Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: EDVHzCydnLYeASEp87udSg2P3Bs1AppIMzGBXlYmAyc=
Subject key identifier: 64:AD:32:EA:9D:84:52:7C:92:23:33:69:6B:A6:AB:07:20:5C:9E:64
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019F91A41AFEA124A24FFC812F4E454D5F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 0489
Signing time: Fri 24 Jul 2026 01:01:18 +0000
Manifest this update: Fri 24 Jul 2026 01:01:18 +0000
Manifest next update: Sat 25 Jul 2026 01:01:18 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: PnKmoGTPmS56Sn9KWmtj9LKclAha5ch3Ngb4ReogRpw=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1a:fe:a1:24:a2:4f:fc:81:2f:4e:45:4d:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jul 24 01:01:18 2026 GMT
Not After : Jul 25 01:01:18 2026 GMT
Subject: CN=64ad32ea9d84527c922333696ba6ab07205c9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:d3:55:0a:99:7a:18:2c:ba:b7:8d:06:50:
07:04:bc:89:c9:3c:a5:61:9f:e7:5c:b7:90:3d:ef:
9f:17:58:40:9d:5d:0f:ed:c6:7b:a4:96:a4:c9:d5:
3b:b4:80:a5:c7:fb:1a:3f:eb:38:95:90:db:3c:e0:
36:98:68:e5:26:b0:57:e7:99:cb:d3:b5:7a:49:9b:
59:99:a5:42:c8:8a:93:e8:e1:1c:bc:63:b6:f8:47:
d4:62:cc:1d:73:0f:64:70:ad:78:07:8e:7a:50:c8:
82:47:49:73:c2:7d:2a:4d:40:4a:d9:a0:15:8e:1c:
a5:3a:42:94:2e:c9:c0:ff:da:56:52:0e:fe:df:18:
c8:8b:80:94:a0:e2:79:50:b6:43:b1:2a:07:ed:87:
a4:32:b9:64:65:61:d7:09:8f:f1:4e:3a:ce:91:d7:
9c:e3:39:f0:40:e4:21:14:db:f0:b1:c0:12:da:6f:
c6:f8:91:0d:f4:19:85:36:e3:b6:9f:ab:d7:ba:03:
1c:8c:62:56:c8:8d:71:83:10:45:0d:8d:47:e3:f6:
dd:de:cd:e1:84:8a:07:54:ba:ce:51:bd:fb:c1:b8:
68:0e:03:4e:59:d5:40:62:58:41:2e:9c:9a:86:81:
8c:7e:15:95:4c:80:39:2d:f4:da:2c:45:77:e0:0d:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:32:EA:9D:84:52:7C:92:23:33:69:6B:A6:AB:07:20:5C:9E:64
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:cb:c2:9b:34:29:c4:6b:3c:3f:e4:50:25:e4:a6:ba:af:
09:a5:55:24:aa:b7:97:92:47:0e:13:98:c1:12:b3:b2:7a:a5:
c7:50:29:4c:59:06:bf:b3:11:d2:9d:01:4e:6b:87:40:05:57:
24:2d:7a:08:7f:cd:ab:76:19:88:dd:97:2b:56:a2:9f:c1:f5:
3f:07:4b:24:4e:2f:8d:4e:62:eb:de:9d:27:04:b0:33:e4:4c:
5f:a3:c6:e3:c1:8a:40:8e:a9:a6:3b:23:dd:40:43:8d:38:67:
40:9a:8c:d9:f4:d8:1b:f0:cf:4d:03:0e:f3:b9:7a:7d:58:df:
aa:1b:f9:97:da:d3:56:86:8e:db:39:64:ce:f0:62:ac:b4:72:
d7:2d:1b:be:4b:f2:5e:9a:8e:a4:38:ad:ea:43:76:cb:e0:94:
cb:29:f1:98:aa:e8:3c:f1:04:80:f7:44:a6:01:06:25:67:c3:
04:3e:21:1b:91:75:a0:96:29:9a:17:1a:07:4a:41:c0:f4:2f:
49:33:0b:11:b3:8a:1d:49:d9:90:b8:3c:68:76:82:7a:3e:59:
49:96:77:42:0b:5f:8c:92:20:c1:01:c8:16:04:f0:a5:57:60:
57:e6:b1:8b:55:62:1e:07:5d:b4:c3:1d:72:a6:95:d2:c9:16:
75:fb:74:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpBr+oSSiT/yBL05FTV+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3
MWU4NzcwHhcNMjYwNzI0MDEwMTE4WhcNMjYwNzI1MDEwMTE4WjAzMTEwLwYDVQQD
Eyg2NGFkMzJlYTlkODQ1MjdjOTIyMzMzNjk2YmE2YWIwNzIwNWM5ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eHTVQqZehgsureNBlAHBLyJyTyl
YZ/nXLeQPe+fF1hAnV0P7cZ7pJakydU7tIClx/saP+s4lZDbPOA2mGjlJrBX55nL
07V6SZtZmaVCyIqT6OEcvGO2+EfUYswdcw9kcK14B456UMiCR0lzwn0qTUBK2aAV
jhylOkKULsnA/9pWUg7+3xjIi4CUoOJ5ULZDsSoH7YekMrlkZWHXCY/xTjrOkdec
4znwQOQhFNvwscAS2m/G+JEN9BmFNuO2n6vXugMcjGJWyI1xgxBFDY1H4/bd3s3h
hIoHVLrOUb37wbhoDgNOWdVAYlhBLpyahoGMfhWVTIA5LfTaLEV34A0zqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGStMuqdhFJ8kiMzaWumqwcgXJ5kMB8GA1UdIwQY
MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt
NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3
LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv7Lwps0
KcRrPD/kUCXkprqvCaVVJKq3l5JHDhOYwRKzsnqlx1ApTFkGv7MR0p0BTmuHQAVX
JC16CH/Nq3YZiN2XK1ain8H1PwdLJE4vjU5i696dJwSwM+RMX6PG48GKQI6ppjsj
3UBDjThnQJqM2fTYG/DPTQMO87l6fVjfqhv5l9rTVoaO2zlkzvBirLRy1y0bvkvy
XpqOpDit6kN2y+CUyynxmKroPPEEgPdEpgEGJWfDBD4hG5F1oJYpmhcaB0pBwPQv
STMLEbOKHUnZkLg8aHaCej5ZSZZ3QgtfjJIgwQHIFgTwpVdgV+axi1ViHgddtMMd
cqaV0skWdft0hw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:02 2026 by rpki-client