Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: LK1j/zayEcP3DhjOpHEiJxbXrtv2BQ1Pbk9a221JSA8=
Subject key identifier: 39:B4:CB:EE:FD:04:21:F0:83:98:58:97:2A:26:1E:FC:18:70:BA:10
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019CAB343F7B5D08A2BF753BD238813A8DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0C81
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: ykZ5421ANHbKq1wpF/fz7YWvPE/a49uCwP73OqezHU4=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3f:7b:5d:08:a2:bf:75:3b:d2:38:81:3a:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=39b4cbeefd0421f0839858972a261efc1870ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:13:bc:36:be:b5:91:f3:51:09:d2:fb:e7:
55:c9:20:70:cf:28:12:33:b3:9c:04:3d:a8:d0:f0:
32:40:eb:5c:3f:cb:2a:af:69:6a:36:a4:86:cf:19:
12:48:56:50:db:cc:09:4f:f6:19:e1:5e:50:11:5d:
27:25:f4:28:9d:cf:a7:5f:19:aa:8d:77:e4:6b:a5:
c5:01:25:e3:82:b0:a6:75:6a:1d:67:76:52:94:88:
2c:6a:58:7c:e7:dd:2f:93:73:5e:1e:56:88:04:08:
fb:41:87:4c:e6:6f:c7:68:d2:11:cb:72:93:91:32:
82:6e:75:99:33:55:26:aa:4b:7f:9c:68:ea:d8:dd:
55:03:3b:20:f7:d5:ae:12:23:78:a1:d8:23:6b:e1:
37:0f:65:09:ed:d1:85:b9:bb:33:e9:61:46:c5:31:
db:40:a5:21:10:d2:2d:af:e9:ca:b5:8f:f5:ac:6b:
fe:57:84:ae:aa:f6:6a:97:ad:e2:e7:36:8e:1d:3e:
88:3d:03:dc:2b:52:e6:f8:f8:0e:4f:c2:23:d5:1e:
95:60:2f:88:fd:5c:60:3e:ad:22:f1:58:1c:9f:b6:
8d:86:d3:e7:83:1c:6e:71:6c:e3:63:10:4b:41:ba:
ea:bc:09:04:ac:aa:57:42:9e:c2:e6:73:b3:7b:b0:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:CB:EE:FD:04:21:F0:83:98:58:97:2A:26:1E:FC:18:70:BA:10
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4e:86:52:01:d5:fd:22:94:4f:34:48:54:61:fa:db:d0:10:
fb:d9:16:93:3c:10:40:f3:75:c4:e3:f6:c3:c6:a0:a7:98:ea:
68:0a:b1:2e:c5:02:3f:e4:f2:1e:30:88:42:d7:69:ee:a3:6f:
47:11:42:f9:42:c5:38:fe:1f:85:d7:48:66:d2:2c:38:20:39:
6e:2b:60:a8:9d:8e:03:8c:8c:0b:4d:97:f3:e2:0d:45:5c:a5:
ff:bf:d6:34:82:5b:2a:c8:c3:8f:a0:db:39:38:10:60:e0:20:
5d:ed:8b:d0:b8:99:91:ef:07:35:49:88:06:2e:95:23:90:16:
d8:e0:87:1c:78:22:8c:2e:19:6a:83:5e:b8:31:b1:e0:ef:1a:
c6:af:b1:0f:32:a5:3c:8b:f1:54:0e:e3:23:7b:4d:17:06:f9:
bc:d7:4f:71:6c:05:2e:2a:2b:91:4e:16:a5:5b:6a:cd:42:6e:
80:ed:0b:a4:b3:34:eb:91:fd:30:7f:92:c8:c7:0d:4c:7f:75:
7e:64:21:7c:17:86:7d:19:f1:4c:84:6f:17:15:29:49:0a:1b:
f9:e7:1f:94:48:6a:e8:e2:29:4a:8c:21:9b:ba:18:c2:ba:0d:
be:23:9c:17:14:47:c1:6d:5c:fd:5c:01:42:6e:dc:cc:d0:f6:
8d:c2:5a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrND97XQiiv3U70jiBOo3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjYwMzAxMjEwMDUzWhcNMjYwMzAyMjEwMDUzWjAzMTEwLwYDVQQD
EygzOWI0Y2JlZWZkMDQyMWYwODM5ODU4OTcyYTI2MWVmYzE4NzBiYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5QTvDa+tZHzUQnS++dVySBwzygS
M7OcBD2o0PAyQOtcP8sqr2lqNqSGzxkSSFZQ28wJT/YZ4V5QEV0nJfQonc+nXxmq
jXfka6XFASXjgrCmdWodZ3ZSlIgsalh8590vk3NeHlaIBAj7QYdM5m/HaNIRy3KT
kTKCbnWZM1Umqkt/nGjq2N1VAzsg99WuEiN4odgja+E3D2UJ7dGFubsz6WFGxTHb
QKUhENItr+nKtY/1rGv+V4SuqvZql63i5zaOHT6IPQPcK1Lm+PgOT8Ij1R6VYC+I
/VxgPq0i8Vgcn7aNhtPngxxucWzjYxBLQbrqvAkErKpXQp7C5nOze7AhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm0y+79BCHwg5hYlyomHvwYcLoQMB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk6GUgHV
/SKUTzRIVGH629AQ+9kWkzwQQPN1xOP2w8agp5jqaAqxLsUCP+TyHjCIQtdp7qNv
RxFC+ULFOP4fhddIZtIsOCA5bitgqJ2OA4yMC02X8+INRVyl/7/WNIJbKsjDj6Db
OTgQYOAgXe2L0LiZke8HNUmIBi6VI5AW2OCHHHgijC4ZaoNeuDGx4O8axq+xDzKl
PIvxVA7jI3tNFwb5vNdPcWwFLiorkU4WpVtqzUJugO0LpLM065H9MH+SyMcNTH91
fmQhfBeGfRnxTIRvFxUpSQob+ecflEhq6OIpSowhm7oYwroNviOcFxRHwW1c/VwB
Qm7czND2jcJalQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:38 2026 by rpki-client