Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: ymbTJ5mbOFXH+Cnz9IU3hmc3l5VXIXGg0nVYGmW1CLs=
Subject key identifier: 13:44:AA:7B:A0:52:D0:FC:E0:31:E5:DC:6E:98:61:2C:DE:A7:96:B1
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019FAAF627BE1E6A9D7F883EF1BF9A61C4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0CC5
Signing time: Tue 28 Jul 2026 23:01:26 +0000
Manifest this update: Tue 28 Jul 2026 23:01:26 +0000
Manifest next update: Wed 29 Jul 2026 23:01:26 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: orUbGSXVHOzXoY7WGF4ya30ywUHXkRNUdVCZVdnncNg=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:27:be:1e:6a:9d:7f:88:3e:f1:bf:9a:61:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jul 28 23:01:26 2026 GMT
Not After : Jul 29 23:01:26 2026 GMT
Subject: CN=1344aa7ba052d0fce031e5dc6e98612cdea796b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:00:b8:fe:b5:db:54:0c:6a:7f:44:5d:ae:
a9:6b:81:ca:71:4a:63:d3:ce:f3:b1:58:6f:9b:8e:
61:16:06:d1:99:19:c1:05:ba:3e:8d:c4:61:98:93:
df:38:3d:65:e1:bb:c1:53:0f:3f:3f:28:90:1a:09:
a8:77:13:61:56:0d:d5:db:cf:ed:e9:a6:b0:55:a6:
c2:41:94:2c:3b:d6:bb:0d:92:00:49:2c:71:61:94:
ca:4b:95:88:a3:fb:eb:8e:08:c2:fa:5f:c1:23:a8:
8d:ec:30:1c:15:80:c0:35:73:b3:f7:8e:d3:ac:b2:
b6:d7:1d:b0:c4:1a:85:73:36:ad:75:81:da:19:23:
27:98:13:95:bd:eb:43:74:3e:45:9f:01:b9:91:0f:
57:70:96:d2:43:61:25:93:df:a5:54:ee:0b:9c:7a:
61:ae:8f:b2:f0:96:b2:1b:1c:15:54:de:a3:6f:20:
39:24:00:90:0e:e2:f9:83:a3:1b:19:7c:8d:7b:83:
28:6a:c6:f8:5f:8d:12:d3:43:45:4e:6f:7c:01:f0:
1b:19:e2:b5:a5:5f:4e:23:8b:b4:16:6b:49:40:01:
1f:2d:c7:25:9d:e0:c9:fa:37:9e:06:1c:57:f9:dd:
e5:56:e5:d3:40:ae:9d:75:45:5e:ac:05:c9:7d:49:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:AA:7B:A0:52:D0:FC:E0:31:E5:DC:6E:98:61:2C:DE:A7:96:B1
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:85:e9:79:2d:60:00:c8:d2:c8:de:96:53:33:f5:d5:7a:81:
76:2a:6e:ef:ba:84:e2:5f:6d:ea:e9:1e:61:b6:a6:e8:a6:25:
7d:53:f7:97:0e:5e:e9:e2:54:7e:d3:fa:6f:36:bc:c9:54:23:
a2:af:bd:26:14:00:2c:da:a5:b5:4b:ca:af:7d:a1:e7:a6:c4:
f3:3f:da:a8:9e:ab:d2:f0:dc:e8:14:1d:55:36:83:9a:a8:41:
b8:02:8d:31:fa:9e:b4:fa:8d:ed:3f:cc:74:95:f6:1f:09:71:
92:93:c0:a1:ba:7b:e7:fd:b8:24:d6:03:54:73:8b:de:04:b6:
68:42:8a:cf:33:89:a7:3b:4d:80:0f:4c:6f:1c:f4:69:65:ed:
33:9a:bb:cc:7e:64:01:a0:61:5a:07:6f:00:22:e4:a8:b7:b3:
84:f5:92:b3:8c:5c:34:1a:02:1e:80:e3:e3:78:02:a2:d2:09:
55:5c:8e:eb:b6:aa:0c:05:b5:4d:72:22:5b:10:78:50:71:59:
77:17:51:30:fc:62:3a:3f:e8:8d:66:9c:69:3a:ea:77:38:72:
89:4a:82:a5:4c:4a:eb:e1:44:95:91:74:2e:08:95:a5:62:8e:
cc:87:75:3a:b0:02:f6:7b:d8:cf:33:15:86:ba:d8:99:84:59:
97:5d:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:25 2026 by rpki-client