Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: Sli2dAsExpz/Yuhya6oA3he5huffnBn9EpggwJo7mWs=
Subject key identifier: BD:F8:DC:5F:46:1F:30:18:24:46:6D:D8:C7:39:5B:2F:BB:D0:A7:12
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019E1EA384970981FF5255774AAEA2542779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 06F3
Signing time: Wed 13 May 2026 00:01:33 +0000
Manifest this update: Wed 13 May 2026 00:01:33 +0000
Manifest next update: Thu 14 May 2026 00:01:33 +0000
Files and hashes: 1: HlrwIab2M9srn4RxDvYJgsLRgu0.roa (hash: 7RDUg5q6/CoL8hnKalD+rZmIPoU5JzkF0lqwqiGYim4=)
2: gAEobSYXeBTkpjhr1NGGBygqZvA.roa (hash: UAsheFQAdNFM95KSSftG0uZENkjtk9zrTcPB/F/4eEU=)
3: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: jn2yoI0OZ//R9M3wvcOMTHKxG4r0dxitH/GmqlbFmBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:84:97:09:81:ff:52:55:77:4a:ae:a2:54:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: May 13 00:01:33 2026 GMT
Not After : May 14 00:01:33 2026 GMT
Subject: CN=bdf8dc5f461f301824466dd8c7395b2fbbd0a712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:5c:4f:ee:c1:63:1d:91:a8:09:d1:76:6f:
cd:37:2a:73:64:f9:f9:1a:a6:88:41:f4:71:88:ad:
0c:24:9c:82:cc:d6:b9:fe:85:01:e1:ed:4b:f7:22:
65:a0:0f:2f:17:64:7e:ed:ab:91:79:46:3a:5f:f7:
7c:e3:62:22:81:68:e2:da:c0:98:0b:e6:6f:36:2b:
3d:03:92:6c:ba:7c:33:91:e1:41:f9:51:1e:17:1f:
e3:8b:85:a2:51:ed:d2:08:b5:0e:57:c9:3d:1c:28:
f2:a9:13:60:9c:91:6f:28:69:f9:52:6b:b5:bd:ee:
cb:1f:73:49:a0:cd:ca:20:b7:d8:92:ff:ae:d3:97:
51:b6:1e:a3:f8:a9:50:87:51:a1:01:0a:b7:7b:c4:
9c:2c:de:c6:ab:1e:51:36:a7:d0:19:ea:d9:72:4b:
18:65:2f:02:63:b4:ba:f6:78:e4:85:8c:17:28:92:
b1:2e:ee:bc:9e:84:12:04:28:1f:01:f6:61:33:de:
b4:7f:ad:ef:c2:42:ed:a8:52:b3:72:23:4b:fe:f7:
82:f2:ae:b9:43:ff:89:01:c0:7a:c4:6a:1d:9e:e2:
2e:b1:32:c5:aa:95:f0:53:7a:c5:17:7d:f5:0d:42:
37:e3:c2:63:20:86:06:c8:f2:f9:b9:af:19:a2:02:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:DC:5F:46:1F:30:18:24:46:6D:D8:C7:39:5B:2F:BB:D0:A7:12
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5a:4b:93:23:03:99:d5:4e:d1:47:27:94:6b:39:52:49:ad:
d5:72:f2:05:54:81:9b:29:4e:a7:1b:73:f8:d7:4a:4e:4e:74:
8c:c5:a9:d2:b2:e6:da:b2:e6:ff:f9:4c:ce:5c:5c:0c:2e:0f:
d5:b6:d6:01:01:0d:76:b6:e8:34:e9:54:1c:af:08:91:b0:c1:
e4:02:85:9b:a4:f1:ba:c9:2d:26:2b:4a:8a:bf:01:55:0f:9b:
2b:b4:81:db:0b:92:e4:d7:11:94:16:38:d3:1e:f2:5a:a9:ee:
13:51:03:7a:14:c8:6a:ff:d5:85:d2:9e:fe:d7:ee:7a:a9:1e:
54:6a:3f:f0:f9:7c:34:84:79:af:61:54:c8:42:c0:8f:2c:c8:
31:ea:04:42:cb:b5:a3:f5:83:be:9f:ac:eb:8e:10:b8:5c:30:
97:ed:5a:53:ad:ff:99:2d:e0:5c:cd:d2:65:a4:4f:f2:f9:42:
60:d7:44:a8:44:bf:c2:30:f7:98:aa:e3:be:07:e7:d6:a0:6c:
9a:0a:0f:67:5b:b7:4d:a8:1c:e3:6f:19:e0:f8:d8:92:b8:76:
b0:9d:42:a2:6c:cd:b1:30:46:ab:ec:9c:41:50:62:3f:c1:d1:
18:34:3d:22:ac:35:13:f1:01:bb:4b:52:25:9b:8a:02:ed:85:
69:0c:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:39 2026 by rpki-client