Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: cI/7uPynPxBipeQyowsDvXkW7OlZ0goykJ8kuUZNzgc=
Subject key identifier: 3D:D1:35:C3:14:6D:F0:60:AF:25:BC:61:04:0B:C6:E7:91:F8:7D:80
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019D277292927A3EF3C707EE813FE0863F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 0673
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: fQRkgPrNOCh1F8e0cBEUVFUMMFvJx1s+4+osxYGb6aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:92:92:7a:3e:f3:c7:07:ee:81:3f:e0:86:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=3dd135c3146df060af25bc61040bc6e791f87d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:ed:88:c7:d2:4d:7e:e4:cc:48:cc:5f:b8:
28:41:6c:f0:b2:86:0d:1c:35:1b:e7:cd:eb:ae:0d:
4b:21:71:ea:e0:27:b9:4f:e4:0b:30:ec:c8:5b:65:
85:9f:3d:e3:0e:47:9b:b1:26:4f:1d:cf:cb:8f:ca:
77:fc:74:38:b4:07:d9:9c:c8:97:bc:0a:4c:b9:01:
94:ec:2b:15:0d:60:ca:a1:7a:25:91:7a:16:94:f6:
b0:a1:36:d0:c6:f5:08:9f:33:ac:79:2c:d1:f3:27:
d9:41:e4:99:c9:57:6e:53:90:78:b6:6a:85:5f:10:
58:89:2e:27:7e:a9:90:4a:9e:65:f1:57:82:71:73:
50:ba:91:f1:a7:c4:f0:f9:c1:81:b6:a7:18:ba:12:
ec:6d:fc:14:7a:d4:09:56:c0:21:66:cb:ff:59:88:
e1:97:fe:52:e0:3e:76:a5:16:e1:29:a4:5c:7f:93:
28:a8:8a:82:d4:65:d0:b0:9a:9a:5a:e1:aa:0a:99:
78:d3:1b:d3:44:38:2c:a4:b5:bd:97:06:45:8c:ca:
28:bf:a4:e4:be:54:01:fb:dc:68:b4:50:c2:4d:90:
86:7b:07:8f:19:e5:92:a3:9b:71:74:38:2d:e1:e8:
42:da:0d:cb:77:cd:a7:0d:88:40:4e:03:84:4b:58:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:35:C3:14:6D:F0:60:AF:25:BC:61:04:0B:C6:E7:91:F8:7D:80
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:bb:88:2a:6a:67:6e:23:4c:f0:15:91:60:2e:23:50:cb:
a2:27:77:40:4a:f0:ff:67:4e:f0:64:b6:02:61:da:f3:1c:a6:
73:ae:e5:a3:3b:2b:02:6f:67:7f:35:7c:05:bf:9e:63:ad:7e:
ba:9e:a1:c2:e9:fa:36:cb:21:7d:7a:fa:c6:df:e1:2f:cd:49:
e1:4a:1a:11:47:dd:68:56:ea:b0:ce:c7:d3:98:4e:6b:45:f3:
61:c8:24:4e:8d:23:51:bd:a5:9a:92:be:90:39:e7:13:51:23:
df:e4:b7:98:8f:ff:21:73:aa:27:51:de:fe:db:9e:ec:31:1b:
82:ae:f6:b0:13:03:26:ca:cc:fa:e3:2e:62:6a:c6:36:1c:f8:
8c:4e:6d:ab:96:7e:db:18:2e:df:42:d7:a4:3a:53:8f:6d:8e:
95:70:aa:ea:79:9d:b7:8c:8a:39:fa:40:3d:d1:5b:26:6b:4b:
4c:8d:f7:cb:d9:ce:1f:6b:d0:a3:2f:c8:3b:24:c9:91:0c:46:
b3:c6:4c:a4:74:e0:5d:ef:80:f2:f5:72:15:bf:7a:c4:31:87:
fc:e9:d5:28:72:e9:d1:31:b8:54:20:fe:dc:3c:2b:e1:c1:12:
54:71:f8:ef:db:bc:d3:86:7a:e6:4c:ea:be:ac:85:c2:47:1c:
6e:7a:84:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncpKSej7zxwfugT/ghj8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2E3YjFjMTNhN2Q3YjMxMjMxNDEyYjhmYjY5NDdhMTc0
N2RiOWQwHhcNMjYwMzI2MDAwMTUzWhcNMjYwMzI3MDAwMTUzWjAzMTEwLwYDVQQD
EygzZGQxMzVjMzE0NmRmMDYwYWYyNWJjNjEwNDBiYzZlNzkxZjg3ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8rtiMfSTX7kzEjMX7goQWzwsoYN
HDUb583rrg1LIXHq4Ce5T+QLMOzIW2WFnz3jDkebsSZPHc/Lj8p3/HQ4tAfZnMiX
vApMuQGU7CsVDWDKoXolkXoWlPawoTbQxvUInzOseSzR8yfZQeSZyVduU5B4tmqF
XxBYiS4nfqmQSp5l8VeCcXNQupHxp8Tw+cGBtqcYuhLsbfwUetQJVsAhZsv/WYjh
l/5S4D52pRbhKaRcf5MoqIqC1GXQsJqaWuGqCpl40xvTRDgspLW9lwZFjMoov6Tk
vlQB+9xotFDCTZCGewePGeWSo5txdDgt4ehC2g3Ld82nDYhATgOES1hQ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3RNcMUbfBgryW8YQQLxueR+H2AMB8GA1UdIwQY
MBaAFKPKexwTp9ezEjFBK4+2lHoXR9udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEt
MjE0NTIyMDk5NGNlLzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEtMjE0NTIyMDk5NGNl
LzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUru7iCpq
Z24jTPAVkWAuI1DLoid3QErw/2dO8GS2AmHa8xymc67lozsrAm9nfzV8Bb+eY61+
up6hwun6NsshfXr6xt/hL81J4UoaEUfdaFbqsM7H05hOa0XzYcgkTo0jUb2lmpK+
kDnnE1Ej3+S3mI//IXOqJ1He/tue7DEbgq72sBMDJsrM+uMuYmrGNhz4jE5tq5Z+
2xgu30LXpDpTj22OlXCq6nmdt4yKOfpAPdFbJmtLTI33y9nOH2vQoy/IOyTJkQxG
s8ZMpHTgXe+A8vVyFb96xDGH/OnVKHLp0TG4VCD+3Dwr4cESVHH479u804Z65kzq
vqyFwkccbnqEUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:36 2026 by rpki-client