Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: Qezuz3uXHlZO239ydGSo5mz05u33pecAmuXFx1dn7B8=
Subject key identifier: EA:F0:F8:63:AD:39:28:77:69:36:DF:7A:B6:BE:A9:33:4B:D7:22:A7
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 019D2A723364F86E4B84D517E52A88CBB35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 113A
Signing time: Thu 26 Mar 2026 14:00:20 +0000
Manifest this update: Thu 26 Mar 2026 14:00:20 +0000
Manifest next update: Fri 27 Mar 2026 14:00:20 +0000
Files and hashes: 1: L4UpAkdF8b839N44FTHNh-gC55s.roa (hash: NDtnroxc2AqyKTb6om79If+wTLdHZt92uAc1INrbcN8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: djUOnKO0IpkifQS2I4RQ1N7m0UOMwUuIq2zfdR4snX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:33:64:f8:6e:4b:84:d5:17:e5:2a:88:cb:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Mar 26 14:00:20 2026 GMT
Not After : Mar 27 14:00:20 2026 GMT
Subject: CN=eaf0f863ad3928776936df7ab6bea9334bd722a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:54:13:b1:44:a6:58:8a:73:f4:18:63:72:
a9:b9:6e:06:58:be:26:0a:95:74:8e:4d:90:16:04:
d1:48:e3:e6:3d:84:6c:41:30:b7:e7:10:35:f3:cc:
39:3d:08:d2:c9:7b:55:95:43:cc:eb:a3:94:4a:1d:
5c:60:c3:d6:b4:ea:31:ac:e5:91:bd:b4:4f:d6:e4:
54:c8:60:0c:d2:ee:01:4d:28:39:d6:0a:f0:7d:64:
f0:6a:1a:3d:5c:28:b9:88:72:d3:bd:bd:e1:12:ed:
46:71:9a:35:24:24:ea:e5:5c:7f:b7:e7:24:48:d1:
08:04:72:db:3d:8d:2f:cf:c3:b1:9a:da:75:7c:10:
40:87:55:2f:38:09:25:cf:38:26:d9:fb:74:a3:9c:
3f:af:2f:96:8a:62:12:bb:09:04:9a:27:4e:8b:43:
27:c3:e8:34:85:47:06:db:c4:7d:29:c9:15:ca:8b:
93:0b:5d:3f:7d:6e:4a:9b:07:14:54:cb:07:98:6c:
fa:53:94:28:55:f3:e4:1d:2a:11:e5:39:6e:f6:1f:
e3:36:8e:e8:97:46:6d:81:30:2b:dd:2e:68:99:2c:
04:d1:19:04:36:73:c9:2c:66:49:02:82:09:9c:f7:
79:e6:1a:ca:c7:65:6f:d3:db:24:5b:d0:61:c7:88:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:F8:63:AD:39:28:77:69:36:DF:7A:B6:BE:A9:33:4B:D7:22:A7
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:26:3b:5a:47:66:ac:5b:32:8d:51:ce:e7:d6:02:6c:1c:
88:1c:5c:ec:e6:26:3b:9d:2d:d9:3f:6c:f6:97:e5:c8:59:85:
ea:9b:11:53:45:83:c1:bd:e1:47:bd:d0:b8:a7:91:ad:9e:93:
d0:a0:1c:1f:ad:29:56:88:71:10:65:4c:f8:76:80:0f:21:cd:
18:3a:cb:83:48:5a:68:89:01:9b:27:a8:8d:f7:0e:2e:06:e9:
ec:3a:cd:b0:b2:a6:86:ec:c5:4e:8c:d3:8c:95:a2:d6:b3:8a:
5c:e9:9b:c6:85:bc:86:d9:1f:76:f0:9e:f8:af:33:1d:c7:b0:
0f:30:97:e5:b1:3c:67:2e:e6:3a:88:c1:56:83:16:31:22:16:
9a:dc:41:1a:91:f3:71:97:be:06:9a:45:8a:f9:4d:d3:dd:ca:
4a:ae:b6:b8:61:97:db:30:87:2e:79:5d:e9:10:24:36:80:24:
6a:c3:d9:57:16:89:b5:01:47:1d:8a:0b:f5:75:49:62:47:aa:
fb:af:b9:45:85:41:b9:bb:63:b0:ca:a1:83:7a:ae:5b:d2:46:
f3:a5:cf:60:1a:55:6f:e4:b9:42:dd:49:27:96:71:e3:64:d6:
75:31:98:56:1d:31:06:49:bb:7d:c0:f5:2c:87:a0:c1:d8:da:
73:63:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:04 2026 by rpki-client