Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: u9IYxY4ap3TFIRSA0GfSWJ/IiOEh+daEhVXUtXyrBrc=
Subject key identifier: F6:BB:85:E6:0D:FB:66:0E:65:8C:59:FC:5A:CB:7C:55:A7:48:50:B3
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A1065C5E88F7C7DD864CE9E4C2BBAF6DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 10:01:19 +0000
Manifest this update: Sun 04 Oct 2026 10:01:19 +0000
Manifest next update: Mon 05 Oct 2026 10:01:19 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: xz+OihdB60ltDw+W59dphjfJCupQBIbNFrvWdoi2hwY=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:5e:88:f7:c7:dd:86:4c:e9:e4:c2:bb:af:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Oct 4 10:01:19 2026 GMT
Not After : Oct 5 10:01:19 2026 GMT
Subject: CN=f6bb85e60dfb660e658c59fc5acb7c55a74850b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:e5:74:d6:9d:3f:a8:39:28:15:22:9d:17:
21:cf:62:dd:05:e8:85:01:5e:ee:c4:a2:ec:49:0b:
16:96:d0:05:1d:c6:e0:73:b8:7f:be:a4:2a:e8:e3:
20:db:53:9f:69:c5:bc:b5:35:cf:f2:3e:0d:6c:08:
1d:64:82:b0:00:40:95:12:56:03:00:00:1f:1a:3b:
92:62:9b:d9:02:fd:45:8c:fc:d3:ed:5e:8f:99:a3:
5c:58:3e:8b:62:31:7e:4f:b9:a1:a1:dc:63:8c:98:
ff:82:7a:41:ab:a8:14:75:69:81:4a:4e:99:c6:02:
41:f4:d8:af:07:a7:19:7a:8f:c3:a4:82:72:3e:2f:
9e:57:54:8a:de:00:e2:12:55:37:a6:33:8e:b3:92:
65:71:d2:62:5a:61:95:38:34:f4:0a:b8:d0:dc:af:
6a:16:1a:9b:29:4f:25:b4:2a:50:b7:4b:6a:c4:7f:
91:52:a8:51:53:8b:90:62:8b:38:fa:c7:01:c3:d6:
3c:05:a1:0c:c7:80:bd:5e:a8:82:ec:d4:a9:6e:eb:
2c:22:f3:04:a7:fa:a0:99:06:93:9b:af:17:c6:c9:
80:b0:1e:57:52:06:db:f8:4e:50:90:27:68:91:b0:
96:69:9b:e6:e0:d6:2f:15:75:38:d0:1c:3b:9c:b9:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:85:E6:0D:FB:66:0E:65:8C:59:FC:5A:CB:7C:55:A7:48:50:B3
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3a:b5:7e:21:25:2b:30:53:69:0b:98:29:5d:58:6d:3f:e4:
f6:67:ee:af:8b:ea:52:9d:9e:37:9f:38:f8:cd:c0:ce:37:82:
21:c1:a8:87:af:3a:d1:01:84:81:99:31:a4:48:f1:b3:ff:5b:
d1:44:a9:10:b6:3f:dc:4e:02:22:b5:57:52:a3:76:38:e8:a0:
70:16:e8:94:a0:91:e8:41:dd:ed:2c:b6:47:1f:bf:75:11:24:
56:3c:96:a2:ed:54:33:02:94:03:6b:f7:f5:6e:a5:ec:c3:24:
15:01:0b:ff:9b:fd:53:de:b4:0c:33:37:94:27:85:ee:df:c3:
fc:29:12:0d:39:7e:0a:e5:a5:f4:12:33:99:96:f8:0e:a2:2b:
88:17:a1:5c:ff:11:bb:d2:ed:1b:60:48:a7:ee:85:dc:1f:e9:
7f:07:0d:ea:64:71:72:1f:ba:5f:ca:d7:19:40:7c:61:c5:14:
dc:1a:ce:ae:05:32:57:8e:21:12:d9:a2:48:25:7c:d6:50:8b:
e5:8e:eb:e5:32:eb:8a:28:fc:0e:39:c3:16:fb:53:cc:8c:7f:
d9:ae:0c:9d:be:16:85:6b:af:a4:91:7b:ff:77:c2:c1:8f:b1:
b6:b3:c6:71:a4:35:53:8b:12:48:92:c4:88:01:00:a9:f3:72:
14:29:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:41:05 2026 by rpki-client