Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: g/qV/kPA1Qp4FzpfUv4LaIU8cnay6G/WGR6Ymy+wmgo=
Subject key identifier: A8:F7:F7:34:3A:67:BA:77:AE:C5:DD:86:30:CE:60:BE:0A:69:AE:19
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019D299745A02CCB18D7BB7888073858A8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 034A
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: eOQGKFBUjUPe/99UP+JAR7gko2Aqt2Si3Rf6lx0zH7c=)
2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:45:a0:2c:cb:18:d7:bb:78:88:07:38:58:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=a8f7f7343a67ba77aec5dd8630ce60be0a69ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:27:82:51:e7:26:ff:f7:0e:bc:17:c0:5d:
cc:e8:32:af:5e:b9:9b:2b:97:72:06:ce:28:82:81:
4d:6d:50:68:63:dc:c5:ce:d8:b1:08:c6:e7:67:06:
92:50:74:b9:60:b4:dc:ef:3b:a1:5b:24:c5:90:dd:
97:c0:b5:81:64:63:08:a6:74:2a:bd:61:3a:d8:a6:
e0:b3:36:46:d9:5f:4d:a5:21:b5:43:26:e8:37:99:
13:8b:c1:e4:2f:bf:01:e0:d0:2b:25:cc:44:e7:75:
eb:bd:f3:8d:10:6a:f2:6b:cc:8f:55:8e:70:8d:7d:
8f:e2:32:67:16:dd:81:b8:36:63:d2:20:b3:5c:f4:
ac:42:57:81:b3:50:44:6e:66:13:4f:87:b4:f6:d4:
0c:d4:f4:e9:d6:7f:5f:61:f5:ae:d6:dc:23:3b:2a:
b0:b1:c4:40:9c:03:14:ec:00:22:f7:f6:79:2e:b8:
fc:9f:76:b7:30:80:77:a8:09:24:f2:b8:49:91:51:
a8:0b:f1:b5:c2:a2:e6:1f:97:c4:e2:14:ff:d5:d1:
18:22:8b:0b:66:dc:00:f3:e6:a4:b3:74:2b:89:48:
fe:a8:db:c0:89:cd:54:ce:89:9d:6c:18:eb:0c:95:
65:be:87:26:86:63:42:02:88:1f:2b:53:e2:2b:6b:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:F7:34:3A:67:BA:77:AE:C5:DD:86:30:CE:60:BE:0A:69:AE:19
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:71:bf:92:02:6b:3a:74:b9:7a:60:29:c9:c3:93:92:10:cb:
2b:67:24:9b:7e:f9:c2:98:77:37:76:9a:21:87:bb:33:aa:24:
d3:51:66:2c:79:8a:3a:0e:29:30:7d:15:ec:a8:6d:28:5d:3e:
96:ac:d0:1c:ae:c1:a9:e9:36:2f:40:f3:db:97:3b:57:98:d0:
10:a8:55:9d:bc:e0:04:c0:e3:d9:94:ad:3c:84:f4:09:5c:50:
c3:24:4b:7f:77:db:5a:dc:7b:55:d3:5f:a8:64:a5:1b:29:25:
cd:ad:de:6e:4b:cc:0d:95:ac:5a:d4:67:d8:27:55:48:a8:2d:
6e:c8:19:7d:79:f7:c3:45:42:e1:60:b6:e6:13:be:b8:88:08:
61:c9:07:8f:58:6a:13:75:0b:d3:4b:37:c8:49:24:75:8f:08:
7f:2b:50:cf:ba:ed:f4:1a:df:91:fb:cf:88:e7:6a:84:d1:f6:
bf:9d:0d:d5:3a:36:73:a9:4d:dc:17:62:ae:fb:5a:ff:92:3a:
ec:ef:94:dc:59:2b:bf:3f:c6:8b:82:22:74:b1:7c:f5:3d:c2:
95:9c:8c:82:9f:bb:a8:51:09:35:30:e9:16:46:a5:a8:cf:f2:
af:55:1f:67:82:e1:1a:06:06:d8:1a:58:a2:1b:39:42:93:b2:
2f:33:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:06 2026 by rpki-client