Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: yoasEwlfJy3jeH7BS4vjt6YN25eajLvvTkBm/1+aNWw=
Subject key identifier: B4:0D:88:7E:6E:3C:1C:C2:EF:C6:36:4E:CC:39:05:48:FA:E5:70:43
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 01A0E36388904E0CD073D9F3FB5FF20C2A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 07F4
Signing time: Sun 27 Sep 2026 15:02:26 +0000
Manifest this update: Sun 27 Sep 2026 15:02:26 +0000
Manifest next update: Mon 28 Sep 2026 15:02:26 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: q0ITH+1IH2ChRLRSqWhP/RS7FRbsTSbMAbZ3/K+TiSI=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:88:90:4e:0c:d0:73:d9:f3:fb:5f:f2:0c:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Sep 27 15:02:26 2026 GMT
Not After : Sep 28 15:02:26 2026 GMT
Subject: CN=b40d887e6e3c1cc2efc6364ecc390548fae57043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:e1:a9:b3:33:3e:73:ae:fb:73:68:1b:17:
a3:fc:f2:65:bd:e3:0d:39:67:93:c5:b8:99:43:cd:
a0:6c:43:7c:cb:4c:64:73:bd:51:5c:34:ca:21:81:
2e:82:db:75:06:1f:c1:11:4e:e2:7c:6e:12:92:b4:
03:cb:0d:34:c2:ba:2f:24:a0:93:0f:7e:f7:2f:96:
cc:8e:f5:7b:36:a9:4b:13:16:cb:71:9b:38:dc:46:
c7:ec:df:d3:25:cf:3a:88:5a:2b:8f:a0:3c:c7:5e:
47:8c:a4:8f:bb:5b:96:08:c7:88:4f:14:a0:f6:a4:
95:c4:d4:67:fa:b5:8d:46:e5:13:47:85:ba:37:ec:
0b:67:41:68:8b:df:28:56:fb:1d:ab:ad:c4:4d:33:
bf:3c:32:39:e4:ad:cc:fc:b5:6c:83:d2:7c:16:a6:
3a:ba:26:2c:e4:36:28:7c:f3:21:2f:ba:b3:ee:db:
dd:e8:17:0e:5a:22:d4:99:4d:ac:dc:c3:df:ed:cb:
d6:17:ce:0d:28:fd:2a:2b:41:81:0f:7b:40:31:72:
b0:fb:ea:e3:03:8b:1f:7e:64:8b:e9:ee:9a:7b:92:
05:cf:6b:7c:49:c8:01:cb:d7:f0:07:c2:bb:83:f9:
98:81:cf:a9:e9:06:a6:df:e3:07:f9:54:ca:f8:e9:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:88:7E:6E:3C:1C:C2:EF:C6:36:4E:CC:39:05:48:FA:E5:70:43
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:eb:af:f1:04:32:a8:56:1f:1d:72:ca:c5:76:86:6f:04:
47:77:ef:b8:56:c0:c7:36:09:1c:0a:9b:8d:b3:78:a3:f9:b5:
89:88:f8:19:c4:05:5c:c3:5d:76:43:4e:2f:7c:3c:5b:d7:ad:
b9:97:15:48:0b:14:3b:35:9a:bc:9e:c1:1d:07:89:d9:5e:27:
09:89:5e:da:e3:d3:f8:60:3d:5c:1f:6a:56:e7:42:69:51:46:
ec:f6:59:a6:f1:b2:e8:6e:8e:ad:e6:66:20:e9:0b:6d:86:1f:
7b:4f:08:22:e8:2e:ba:45:0d:db:6a:8d:43:8e:a0:df:3d:3d:
41:d0:d0:cb:cb:af:35:3b:95:03:62:f9:33:b0:ff:e9:5c:09:
63:3f:b7:15:8a:58:d2:e9:13:44:b1:d6:26:40:b6:6f:2d:e0:
90:d0:b1:51:de:cb:9f:8e:39:48:94:1e:a7:1f:27:60:e1:07:
a6:95:e7:50:d0:53:07:23:97:8a:3b:d1:34:3b:fd:33:02:44:
ce:52:64:0d:aa:f0:52:95:4b:2b:f5:20:87:7b:76:3a:ec:ab:
de:e4:b3:1f:45:83:5e:d7:a6:45:44:ed:7c:22:c1:ba:03:57:
80:21:f4:f1:64:d0:f3:c7:2d:11:37:d3:a3:3a:6d:3e:e7:22:
88:15:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:52:17 2026 by rpki-client