Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: XrUcRG6kfKBZDbMCP5BZEM5UF40jTbv+uUoA1kMPLAA=
Subject key identifier: C0:42:AB:6F:43:62:DE:50:1D:19:D9:AF:D0:49:E1:7D:31:72:73:3B
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 019F94A4A8AED3FE8F06C06170F92F62D0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 105F
Signing time: Fri 24 Jul 2026 15:00:46 +0000
Manifest this update: Fri 24 Jul 2026 15:00:46 +0000
Manifest next update: Sat 25 Jul 2026 15:00:46 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: t1OB/RLvP0E5gUD5T2ZPEUrqyDveJO03Mg1Zoh7eBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a8:ae:d3:fe:8f:06:c0:61:70:f9:2f:62:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jul 24 15:00:46 2026 GMT
Not After : Jul 25 15:00:46 2026 GMT
Subject: CN=c042ab6f4362de501d19d9afd049e17d3172733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:ac:c5:87:c2:b3:00:26:1b:28:a3:00:ad:
86:0e:35:1e:8c:4e:7c:59:0d:43:61:e6:d1:97:c7:
6a:87:c3:1a:77:03:06:9d:a3:5d:68:fe:3d:95:a4:
1c:c5:a8:cc:b1:b0:7c:a3:23:ad:71:e2:01:c1:95:
ff:fb:e2:c9:75:cf:ec:3e:b9:7e:23:f2:cd:36:56:
0b:9e:bc:cf:77:a7:c1:d1:b6:8b:f4:83:94:e1:bf:
06:94:8e:32:e9:28:54:7c:7e:31:37:2d:fc:e8:e2:
46:67:88:02:be:68:50:3d:e0:03:6b:44:8a:ea:2a:
a2:17:91:03:9a:76:0e:1b:ae:f5:26:86:e5:66:15:
74:f9:f7:4a:0b:f7:11:86:b7:d7:3d:d2:1e:fb:bb:
b4:a9:52:0d:61:ee:ea:56:77:2b:2a:7e:1a:bd:a7:
23:6e:15:71:02:e8:90:92:dc:66:5f:bf:97:bf:b9:
1d:95:f9:dc:54:42:80:a1:a7:87:8f:e0:84:9b:2c:
1d:cc:63:c7:41:d6:fc:c2:85:d1:43:d2:39:c3:50:
f9:6a:68:05:70:77:92:ef:27:5d:5a:f0:75:53:70:
96:ed:6c:1e:88:cd:66:79:59:28:1c:95:dd:a7:0f:
79:36:55:7e:a4:94:27:12:2e:62:1b:a6:cd:47:92:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:AB:6F:43:62:DE:50:1D:19:D9:AF:D0:49:E1:7D:31:72:73:3B
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:04:89:d8:25:bc:c3:6f:9d:57:29:ad:44:fe:db:de:f4:
73:ef:a4:1f:40:ea:0f:4e:34:f9:04:5f:9a:67:e0:d1:ca:0f:
ef:28:50:11:74:e4:9a:8b:2b:8d:44:70:ce:7a:2e:89:10:c6:
ae:27:02:28:a0:ac:ff:be:a7:60:b9:aa:25:0f:27:eb:17:27:
56:96:ab:47:7d:db:97:a2:5b:01:1e:5f:6f:3c:87:88:24:fb:
64:80:83:73:fe:4e:b3:ad:b3:82:86:91:37:51:bf:00:48:4c:
50:08:ed:4e:6d:66:d1:c4:21:40:ae:cf:47:b8:8e:f0:71:fb:
94:46:78:01:1f:e0:c3:92:24:31:89:dd:e9:26:3a:a8:8c:02:
60:7a:42:ac:75:d0:d5:27:e4:4c:c6:9f:83:00:d4:34:fa:b4:
c3:7f:1b:d0:7f:29:57:f8:30:d0:c4:80:4f:a5:55:b0:6d:5b:
ee:44:88:60:ae:4d:1b:f9:21:36:a0:83:78:cf:53:fe:bd:c1:
57:3e:3b:97:15:44:eb:58:c8:85:24:0b:63:60:e9:17:7c:e2:
31:09:9c:49:00:b3:0d:89:da:6a:12:58:2c:8a:78:ed:c2:f1:
35:bd:34:50:ca:4b:78:54:95:ef:11:b2:8b:39:57:f1:8c:bd:
4b:4c:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:09 2026 by rpki-client