Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: 7c7tcRjgpXYOVU7TZI1EHgoZk2A9e3YMKn1J8dxFUtk=
Subject key identifier: 8B:77:89:B4:8F:42:44:9C:DA:6D:2F:55:6C:3F:21:46:D0:03:12:4E
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 01A0E0CFC0DE6B711BB74AF10DE1DC094708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 110B
Signing time: Sun 27 Sep 2026 03:01:46 +0000
Manifest this update: Sun 27 Sep 2026 03:01:46 +0000
Manifest next update: Mon 28 Sep 2026 03:01:46 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: aUkkDLYZWR4T97mgcQFRc24XZvTPfrwz4k7Wulhlu2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:c0:de:6b:71:1b:b7:4a:f1:0d:e1:dc:09:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Sep 27 03:01:46 2026 GMT
Not After : Sep 28 03:01:46 2026 GMT
Subject: CN=8b7789b48f42449cda6d2f556c3f2146d003124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:2c:4f:cc:6f:86:9b:6c:cd:77:36:c4:02:
42:98:52:b7:bb:20:02:1a:f9:38:3e:fc:c8:a4:79:
7c:1a:51:89:8b:c7:32:6d:4f:2f:ae:5c:43:95:4e:
60:4a:7d:ed:42:ab:ad:49:ff:32:8a:61:ff:b8:b2:
96:88:16:83:b2:63:00:f3:0c:24:98:bf:85:3c:d5:
5d:08:a9:b6:0b:c1:a5:4e:8c:be:7d:e8:b5:30:b4:
fa:7d:af:2e:9d:a3:1f:b5:c5:df:d3:2b:6f:a0:9b:
fc:92:77:56:46:31:34:6e:63:79:8e:f8:27:83:42:
0d:aa:9f:70:73:30:48:b8:c1:44:98:65:ea:1a:d7:
fb:7f:0a:13:2d:27:77:e2:78:8a:12:07:c4:62:df:
40:66:4d:0f:ea:a6:5f:d3:aa:ca:f5:fb:b7:f2:85:
ab:f4:68:ff:96:ab:eb:0c:d0:af:0b:10:3b:09:03:
6c:a9:84:cd:a0:fa:bc:13:d3:99:61:c5:17:a8:f1:
29:67:3a:a5:0e:64:7f:92:95:df:da:e6:40:d9:ed:
9b:c8:86:90:fc:b8:d4:b8:00:67:72:5d:14:87:3d:
65:7e:df:b7:3f:bb:98:bf:a8:e7:7c:e0:d3:1a:fb:
46:51:7f:5e:3b:47:33:3a:c2:e9:47:ba:54:2e:9f:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:89:B4:8F:42:44:9C:DA:6D:2F:55:6C:3F:21:46:D0:03:12:4E
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:97:d6:3a:83:d2:3a:1f:5a:3f:08:ce:4f:dc:45:79:a3:
cb:5e:a6:72:93:a0:40:ae:ac:01:e1:86:fa:ea:e7:eb:1b:0e:
cd:de:c5:48:c5:94:b5:8f:cd:b0:1d:bb:60:5d:a0:5f:82:c3:
80:a2:41:6a:60:d6:70:14:3d:4f:b4:d3:98:a5:f9:25:0b:09:
4c:3f:6c:8d:b6:c5:7b:95:b8:e6:eb:ab:77:77:3f:92:06:12:
08:54:42:fa:4c:73:e5:0a:1a:7e:00:b6:83:2c:8d:fc:38:f6:
4f:ba:2e:b7:26:e2:62:f2:ed:20:98:ce:31:e3:e5:e3:8b:31:
81:d5:90:dc:b7:6c:a0:bd:be:60:6b:1d:aa:59:7b:23:11:b9:
f8:cd:96:50:d3:bf:ab:22:35:0c:44:be:7c:77:d3:f0:07:c9:
08:14:55:bc:76:68:8c:e6:50:2c:b6:b8:bd:79:34:1f:c3:61:
7c:9d:66:d9:75:6f:67:09:97:39:1e:b3:c6:13:f5:5c:31:ae:
c1:7d:b6:1c:f1:34:d8:53:a4:98:c8:27:61:7f:94:96:a2:d8:
5b:ff:20:c8:b4:ad:f2:21:de:24:2e:a5:7d:57:28:57:85:5c:
78:9b:63:74:4e:32:bf:6b:cf:cf:73:9b:e8:be:11:ce:fa:29:
19:5c:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:41 2026 by rpki-client