Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: Qg5waRtN/zBHxg7MKiV3lvTAbuHv+zqQBi2zGpmiCoc=
Subject key identifier: 46:65:3E:6E:28:1A:33:0D:D9:9D:C6:23:F2:09:AE:43:B5:AC:35:B9
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 01A0C5C5835E13F255BAC3EFF2CE9BDE5890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0EA1
Signing time: Mon 21 Sep 2026 21:00:50 +0000
Manifest this update: Mon 21 Sep 2026 21:00:50 +0000
Manifest next update: Tue 22 Sep 2026 21:00:50 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: Q7UzG6wbv76/oUw5fC9RU3jGIkX1RDpFC/xKXh2KnFo=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:83:5e:13:f2:55:ba:c3:ef:f2:ce:9b:de:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Sep 21 21:00:50 2026 GMT
Not After : Sep 22 21:00:50 2026 GMT
Subject: CN=46653e6e281a330dd99dc623f209ae43b5ac35b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:0f:50:29:c4:29:32:9b:19:da:68:31:9a:
83:2f:6b:a1:8c:bc:b8:52:44:3f:09:53:73:6e:46:
28:01:40:74:87:05:e8:5e:16:f2:45:01:04:f4:1a:
60:e3:13:1b:96:42:d6:be:85:fe:dd:3f:8f:52:a8:
a6:f1:d7:46:be:d3:84:49:da:9f:54:fb:93:45:0d:
b0:6d:cb:3b:e3:ba:1f:b4:14:7b:87:35:64:19:e8:
13:19:63:a5:e3:c9:42:97:18:0b:83:04:76:5c:1c:
03:c4:ac:1a:e7:26:6c:e1:d2:8c:e2:cc:73:d1:ed:
28:f8:7c:02:08:93:81:7e:63:6d:92:5d:4c:d9:83:
b0:c9:03:2d:c0:19:e9:4f:c8:94:7b:71:ce:b4:90:
1a:a7:46:c6:d9:79:45:d6:af:84:a6:7e:31:82:b0:
4f:88:9e:e0:04:65:cc:64:b7:78:90:2b:3e:20:c7:
75:4f:71:34:d3:f3:e1:a3:aa:7c:ad:32:21:48:4f:
0e:4d:e4:a6:0f:ad:5f:ad:ae:1f:64:f2:2d:ed:87:
de:89:7e:9f:1a:d9:44:d2:32:18:9f:06:ea:ab:42:
9d:49:41:87:ff:6c:98:98:4d:40:be:10:f4:ce:b9:
65:8a:59:3a:15:00:93:fd:11:f5:56:e2:fa:4e:84:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:65:3E:6E:28:1A:33:0D:D9:9D:C6:23:F2:09:AE:43:B5:AC:35:B9
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a9:ae:68:c6:e8:c1:dc:e3:e2:f3:89:20:ba:ca:15:5d:d5:
f4:3b:20:82:23:b6:a6:53:95:c4:67:49:10:d0:78:87:cf:cd:
0f:41:f9:d3:d5:30:df:b8:1f:48:a2:49:f1:ea:fa:76:9e:24:
12:e4:b9:1f:32:f5:87:a1:db:70:35:3e:3f:1d:32:6f:65:9a:
98:20:61:03:f0:a4:a5:8c:76:98:fc:5a:7a:2a:67:fd:20:d7:
ef:1e:b1:a7:fa:ea:43:96:c4:eb:2d:b8:64:ca:62:2a:3a:e9:
6e:cf:91:4c:f4:db:74:00:a9:93:ee:19:b0:f0:55:bf:95:7e:
9e:30:2e:7d:27:06:ff:ca:ef:16:61:ad:ec:6f:a5:5d:c5:25:
64:cc:46:f2:e3:82:1f:71:0f:d1:52:7d:2a:ff:f7:53:36:9e:
6d:34:d8:3d:d4:8c:dd:7b:e2:d7:7b:8f:f1:30:0e:17:4e:42:
89:6a:be:24:3f:df:d1:d4:f5:9a:ef:db:74:3e:41:3d:13:e2:
f9:31:b6:d2:d5:83:c1:94:1d:6c:e8:9d:05:b5:73:84:b3:f7:
68:f1:f0:18:5c:5a:d2:69:a8:d0:8d:f9:ef:51:09:55:f5:ed:
30:e9:1d:02:6d:97:bf:2b:4d:de:e7:55:0e:98:9c:07:0c:a3:
b9:ca:e0:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxYNeE/JVusPv8s6b3liQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjYwOTIxMjEwMDUwWhcNMjYwOTIyMjEwMDUwWjAzMTEwLwYDVQQD
Eyg0NjY1M2U2ZTI4MWEzMzBkZDk5ZGM2MjNmMjA5YWU0M2I1YWMzNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+EPUCnEKTKbGdpoMZqDL2uhjLy4
UkQ/CVNzbkYoAUB0hwXoXhbyRQEE9Bpg4xMblkLWvoX+3T+PUqim8ddGvtOESdqf
VPuTRQ2wbcs747oftBR7hzVkGegTGWOl48lClxgLgwR2XBwDxKwa5yZs4dKM4sxz
0e0o+HwCCJOBfmNtkl1M2YOwyQMtwBnpT8iUe3HOtJAap0bG2XlF1q+Epn4xgrBP
iJ7gBGXMZLd4kCs+IMd1T3E00/Pho6p8rTIhSE8OTeSmD61fra4fZPIt7YfeiX6f
GtlE0jIYnwbqq0KdSUGH/2yYmE1AvhD0zrllilk6FQCT/RH1VuL6ToRueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZlPm4oGjMN2Z3GI/IJrkO1rDW5MB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKmuaMbo
wdzj4vOJILrKFV3V9DsggiO2plOVxGdJENB4h8/ND0H509Uw37gfSKJJ8er6dp4k
EuS5HzL1h6HbcDU+Px0yb2WamCBhA/CkpYx2mPxaeipn/SDX7x6xp/rqQ5bE6y24
ZMpiKjrpbs+RTPTbdACpk+4ZsPBVv5V+njAufScG/8rvFmGt7G+lXcUlZMxG8uOC
H3EP0VJ9Kv/3UzaebTTYPdSM3Xvi13uP8TAOF05CiWq+JD/f0dT1mu/bdD5BPRPi
+TG20tWDwZQdbOidBbVzhLP3aPHwGFxa0mmo0I3571EJVfXtMOkdAm2XvytN3udV
DpicBwyjucrggA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:06 2026 by rpki-client