Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: bgwMKstfN8Egd45lA4U3roup3KXFD1VDYuc8T6bPRUE=
Subject key identifier: 00:18:E5:E4:92:1A:7E:00:92:E3:17:91:79:C2:5F:CB:89:FD:5E:6C
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019D97E16F89362824083E4AC5E634422F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0BB2
Signing time: Thu 16 Apr 2026 20:00:26 +0000
Manifest this update: Thu 16 Apr 2026 20:00:26 +0000
Manifest next update: Fri 17 Apr 2026 20:00:26 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: C+dzodZ/dlmK5MadLzgF0h1K6pjw4nQT2WddLWcNT9Y=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:6f:89:36:28:24:08:3e:4a:c5:e6:34:42:2f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Apr 16 20:00:26 2026 GMT
Not After : Apr 17 20:00:26 2026 GMT
Subject: CN=0018e5e4921a7e0092e3179179c25fcb89fd5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:f3:30:3e:7e:15:92:d0:0b:67:63:c3:b3:
45:ed:7e:e3:b0:f8:4b:d4:c9:0c:b2:61:d2:35:ce:
79:89:a9:17:00:9a:c2:9d:9b:e3:98:f7:05:a5:ab:
f0:c4:d8:44:e9:53:5b:30:b4:1c:95:ac:97:6b:3a:
f8:4c:96:d5:b4:7b:cf:b4:23:49:f0:9c:7c:b1:34:
de:6f:a2:89:32:19:08:33:2b:86:51:0e:81:e4:2e:
cd:e6:2f:77:bf:d2:22:bc:37:f1:14:ff:fe:fb:25:
74:0c:79:44:9d:5d:6c:fd:0c:fe:88:00:da:84:4b:
3e:c4:15:d0:8c:91:27:df:19:e3:48:2b:18:6f:80:
15:5b:ed:66:28:26:34:a6:65:2c:9b:91:a0:cc:13:
da:7a:b7:87:d4:63:86:e9:f4:e4:45:9d:70:36:e6:
75:70:36:ac:f9:2f:58:5b:1a:88:36:86:4e:c1:4b:
53:18:2d:49:6d:09:32:fe:26:e7:aa:85:94:44:a0:
d1:68:01:6b:16:ce:23:d0:9c:ac:bc:c2:18:19:26:
cc:81:aa:07:e9:20:65:99:c2:c5:ee:31:69:f2:3d:
4b:dd:68:07:69:a0:14:1b:b5:d3:79:39:1b:27:1e:
d3:11:78:7a:b9:d1:4c:46:7b:c2:41:2c:16:75:9e:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:E5:E4:92:1A:7E:00:92:E3:17:91:79:C2:5F:CB:89:FD:5E:6C
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:ea:2e:0d:07:c7:bf:04:1a:67:d2:ed:73:82:59:f1:9c:
95:93:65:0d:1d:c9:b4:91:a0:0c:ed:70:84:a3:73:68:d5:04:
6d:d3:91:2a:b8:6b:93:23:52:04:2f:87:02:ff:1b:12:90:15:
2b:f1:eb:31:51:1c:9d:4f:ca:84:dc:a1:e1:f5:13:40:cc:2f:
a6:a0:e9:c5:f8:f4:0d:c8:cc:5d:c7:9a:e7:c0:01:3c:a5:04:
a8:44:61:3d:00:a2:b6:02:25:8b:7d:aa:c0:5b:30:b7:96:01:
7f:a6:e7:bd:0c:83:4d:30:95:a4:cd:0f:0e:90:bb:df:7e:59:
dc:3e:01:d5:d8:42:00:ab:18:e1:f5:46:3e:ea:54:14:16:01:
2d:c5:b9:5e:9d:68:34:57:ac:cd:b1:da:e0:98:23:de:78:af:
e9:cf:fd:40:7e:3d:3a:d4:18:08:a0:73:c2:b2:e0:38:eb:b4:
22:98:a3:94:17:01:a7:e9:80:61:11:a5:c7:75:53:26:6f:e7:
76:21:c2:0c:1f:4c:8c:6e:3f:cb:db:d3:1c:80:5d:44:e1:83:
34:56:3f:14:d3:e7:8c:e4:1f:c2:27:ad:b8:5a:77:a3:75:4c:
bb:ed:95:be:79:d7:15:86:aa:1f:c7:67:03:5a:f0:0d:b2:57:
02:d5:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:02 2026 by rpki-client