Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: UlVcJNHH2CUpRz1mpCWkqVBjcHS+TvLoF2UTQl51rqY=
Subject key identifier: AC:CE:D1:AE:AA:EA:92:F9:51:7D:3E:C8:8F:5E:81:6A:54:0D:2A:96
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 019D26CD92709356060F5A68ED0DAD7ADE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0F1D
Signing time: Wed 25 Mar 2026 21:01:39 +0000
Manifest this update: Wed 25 Mar 2026 21:01:39 +0000
Manifest next update: Thu 26 Mar 2026 21:01:39 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: bS6p5LmOPbenKY4OyOlS+ttrwiF88yLyk0Dl4WWbog0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:92:70:93:56:06:0f:5a:68:ed:0d:ad:7a:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Mar 25 21:01:39 2026 GMT
Not After : Mar 26 21:01:39 2026 GMT
Subject: CN=acced1aeaaea92f9517d3ec88f5e816a540d2a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:0a:96:18:0f:5c:f4:07:a7:81:4e:ea:fc:
24:b7:95:03:38:d4:21:8b:6e:e1:67:13:51:35:dd:
f7:12:a9:05:05:4a:c6:d4:26:99:dc:2f:a7:2a:93:
3a:6b:b5:79:45:80:59:bb:1e:6e:99:c0:1c:0e:33:
07:3a:2b:55:e7:61:2d:fc:b0:e2:db:ad:13:54:76:
b2:92:e4:31:42:31:51:0c:16:35:d6:fc:c1:b4:01:
18:0d:18:29:86:68:82:af:b2:75:ac:e4:75:33:49:
17:91:2d:de:54:b2:eb:27:36:9e:86:7c:59:fa:9a:
9f:ff:ac:1c:45:7d:10:71:e1:75:2c:ac:de:44:0f:
d6:ff:6a:9c:33:b7:a5:90:85:23:c2:36:ab:89:4a:
3a:59:5e:09:71:fd:ed:93:bb:bc:9f:d1:43:e1:b8:
a2:33:cd:bd:42:40:2d:62:bf:0c:0c:d1:df:77:55:
a3:ab:7d:17:67:21:ed:9b:bc:d3:a4:b8:ea:7b:d8:
53:ff:d2:a5:33:51:27:80:80:8d:9c:15:6b:4b:ff:
13:82:8e:3f:e8:ca:71:84:0c:9b:da:6f:d2:c7:7c:
45:39:20:81:2d:c7:14:45:95:2e:0c:ba:f2:40:7b:
85:c4:3d:36:79:a7:17:5b:ce:3d:55:d8:a5:87:91:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:D1:AE:AA:EA:92:F9:51:7D:3E:C8:8F:5E:81:6A:54:0D:2A:96
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:e2:e5:9a:0c:87:7c:fe:5d:5b:dd:be:96:5e:79:8b:78:
07:28:79:9e:1f:5c:d6:ba:aa:6b:2b:10:c7:d3:57:42:55:12:
fa:c5:93:49:ab:b8:c8:c2:22:a6:49:a4:de:78:87:9e:9c:5b:
a3:77:2a:8b:18:13:24:47:20:0a:06:d3:46:0c:e0:dd:8d:5c:
b8:a3:ea:d0:e7:68:3a:16:1e:c9:01:bf:17:f4:0e:8b:c2:b8:
54:9c:d3:30:df:75:62:e9:5e:a1:20:e9:d1:27:a9:8f:2e:2b:
e2:c4:82:31:29:05:8c:63:35:9d:57:59:9c:4b:6b:0a:8b:84:
d9:8c:e1:96:ab:bb:6a:80:c7:4e:b5:63:46:51:ed:a1:8f:0e:
2b:3d:0b:dc:63:fd:ea:81:fc:4d:65:f5:9e:9a:3a:02:0b:8d:
93:87:fe:e8:f6:b2:c2:a7:ae:46:56:e8:bd:1d:8a:0f:87:bc:
ab:c9:c3:2c:97:bf:57:60:33:ee:da:8f:f8:af:91:cf:be:bc:
b3:be:93:e2:28:f0:b1:7e:fd:72:43:dc:48:98:a9:40:a8:a0:
a8:25:f1:60:88:6d:73:89:23:04:23:21:b1:ef:c1:05:bd:8d:
56:7a:ef:59:4c:6a:52:30:93:8b:4d:1d:8c:9c:a5:d7:ed:1d:
44:39:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:55 2026 by rpki-client