Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: ElELH9bIv+cw198oI0jW/kiJBwsH4cTL2cih8RBn7Oo=
Subject key identifier: 3B:55:DA:F3:B3:9B:CB:95:8F:4D:A4:D9:70:3F:E8:33:97:D5:0D:10
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019EBE47EE71545F70F48F0C66652E7CAEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0D94
Signing time: Sat 13 Jun 2026 00:00:45 +0000
Manifest this update: Sat 13 Jun 2026 00:00:45 +0000
Manifest next update: Sun 14 Jun 2026 00:00:45 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: cr6dv4wM3y1pyJAel7OulVJBkFx1WJUZQIglELy3nzQ=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:ee:71:54:5f:70:f4:8f:0c:66:65:2e:7c:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jun 13 00:00:45 2026 GMT
Not After : Jun 14 00:00:45 2026 GMT
Subject: CN=3b55daf3b39bcb958f4da4d9703fe83397d50d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:9a:01:41:75:9d:57:6d:b2:6c:1a:74:fe:
34:67:f0:91:e4:ae:33:b6:77:d6:34:0e:2a:a4:af:
4c:b2:39:6d:44:40:80:5e:e0:57:98:98:25:1e:ff:
cf:91:c8:e4:dd:09:df:aa:b8:2f:8e:0d:36:f5:0e:
6b:fe:a1:24:18:2c:56:7f:b0:d6:e4:d0:f5:2c:7d:
dd:36:bb:bd:8f:32:72:f9:d5:83:f0:b0:8c:28:fc:
08:94:2c:e6:45:f3:aa:cd:db:67:a8:8e:fd:ff:e6:
08:85:98:e4:b0:b0:04:6a:d5:48:ac:ad:f8:e7:5d:
f3:c3:af:40:61:b2:79:cb:24:af:bf:48:e8:da:75:
ac:97:53:e2:87:76:f3:fc:6e:5c:00:db:86:0d:85:
5e:96:a1:0a:64:14:4c:d9:1c:fe:29:31:24:c9:b9:
25:26:83:e7:7f:21:26:18:b2:07:69:45:85:e9:62:
dd:62:b3:3c:af:c1:f1:cc:ee:dd:3f:54:86:0a:69:
c2:df:c6:e7:d7:3e:72:76:a6:f8:ba:2f:e0:27:6f:
35:40:6f:5e:a1:6e:a7:53:44:5a:ee:dd:bc:22:aa:
79:a2:e8:6f:cd:f0:4b:0c:b6:2e:97:ee:0d:4c:0d:
d3:76:d5:0d:a0:a6:0a:32:51:8f:2e:d1:4f:92:ce:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:DA:F3:B3:9B:CB:95:8F:4D:A4:D9:70:3F:E8:33:97:D5:0D:10
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:72:82:09:b7:82:de:86:ff:74:ee:6e:d4:99:19:95:32:26:
d6:ff:ad:44:2f:b5:54:ae:f0:07:5c:53:30:27:c9:23:d3:67:
26:b9:52:44:dd:9b:2a:3c:ca:bd:ab:cf:b1:d4:f8:4c:94:29:
13:39:ef:de:39:ff:51:24:f4:cd:8b:e0:e6:e2:0f:aa:0e:96:
18:4a:f7:8f:44:65:11:5a:d6:77:f8:9d:1e:36:87:a2:03:4b:
50:a4:b2:2c:0d:3a:cd:86:fb:17:46:9a:ba:9a:49:b9:5e:31:
04:98:f2:fa:1b:f6:28:69:02:a1:b2:8c:48:a2:b6:f7:3c:cd:
47:0e:18:ed:79:82:2d:35:16:9f:67:fe:4c:ec:b4:dc:fd:0a:
f0:12:47:21:1e:de:65:b8:ce:0c:7f:a6:0c:de:20:c7:ff:a4:
69:7e:c2:a8:41:64:bb:c3:38:81:bb:b0:4a:38:be:d9:00:5e:
d0:1e:c1:9a:ca:df:5e:31:77:b3:d2:d0:cb:71:33:c0:66:a6:
de:3a:e9:bf:de:1b:e2:c0:6e:9b:f5:dd:a0:69:64:b2:92:07:
17:2b:3a:23:f8:09:69:6f:08:60:25:90:6c:2a:d2:c9:f1:58:
fe:b1:f0:97:35:9f:62:98:02:9a:2b:cb:73:6c:b3:18:ac:f3:
5f:51:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:45 2026 by rpki-client