Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: eaxOrlhFZp6YuBwdOlBt4y5S/R68q06//NM3sWLo1tI=
Subject key identifier: F8:CC:6C:B2:61:39:08:E5:D2:55:DD:D0:B5:34:47:E9:04:2F:0D:97
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019CAD9048B18087AC08B74DB92364E01527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 8F
Signing time: Mon 02 Mar 2026 08:00:39 +0000
Manifest this update: Mon 02 Mar 2026 08:00:39 +0000
Manifest next update: Tue 03 Mar 2026 08:00:39 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: k1Tr3X6V3CKjYJ/WGb7+VpMKeANTo6Q4ocR56M0esUw=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:48:b1:80:87:ac:08:b7:4d:b9:23:64:e0:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Mar 2 08:00:39 2026 GMT
Not After : Mar 3 08:00:39 2026 GMT
Subject: CN=f8cc6cb2613908e5d255ddd0b53447e9042f0d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:e0:17:4a:01:09:e5:f2:03:28:88:d4:59:
99:0e:11:b9:ea:ab:b7:57:77:9f:f5:85:01:e2:c4:
4e:5d:72:df:0c:a3:72:5a:83:25:c1:28:d1:7e:ef:
e2:b9:66:80:f7:c2:ff:43:d3:2f:a2:56:04:bb:05:
e2:6e:45:1a:01:be:e5:13:51:72:87:16:a4:dc:78:
33:84:ba:26:cd:64:be:6a:9e:32:d8:a8:69:45:d2:
8b:9f:46:70:0d:37:6e:65:ab:42:9d:66:10:d0:87:
ec:a4:4f:85:13:8d:09:da:90:bb:d1:c1:ad:fc:fd:
36:5d:13:5f:40:fb:02:b4:c1:a1:48:4e:0f:10:f3:
cd:7c:87:72:7f:b2:5b:8b:ea:59:61:1a:18:b5:1b:
26:b2:cc:90:e1:8b:86:97:c0:fa:6d:e0:43:32:5e:
b4:c0:af:4f:9c:0d:cf:f0:0c:bd:14:36:5b:2a:d1:
1e:66:f1:03:07:28:45:66:c2:0a:fa:17:b1:82:46:
4e:c7:06:35:fc:d2:5e:d8:3d:b9:3c:cf:b6:8b:3e:
9a:bd:61:91:b1:d4:9a:94:4a:8a:ac:83:f1:74:78:
b7:42:cb:0c:82:2e:3f:c1:f5:dd:33:c2:05:62:a0:
c2:72:3f:ce:5c:36:02:22:9f:45:cb:ee:b3:c7:20:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:6C:B2:61:39:08:E5:D2:55:DD:D0:B5:34:47:E9:04:2F:0D:97
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:54:60:38:b4:10:7b:16:e2:b1:85:a1:58:4d:a1:f1:79:
25:6d:1c:64:88:1e:26:af:1a:a9:0d:30:14:6d:eb:e4:5a:d2:
be:5e:af:59:10:a6:85:4c:66:bf:0a:8c:c0:06:ff:e0:8a:3b:
11:c6:ce:26:d3:f8:74:51:63:4c:5d:13:92:41:b2:1f:a9:8f:
18:c1:d9:c3:79:03:fe:39:37:65:3a:97:1e:fe:6f:19:28:93:
46:b8:25:a9:a5:76:43:df:4b:e9:11:4d:8a:d0:ae:9e:90:5b:
bc:0a:89:f9:30:c4:86:88:27:94:9c:65:10:a3:18:29:88:c8:
ce:3c:b3:81:01:2a:0e:4a:22:5a:ca:7e:82:11:10:56:5b:c2:
98:47:e4:ca:b9:3c:30:22:15:1b:37:58:5b:ed:95:be:6a:70:
96:98:28:19:f3:1b:ef:c5:ac:f4:cb:c4:10:91:c2:e5:85:d8:
33:71:c7:a4:9f:26:55:7b:82:fe:33:51:a0:25:14:b6:e0:69:
04:f3:44:dd:c3:f4:38:89:48:c4:87:23:d8:c4:b0:8a:9d:b7:
0f:f3:f2:37:66:f3:41:3d:b9:cc:89:d6:47:22:df:fb:99:17:
50:df:9f:ed:e5:9c:e8:c1:e8:66:06:32:a2:9f:29:28:b8:ba:
45:a7:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:17 2026 by rpki-client