Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: thVkiO4qgN7ujBGpZZxJGt3x8R4pfnM4P1dOfHIsD+Q=
Subject key identifier: BF:F3:2D:04:08:C5:75:07:BF:FB:5B:1C:29:55:86:E6:F6:74:9B:70
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019D996212B6705696ED884DD5B89DDC4F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 0640
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: 4DtJ+rZmzt/UJqnC5ijW0F+0pJSvspLySJZWgQBn43g=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:12:b6:70:56:96:ed:88:4d:d5:b8:9d:dc:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=bff32d0408c57507bffb5b1c295586e6f6749b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:9e:ec:cc:cf:88:58:5e:35:42:3b:30:54:
d1:98:68:e3:75:7a:c9:a8:e7:33:93:f6:7b:ab:a6:
12:62:70:0a:21:4b:e2:46:f6:39:16:56:ef:9a:d5:
cb:82:fa:25:08:ba:bf:b6:db:0c:a1:8e:b5:f1:68:
b7:ca:ba:10:a2:b1:64:cf:c1:5e:fe:98:22:72:34:
48:14:5c:7c:0d:a5:d4:1a:9b:e0:2d:2c:bb:02:2c:
2b:26:87:ce:11:00:37:56:57:f8:91:20:cb:c2:39:
82:54:86:f1:e6:56:0b:67:2a:91:d8:28:e7:32:a2:
b4:bf:85:3c:ce:d4:2a:cc:6f:fb:0f:8f:97:4f:59:
f9:0a:30:9a:f5:ae:14:97:f6:13:4b:39:a9:b8:43:
f7:22:51:e0:97:b0:4e:78:94:16:8b:7a:c2:e3:ab:
10:f8:87:23:73:ff:ee:60:35:6d:20:ee:09:18:71:
ff:73:1b:31:e8:93:12:75:ba:cd:b2:fa:54:94:31:
86:9f:ed:cc:79:15:f7:9e:d5:fc:47:cf:57:cf:52:
86:49:20:37:93:2b:9f:04:b7:40:37:26:55:09:79:
c7:82:b3:3b:88:00:27:bd:fc:09:75:0e:e6:9a:f0:
23:fc:1d:3d:93:66:6d:ab:d7:0c:8a:27:12:47:89:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:2D:04:08:C5:75:07:BF:FB:5B:1C:29:55:86:E6:F6:74:9B:70
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3b:66:1c:9c:e4:42:b7:84:9b:c7:41:02:5f:a8:7b:5f:0c:
a5:e1:6a:d9:23:e1:5e:c0:b6:de:36:8e:4f:fe:0c:ec:8e:83:
05:9b:10:5d:11:e2:48:84:98:c3:de:c7:bc:ea:55:ad:4d:17:
5d:aa:a2:9a:26:ad:3e:a5:36:cf:7f:1d:c8:be:df:8b:6d:df:
ef:a6:6e:0f:72:87:4e:ac:84:10:10:38:38:70:1e:56:9d:08:
37:b0:8a:b7:40:bc:e2:f6:14:e6:29:90:dc:e5:68:d4:88:4d:
3c:c8:fb:18:0b:0b:2e:68:1f:78:91:b1:5a:a9:12:76:e7:b6:
f1:a8:a4:09:f1:5f:7e:42:19:90:3b:65:15:d6:cf:33:06:d5:
f1:34:e5:63:d6:70:6d:46:70:fb:0f:fb:13:40:94:a0:7a:4d:
82:2f:2e:cb:22:f7:e7:dc:7b:11:5c:7e:0a:31:a0:11:b5:c9:
c6:66:fa:d0:62:c4:f9:ef:8d:3a:c5:a5:72:f4:3f:0e:3e:a7:
0a:c3:34:30:f2:d9:15:d2:b7:9f:6e:27:63:c2:2a:73:bf:87:
6d:c2:71:1d:3c:a2:51:5f:c6:28:30:88:77:2e:24:c4:70:d4:
14:d8:af:b5:be:51:7b:1b:47:99:c9:7b:ab:c0:c4:97:25:ec:
9b:26:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:01 2026 by rpki-client