Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: rzxSo7GAAHEAtTS6RQYkZ/fhtXc09ji0en/9ffC1Ly0=
Subject key identifier: 4E:76:CC:F5:6F:10:BA:D9:F6:20:AE:34:B4:51:E6:42:FD:12:E4:45
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019FA899B3D51A3B93931F2E7E65B99E0F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 0751
Signing time: Tue 28 Jul 2026 12:01:13 +0000
Manifest this update: Tue 28 Jul 2026 12:01:13 +0000
Manifest next update: Wed 29 Jul 2026 12:01:13 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: tGrj6hCUjoI++IJoGnJmzYwsPo24CgJMCL53qPSSIMs=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b3:d5:1a:3b:93:93:1f:2e:7e:65:b9:9e:0f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Jul 28 12:01:13 2026 GMT
Not After : Jul 29 12:01:13 2026 GMT
Subject: CN=4e76ccf56f10bad9f620ae34b451e642fd12e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:9b:09:52:65:60:f3:19:e3:e2:31:b6:5b:
7a:f0:67:16:4e:59:5e:76:5d:0f:bc:fa:a3:bc:52:
b9:af:7c:47:8c:ca:50:69:3c:d7:f8:9e:c9:6e:dc:
08:26:9e:6b:db:ab:23:2a:3e:ee:d0:2b:55:35:21:
aa:6d:ff:0e:f1:ba:4d:57:1b:9e:13:ba:7e:14:e1:
3d:6d:fd:1c:d4:05:42:fb:c4:03:ce:55:46:18:e3:
3e:0d:1e:b2:49:65:f4:46:24:56:97:65:3d:46:28:
c7:40:0d:f8:ad:50:40:b7:8b:b8:77:f9:a1:13:0e:
b5:ab:29:e1:79:d2:9d:a0:ac:4f:d0:a4:09:6e:1a:
f9:e5:86:88:2e:24:49:9c:40:4e:25:ca:61:b7:95:
6b:de:49:97:41:9e:08:fb:3b:f8:e1:ec:87:94:e0:
c7:d1:79:a5:21:fd:3a:05:9e:f5:5e:6c:ca:a3:f6:
53:06:fd:74:e9:e6:01:40:3a:a1:7b:85:3c:44:6f:
ec:e3:41:d3:7d:40:85:75:52:8c:50:96:64:d5:b4:
00:50:c3:d9:8c:17:24:04:8f:eb:d8:bb:4d:6a:62:
b9:8b:71:3e:77:eb:60:a2:d1:ab:75:fb:0a:c3:4e:
e9:92:eb:08:8d:e5:c8:54:a6:18:5b:08:c1:36:83:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:CC:F5:6F:10:BA:D9:F6:20:AE:34:B4:51:E6:42:FD:12:E4:45
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:6f:0d:c1:a6:04:d4:a1:65:13:c4:62:e5:b3:39:c8:7d:
08:bf:b4:7a:8d:40:14:6b:e1:3b:a0:75:29:fe:5f:78:77:44:
29:3c:c0:0d:93:37:9e:6c:af:f3:f9:c5:d2:0c:50:23:e2:63:
b0:1a:e1:5c:24:ed:04:05:62:be:ac:b7:f8:a6:de:5a:b6:93:
51:4e:74:10:c5:62:e0:0c:69:7f:48:34:23:95:16:d7:57:74:
db:48:da:65:de:d2:65:ec:e3:cc:c3:0f:68:f2:c7:89:90:fe:
3e:62:34:32:ae:d6:2f:6a:6e:4d:1d:f6:cf:f2:92:f1:f8:4a:
08:39:66:71:67:a4:7b:b6:dd:1b:1c:19:80:ce:1b:cb:cc:e9:
a4:83:9e:68:80:ff:1d:08:ff:d3:04:e8:22:b6:ed:f2:cb:40:
d2:5d:9c:b4:a9:76:45:0d:38:85:c8:f0:b8:a6:ea:99:bf:cb:
dd:e7:5c:90:38:1a:7d:03:27:cb:a7:e2:d4:eb:8f:b4:1c:fd:
23:d7:8b:8d:09:60:f3:6b:9f:02:95:25:2e:61:18:ef:bd:e1:
ea:52:47:f1:18:86:b1:ee:e2:00:a6:b9:5f:1c:d4:10:26:4b:
c4:ce:22:45:db:ab:76:f0:42:f0:a0:d8:9d:a2:9d:dc:a7:b3:
92:8a:27:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ombPVGjuTkx8ufmW5ng8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw
YzcyMmEwHhcNMjYwNzI4MTIwMTEzWhcNMjYwNzI5MTIwMTEzWjAzMTEwLwYDVQQD
Eyg0ZTc2Y2NmNTZmMTBiYWQ5ZjYyMGFlMzRiNDUxZTY0MmZkMTJlNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh+bCVJlYPMZ4+Ixtlt68GcWTlle
dl0PvPqjvFK5r3xHjMpQaTzX+J7JbtwIJp5r26sjKj7u0CtVNSGqbf8O8bpNVxue
E7p+FOE9bf0c1AVC+8QDzlVGGOM+DR6ySWX0RiRWl2U9RijHQA34rVBAt4u4d/mh
Ew61qynhedKdoKxP0KQJbhr55YaILiRJnEBOJcpht5Vr3kmXQZ4I+zv44eyHlODH
0XmlIf06BZ71XmzKo/ZTBv106eYBQDqhe4U8RG/s40HTfUCFdVKMUJZk1bQAUMPZ
jBckBI/r2LtNamK5i3E+d+tgotGrdfsKw07pkusIjeXIVKYYWwjBNoMn1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE52zPVvELrZ9iCuNLRR5kL9EuRFMB8GA1UdIwQY
MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt
NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl
LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddBvDcGm
BNShZRPEYuWzOch9CL+0eo1AFGvhO6B1Kf5feHdEKTzADZM3nmyv8/nF0gxQI+Jj
sBrhXCTtBAVivqy3+KbeWraTUU50EMVi4Axpf0g0I5UW11d020jaZd7SZezjzMMP
aPLHiZD+PmI0Mq7WL2puTR32z/KS8fhKCDlmcWeke7bdGxwZgM4by8zppIOeaID/
HQj/0wToIrbt8stA0l2ctKl2RQ04hcjwuKbqmb/L3edckDgafQMny6fi1OuPtBz9
I9eLjQlg82ufApUlLmEY773h6lJH8RiGse7iAKa5XxzUECZLxM4iRdurdvBC8KDY
naKd3KezkoonPA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:23 2026 by rpki-client