Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: xJYnX61PXp97/1/MEBhCUOIlZE6HwBzdm4cSGre6tD8=
Subject key identifier: 37:8F:72:6E:5B:3B:55:A6:93:C3:B0:19:12:14:3E:94:93:7A:C1:4B
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019D9AAB90ECCD5EEC442F01B8E740A99103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0CFD
Signing time: Fri 17 Apr 2026 09:00:28 +0000
Manifest this update: Fri 17 Apr 2026 09:00:28 +0000
Manifest next update: Sat 18 Apr 2026 09:00:28 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: i6jlqQuOu/MiAS2N4LQ+gbQ51RRcnL7y8nJFfoS+ikU=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:90:ec:cd:5e:ec:44:2f:01:b8:e7:40:a9:91:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Apr 17 09:00:28 2026 GMT
Not After : Apr 18 09:00:28 2026 GMT
Subject: CN=378f726e5b3b55a693c3b01912143e94937ac14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1e:e1:9f:af:22:ce:ea:b1:d6:f7:ea:02:ff:
a6:e3:8b:6b:be:40:2c:e9:e8:7b:f1:93:bd:c1:26:
3c:e5:f2:1b:a7:f6:ee:b3:11:b1:62:c2:26:f3:dc:
dd:98:6d:91:1a:36:6f:ba:2c:99:a9:b4:ea:6d:23:
a8:2a:0a:5a:0c:e0:44:14:1a:d4:66:06:c8:cf:6f:
0f:05:d6:23:57:cf:aa:d4:0f:73:b2:43:ac:91:37:
a7:a3:3f:70:74:ef:6b:31:c4:8f:6a:20:2c:ea:6a:
08:bb:3c:14:cd:b3:79:f4:30:75:a8:eb:34:9e:d1:
4c:cf:f2:37:f6:34:b0:0c:28:72:1d:03:4a:8c:2f:
36:ca:09:d8:4c:37:97:e8:a8:db:64:30:e4:e8:92:
d5:98:cd:a5:3d:06:ba:77:dc:d7:33:e5:df:b8:f7:
9e:6b:6e:b1:d0:ae:20:42:a2:71:79:62:ce:f7:7a:
14:42:11:c2:87:a9:12:80:7e:60:66:00:99:59:30:
2c:4d:35:cc:07:ba:5f:bb:58:02:52:df:a2:f6:88:
0f:4a:8e:38:59:8b:2e:94:b6:04:f9:66:7a:c8:70:
a0:ea:31:cb:67:0e:e1:4d:a8:41:de:70:ee:75:80:
d8:f1:57:2a:41:da:a7:ae:6e:5a:ab:b7:ad:87:64:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:72:6E:5B:3B:55:A6:93:C3:B0:19:12:14:3E:94:93:7A:C1:4B
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a6:9b:62:16:b3:44:5e:13:c9:bc:d0:1f:af:18:99:1d:87:
7c:75:fc:18:60:a6:18:2c:92:de:76:6b:4b:d1:c4:0d:c7:c4:
73:a3:78:79:86:6e:52:3b:8d:c2:cb:4b:e2:ef:3c:86:69:b6:
53:3e:f1:1f:17:b9:48:d9:e3:31:b7:e9:3f:96:83:2f:ae:b5:
10:c0:96:c9:88:46:8d:a0:76:4f:bf:0b:ac:f9:a2:4a:ca:32:
52:fb:00:27:5a:89:10:55:73:f7:af:f2:d8:31:fd:e5:4e:0d:
22:4d:ce:25:0b:e5:0f:a8:f3:e5:76:cb:61:a0:53:b2:7b:bb:
a9:7e:da:06:95:a6:c9:85:37:56:14:6b:67:70:b6:2d:af:2d:
81:87:9b:23:3d:3d:ce:9a:e8:aa:72:b8:56:9c:90:01:31:6d:
72:40:96:97:a9:f7:18:30:c8:86:af:81:96:e0:f2:9c:c5:d2:
72:52:c6:6c:13:06:40:eb:09:2c:d8:b1:e6:3b:65:3a:49:f8:
9f:01:52:48:41:14:a1:2a:1b:68:eb:55:62:14:43:9d:2b:6e:
e6:12:54:36:bb:ca:d9:1c:23:b8:c3:2d:41:3e:33:dc:fa:84:
f1:86:7e:65:26:6a:66:4d:0f:17:7b:01:87:bb:c6:56:0e:ff:
5d:be:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:42 2026 by rpki-client