33:08:b3:f7:fa:fe:74:cf:99:99:3a:28:a4:
9f:3b:c1:48:eb:d4:4d:1a:df:c9:cf:6d:59:61:9c:4d:39:8e:
7d:e9:0c:f7:41:3e:e6:ce:bb:0d:56:02:33:c0:9e:5a:f0:0d:
e6:4c:2a:1f:74:35:03:53:b9:69:45:66:14:8b:b9:29:4c:7f:
ad:81:60:c7:cd:59:bf:72:b5:cc:55:26:f5:e7:08:d7:ac:90:
a6:a4:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:50 2026 by rpki-client