Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: /qUq7JRjQdBCRE4cJ80HsQGkJvBL0aifmFhU7oUDyGs=
Subject key identifier: FF:BB:03:31:47:B0:61:6D:05:E4:AB:9D:33:38:FA:30:A0:29:5A:C6
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019F916D64167CDA8895D76D38BB05006DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 07B3
Signing time: Fri 24 Jul 2026 00:01:33 +0000
Manifest this update: Fri 24 Jul 2026 00:01:33 +0000
Manifest next update: Sat 25 Jul 2026 00:01:33 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: 8PY5aR3PVOJ0yRst1snSr9XaTDqAzUeRsRAdgqxjVPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:64:16:7c:da:88:95:d7:6d:38:bb:05:00:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jul 24 00:01:33 2026 GMT
Not After : Jul 25 00:01:33 2026 GMT
Subject: CN=ffbb033147b0616d05e4ab9d3338fa30a0295ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:87:ef:2e:17:98:30:06:28:4f:39:bf:c7:
d6:4e:29:1b:73:01:c2:42:4a:2f:6b:a5:fe:f2:da:
6e:3c:bb:a3:9e:73:6c:ca:75:c7:2e:e1:a2:40:12:
b6:78:ed:32:76:93:de:f0:1d:03:2c:ef:1d:d5:b6:
b6:d0:12:bf:e5:ee:de:fc:8d:22:63:f4:29:f4:18:
a8:d2:90:b2:07:a7:0f:e8:ee:ce:c3:9e:d1:6a:59:
8a:7e:d1:92:56:3b:12:08:6d:9c:44:97:11:0b:45:
1d:7e:80:02:a7:de:9a:4c:11:3e:4f:68:01:6b:37:
9f:83:02:2b:98:90:08:0a:35:0a:1c:86:b1:4c:85:
60:37:56:fb:d7:94:c3:83:cf:87:56:ec:9c:b7:e2:
39:2a:50:62:b7:6c:89:ad:94:96:da:b8:3c:bc:8b:
07:1c:56:3e:ce:ca:5d:89:e8:e5:1e:a6:48:36:6e:
fd:83:bc:cf:b1:d3:48:cb:99:e3:69:77:fe:40:10:
51:12:1b:2c:bd:09:b1:a9:1d:f7:28:00:1b:e0:a9:
05:66:2b:0a:17:21:92:fa:d1:9c:dc:ee:6b:01:94:
f4:4a:4a:52:9b:e5:64:1b:5b:d9:dd:93:7a:58:a4:
8c:e4:33:c7:8c:8c:01:3e:46:0e:c3:78:3e:1b:49:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:03:31:47:B0:61:6D:05:E4:AB:9D:33:38:FA:30:A0:29:5A:C6
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:7c:31:0a:76:13:12:e1:b2:8a:c8:96:fe:bf:d6:20:f8:
71:36:db:6d:38:59:18:bb:a3:e2:34:3d:31:ca:64:e5:a1:dc:
dc:3f:bb:2f:d4:a1:91:50:7f:f1:a5:3d:f7:fa:47:8c:f8:39:
45:a6:58:26:df:b0:64:fb:a7:89:1c:6c:35:c6:31:bd:17:21:
15:b4:8a:b1:57:6d:03:7c:39:63:a9:02:84:3e:1d:4b:0e:eb:
9e:5f:84:bc:de:4a:ca:7d:3a:09:af:46:cb:78:56:40:ee:44:
55:26:7d:fe:c7:d3:cc:71:22:1b:00:c3:4a:21:1c:2f:d8:53:
37:ec:b4:bd:3d:9d:13:45:8c:6b:f0:51:25:98:14:ec:f2:4a:
c9:64:be:f6:4c:19:aa:c2:a9:d4:f5:40:6e:65:c2:de:9e:bd:
ee:77:22:a9:3d:a7:5a:07:87:cd:f6:7a:e6:11:3d:4a:a4:a4:
31:4f:a4:78:e9:9a:1b:7c:09:77:90:8b:24:5e:e1:1a:9f:20:
a9:85:42:8b:4c:92:4f:a4:2a:e8:a7:0e:d5:69:36:f0:b9:97:
17:ae:0b:05:e5:50:3b:67:09:a4:56:b8:df:8a:a8:59:b7:42:
c4:86:78:b2:06:16:d1:23:f8:f0:66:20:de:17:8f:fb:3d:0e:
01:15:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:39 2026 by rpki-client