Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: W2/MtHizJ7C4zHatUIvLCp0E+KoYQLbtVDYGQQF52mQ=
Subject key identifier: 71:CB:96:F8:F1:E0:5F:FC:2F:BD:6D:37:1B:A5:61:2C:47:6D:20:15
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019E1EDA123440F4AD379C0F0E7259B61AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 03C9
Signing time: Wed 13 May 2026 01:01:08 +0000
Manifest this update: Wed 13 May 2026 01:01:08 +0000
Manifest next update: Thu 14 May 2026 01:01:08 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: vpaH3VrRBk/tqqMQ8zAX4IjpHS+RiWwt1TDX+y33Ndw=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:12:34:40:f4:ad:37:9c:0f:0e:72:59:b6:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: May 13 01:01:08 2026 GMT
Not After : May 14 01:01:08 2026 GMT
Subject: CN=71cb96f8f1e05ffc2fbd6d371ba5612c476d2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:57:64:8c:92:22:17:cb:4e:b5:c4:33:d8:
10:20:70:aa:4d:32:ce:c4:e0:8a:8b:17:66:f7:dd:
d3:68:0e:c6:83:d7:24:ad:1c:21:ef:c5:c1:31:e2:
51:be:05:b8:a5:8b:24:33:39:5b:b2:2f:dd:88:1e:
74:5d:b1:8e:82:60:dd:16:15:d3:c6:90:a1:24:b1:
f2:af:2e:7a:3e:b7:99:1d:dc:2d:26:fe:ca:5a:a8:
1b:14:bc:50:75:26:c0:f4:d7:b5:c5:86:8f:d9:be:
2a:c8:a9:7d:81:b7:37:02:c2:36:eb:9d:f2:dd:e4:
be:3a:ab:11:81:e1:e1:ee:83:36:56:27:d3:52:7a:
42:4d:a7:9b:91:8d:29:dd:db:73:45:19:79:ec:65:
c7:4e:e9:3a:be:9e:6c:2a:fb:45:15:4a:12:dd:57:
d8:d4:bb:bd:dc:cc:70:99:f2:6b:ed:df:5e:17:2b:
5b:d1:c7:c2:96:ee:1c:a6:ec:e6:17:5f:d0:86:c6:
ad:21:32:5e:c7:d8:5b:f0:b1:aa:4c:54:89:43:b1:
f3:7a:a8:2f:a0:ac:a9:50:82:38:a5:53:f9:8a:cc:
d7:26:e3:e0:58:a5:38:94:16:04:17:20:1c:38:bb:
fb:02:4e:3a:39:33:76:5f:f8:c9:1a:f1:55:d2:d4:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:96:F8:F1:E0:5F:FC:2F:BD:6D:37:1B:A5:61:2C:47:6D:20:15
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:a9:05:c4:8a:ba:6f:b9:03:14:9c:96:9c:4a:2f:8e:3e:
02:45:fb:dc:c5:65:c1:1e:28:65:82:1c:ac:f6:25:a4:f6:96:
82:1c:b7:15:ae:81:67:0a:9f:25:c1:5f:48:2c:bc:93:a5:83:
84:2f:cd:52:98:44:04:4b:ad:3f:0e:98:e1:b3:fd:01:d9:cf:
d8:a7:1e:38:74:d4:76:de:6d:43:6a:f0:ed:22:51:dc:42:a8:
61:b5:46:30:0c:19:3a:6b:11:67:25:c1:25:44:5a:09:cf:88:
9b:65:6a:8a:ea:a9:a3:8a:97:49:19:f1:8f:ae:b3:94:00:8e:
ab:44:39:9e:8e:e6:7d:3d:8d:0b:20:de:fe:16:a4:ab:34:00:
b0:e2:02:a6:87:f1:51:43:f9:1a:ed:2f:a5:12:ad:d4:82:0a:
19:14:74:9b:a6:30:eb:3f:45:57:1e:ee:3a:47:76:cd:35:d3:
fb:d7:5b:62:db:ff:17:fd:21:99:ab:37:6e:95:19:6c:f3:8f:
06:0c:8d:17:fa:ae:1f:48:51:55:b0:a6:65:8e:4f:c3:22:b9:
6c:ab:3e:64:e5:8a:bb:ae:97:6a:8e:d0:4c:af:cb:bf:2b:f3:
5d:04:c1:b3:e1:ff:ef:ad:ef:f3:1b:f9:ff:b3:9a:48:1e:9b:
db:7f:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:45 2026 by rpki-client