Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: cUkNjZZz1ZvXXF1+mKVuw3V14cXO4/WOapnOn/+46nc=
Subject key identifier: E6:5C:FF:F4:C9:21:0C:40:A8:C8:6E:DC:1C:16:9A:6D:43:02:82:80
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 01A0D4940820425E2D7045B5D952CF13D0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 0648
Signing time: Thu 24 Sep 2026 18:01:06 +0000
Manifest this update: Thu 24 Sep 2026 18:01:06 +0000
Manifest next update: Fri 25 Sep 2026 18:01:06 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: xmSze8c/whSU1Vg9qROeMsjRPtOQPwfAe+TiKv+39YI=)
2: tOXIM_UKk48wJZ7VMtkwvlrqHuM.roa (hash: YwRhYkrIDO2b6TPx5Ws8xbL48qbasailmg+aD1VygMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:08:20:42:5e:2d:70:45:b5:d9:52:cf:13:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Sep 24 18:01:06 2026 GMT
Not After : Sep 25 18:01:06 2026 GMT
Subject: CN=e65cfff4c9210c40a8c86edc1c169a6d43028280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:7e:a5:f0:f1:1f:bb:3e:e8:ad:92:fc:26:
9a:a4:8a:1a:7a:c2:7b:55:e9:55:ad:eb:33:96:a9:
dd:72:a4:54:68:90:6c:cf:5d:19:db:f9:0f:5e:71:
d5:b0:41:2d:eb:91:f1:32:b8:1e:05:59:25:e4:4d:
38:ed:29:49:69:aa:be:64:63:5d:cd:ef:5b:90:8c:
42:48:5a:50:7a:54:30:eb:99:9e:e2:c6:e1:7c:4a:
f8:63:7a:cc:52:a6:8d:eb:50:f0:d7:8f:4e:8e:5d:
fe:01:10:15:8f:6d:36:bf:7a:c1:ca:11:9b:61:ff:
2f:5e:5e:eb:da:22:99:94:0c:36:5f:0f:7e:47:34:
cf:36:ab:59:9c:f8:7a:ce:84:1d:af:e4:76:14:82:
90:da:d8:0f:fa:86:59:b1:84:f8:3e:80:99:fa:a4:
fa:30:e6:86:4e:42:ba:b6:a3:b5:58:b9:3b:b5:95:
d1:1c:f3:be:da:71:00:6b:80:91:ac:8f:31:ee:da:
2c:59:71:fa:4f:d3:f1:c1:27:a6:dc:2e:bd:ea:3d:
51:4f:3d:45:7b:c4:3f:08:d3:67:87:13:58:50:92:
8a:2e:eb:c1:4c:c8:06:6f:ac:a9:4b:99:a8:89:f0:
4a:6c:73:65:e6:e5:9b:b4:44:c3:ac:1a:bf:e3:f6:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:FF:F4:C9:21:0C:40:A8:C8:6E:DC:1C:16:9A:6D:43:02:82:80
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:e3:b4:9a:6d:00:95:63:07:3e:3a:65:77:b9:24:f8:17:
20:13:46:f3:a9:d6:51:f9:b4:c0:0c:fe:58:56:74:91:d7:b2:
b5:d5:09:77:a6:fd:4c:13:4b:27:20:53:44:db:02:0a:51:da:
c2:3e:ee:e7:0e:80:97:a2:75:bd:1c:ea:7b:fa:59:7c:74:be:
c1:10:05:b8:90:b4:ae:b1:b4:5b:0b:9a:9a:cb:08:0b:6e:65:
a3:d2:1d:3c:08:ed:ba:27:b2:2f:3c:97:37:f4:13:7a:32:44:
9e:ef:c1:11:7e:b0:ed:75:dd:21:64:75:c6:dd:97:46:84:ad:
cc:da:90:3b:3b:a3:20:fb:5d:e5:d3:a8:2c:df:c8:40:75:20:
77:b9:8d:7f:eb:14:63:a4:3d:e9:40:b5:60:06:99:fb:5a:14:
24:c6:1b:26:fd:86:e9:de:44:5a:0d:18:18:e0:eb:db:1d:15:
78:1f:88:1d:02:05:a2:89:82:af:fd:58:9b:ab:2a:54:fb:54:
37:6d:a2:ca:ac:36:23:85:2b:0d:22:c7:2c:d3:90:4f:ce:cf:
6a:25:e9:22:e2:b2:7c:05:4b:28:b5:af:38:0b:05:67:15:fe:
97:8f:ec:10:fc:81:8e:06:6c:19:3c:5e:4b:69:22:6b:01:20:
35:35:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:32:27 2026 by rpki-client