Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: i6AKCNsLaxwLjHIg9Q8ACVejpO5HUKV2E+6mflLHAM8=
Subject key identifier: 68:37:0D:B4:83:BB:7B:FF:5D:4C:A4:15:EB:6D:3C:4C:72:89:65:99
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019FA9E2B37444F014266CA2BCB4BDD53EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0E0E
Signing time: Tue 28 Jul 2026 18:00:34 +0000
Manifest this update: Tue 28 Jul 2026 18:00:34 +0000
Manifest next update: Wed 29 Jul 2026 18:00:34 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: KEW5fuXeR6RXJpagCQVA/nEQ3NeUE5d/A7zDcBto2L8=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b3:74:44:f0:14:26:6c:a2:bc:b4:bd:d5:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jul 28 18:00:34 2026 GMT
Not After : Jul 29 18:00:34 2026 GMT
Subject: CN=68370db483bb7bff5d4ca415eb6d3c4c72896599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:cd:93:78:0d:64:78:56:30:bb:56:68:db:
fb:bb:75:30:8d:68:b8:96:f3:34:d8:d1:b4:5c:75:
99:83:83:28:26:50:87:fc:97:d0:4f:e2:31:9f:66:
d4:46:cb:e3:a7:27:b2:ec:17:fe:6e:4c:db:84:12:
c3:e3:ca:04:73:03:63:53:e5:62:bd:de:f3:dc:5a:
43:04:ab:5b:31:98:27:aa:41:7b:41:d7:9f:56:cd:
27:d4:eb:7a:3f:60:0f:06:18:45:c5:fd:39:88:07:
41:d9:6d:44:29:60:62:b3:15:44:df:af:dd:4b:27:
0d:80:a5:92:a0:a0:eb:ca:96:72:8c:f0:2f:fa:36:
3a:cf:74:bf:c3:8b:f9:be:32:52:d4:97:70:f1:72:
61:6e:90:2e:de:63:c7:9b:15:83:12:d7:f1:6e:bf:
50:4d:c7:e4:80:43:ea:f6:94:a0:3a:88:b2:3b:a0:
fb:49:aa:f2:fc:6e:45:05:e7:6a:f5:b5:54:cc:73:
d4:ae:4a:b0:d5:9e:dd:0f:80:d0:ef:84:29:d8:37:
d2:2b:60:04:58:5a:5d:d7:3f:a2:2c:51:47:51:24:
ec:5f:31:53:42:cc:15:88:ae:d1:80:c4:7a:13:27:
c2:7c:8e:8a:24:b1:e7:f0:02:a7:f1:38:50:24:18:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:0D:B4:83:BB:7B:FF:5D:4C:A4:15:EB:6D:3C:4C:72:89:65:99
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bc:a5:ea:44:cc:ae:e0:0b:f2:d5:7e:95:12:7d:7a:17:cc:
05:64:bc:ed:dd:b2:e2:bf:71:76:5b:ce:33:63:06:a4:57:1e:
ec:3e:5b:73:53:14:e0:75:22:7d:8c:c6:c1:b3:67:a3:ca:b6:
ee:74:62:b2:2a:52:da:b8:c4:e6:6d:16:5e:e6:f0:55:a8:31:
97:4d:7b:d8:10:b2:f6:d5:e0:4a:d3:41:2c:38:9a:cf:e2:84:
98:99:7e:80:4b:8e:ba:2a:0d:f7:5a:5b:f5:b9:a6:47:2a:56:
8e:d4:78:a8:48:35:44:35:30:41:41:38:d6:15:cd:86:a9:1b:
78:0e:12:53:46:3f:91:5d:65:fd:10:92:19:b8:cc:80:54:42:
0c:ce:dc:72:d4:0f:e9:d7:40:b9:12:2e:bc:9a:74:a0:67:ef:
46:49:af:b9:97:7f:52:68:ec:ac:8e:9c:e3:57:ec:71:da:72:
88:c0:c7:29:38:04:bd:4d:4f:75:a9:97:74:44:25:10:54:02:
a6:22:69:cb:99:15:52:dc:b4:23:bc:98:6c:de:5c:ec:ec:11:
72:a9:ec:68:65:f1:ae:22:09:23:67:47:c1:ba:f4:2b:ba:21:
e6:5c:a6:4e:86:0a:ae:75:d4:1c:1d:fb:a8:6c:d6:89:cf:6c:
f5:76:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:42 2026 by rpki-client