Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: 9oBd3f2irUjTx+y1L0TuQuw5ScMyuxJPrJrQy9QYCCk=
Subject key identifier: AF:4E:89:EE:78:20:D0:9A:DF:AC:2E:D8:96:F6:31:92:87:A7:16:D1
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A0DD98474D512CAF1D2146D07792229E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 085F
Signing time: Sat 26 Sep 2026 12:02:19 +0000
Manifest this update: Sat 26 Sep 2026 12:02:19 +0000
Manifest next update: Sun 27 Sep 2026 12:02:19 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: M48Css886dR6eIVdM/N0e2M7pgOSWy6lbIoYdO6AUa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:47:4d:51:2c:af:1d:21:46:d0:77:92:22:9e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Sep 26 12:02:19 2026 GMT
Not After : Sep 27 12:02:19 2026 GMT
Subject: CN=af4e89ee7820d09adfac2ed896f6319287a716d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:a7:3c:a5:38:e7:9f:d9:5f:54:16:4f:6b:
eb:bf:dc:fa:28:2f:d8:ac:43:51:fe:c0:ab:78:2b:
e3:8b:5e:57:6b:60:25:32:ad:e6:58:c2:e9:a8:8d:
5a:dd:22:99:9d:c5:61:55:ed:44:61:fe:dc:08:53:
08:55:1d:59:ff:19:cd:a6:cc:5b:67:39:55:17:9b:
f1:09:68:55:f4:e5:82:63:80:dc:e8:d0:58:f8:36:
b6:81:00:31:8e:a8:27:a0:38:e3:97:39:10:ba:ba:
2e:9c:51:2d:a8:7a:81:2c:b5:94:e0:27:37:c9:5d:
e3:f9:fd:88:e0:95:22:35:27:a3:98:8c:32:2e:97:
b8:ff:fb:3a:a7:83:0d:89:e6:20:15:d7:89:c6:8c:
fd:fa:1c:fc:17:2b:94:a9:47:34:a3:85:e8:2b:cc:
44:0d:ab:61:41:68:76:79:b9:f1:18:d2:dd:09:cc:
81:02:aa:1e:7c:63:55:77:ec:19:15:51:24:6f:04:
fe:bd:bc:cd:e7:e1:6e:22:c1:8b:79:43:3d:6d:ae:
c3:84:aa:19:1c:f0:4b:e7:2f:35:b0:fc:97:f8:3c:
8f:55:1f:b8:35:3c:2f:0b:c2:a1:da:68:1f:92:e0:
f9:8a:12:ca:33:2a:76:bb:da:1e:e1:db:fe:8c:84:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4E:89:EE:78:20:D0:9A:DF:AC:2E:D8:96:F6:31:92:87:A7:16:D1
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bd:e8:cb:7d:0e:40:9a:a7:a4:03:31:fa:95:97:c0:df:d7:
9b:e2:c1:20:1b:92:5c:bf:27:ca:d9:97:69:6b:61:41:a7:e5:
99:83:16:01:6a:33:f4:9c:d3:08:10:95:c0:7a:22:cf:93:1e:
fa:69:ef:b9:b6:b2:2c:bb:ef:6f:1a:a1:03:45:91:2c:a0:46:
d6:c7:b0:9c:b0:73:59:11:47:0e:f8:4a:1c:b4:b8:b3:57:32:
c6:fb:9a:f2:4c:4b:ab:fe:50:05:86:28:ee:d5:8c:28:21:9d:
ca:27:e0:f3:0d:7a:e4:be:f9:21:33:ce:4b:00:46:f3:a5:40:
43:e9:f4:65:75:a4:fb:87:6a:ba:bc:b4:cc:1b:92:f1:43:18:
b8:ae:4a:2e:37:6d:62:98:73:02:d4:ba:f3:20:82:67:bf:f8:
0a:89:fd:36:d2:42:fc:9c:f0:4c:f9:0a:07:28:5a:2b:40:b8:
cd:1a:55:f5:57:ee:54:45:76:46:5e:19:fd:44:6a:ce:5e:ea:
e0:8c:28:e8:e8:20:7b:78:6e:15:4a:68:f9:38:0f:65:b2:d8:
68:5c:0b:05:ed:f5:92:9a:7c:f7:43:eb:d8:44:24:b7:d6:1b:
77:e0:b3:2a:1c:c9:ff:b9:ff:4d:76:46:f5:39:be:98:fc:9a:
40:3e:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:44:41 2026 by rpki-client