Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: B8s0v4Qbq3JkAia/BLUhv5+QHgYs2tBSWTrThITWHuI=
Subject key identifier: 77:D4:C9:93:A9:E6:6A:95:E2:F4:B3:99:46:37:8B:65:6E:E6:B5:30
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 019E1DFEBB175FADED248F015704FD7C80BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0F9D
Signing time: Tue 12 May 2026 21:01:33 +0000
Manifest this update: Tue 12 May 2026 21:01:33 +0000
Manifest next update: Wed 13 May 2026 21:01:33 +0000
Files and hashes: 1: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (hash: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY=)
2: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: Jrh1f2zi22pA5Bz65Eizia8uU4UlDdXbmfV6UyLOhV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:bb:17:5f:ad:ed:24:8f:01:57:04:fd:7c:80:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: May 12 21:01:33 2026 GMT
Not After : May 13 21:01:33 2026 GMT
Subject: CN=77d4c993a9e66a95e2f4b39946378b656ee6b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:55:bd:83:b1:06:bc:56:ab:71:39:3d:76:
6c:90:1e:46:50:d9:d5:73:8c:12:d3:59:98:22:ee:
15:08:b3:c2:e6:d0:37:ec:b2:7c:81:ed:da:81:09:
d6:b3:05:03:0e:fd:56:6d:0e:96:cd:8a:d5:f6:aa:
c3:06:c3:42:c5:87:16:72:b4:30:77:ce:67:a8:f0:
e2:aa:fe:75:ed:d2:d9:7f:17:9d:28:cc:e7:d3:c8:
0b:3f:28:ed:64:3f:fc:fb:9a:97:bb:c0:cd:32:20:
08:45:12:22:6c:88:27:a2:37:09:32:1e:d5:08:f6:
09:7c:31:c7:01:8c:92:26:26:6c:d0:95:50:a7:4c:
a6:9e:d7:2f:bb:1a:aa:a6:b8:4c:ea:56:b2:24:df:
13:b2:ef:a8:32:ff:c1:a7:78:4d:e5:83:eb:df:16:
b3:39:85:2f:10:e0:9a:bf:ce:c0:68:e5:38:74:00:
d7:a5:a5:11:0e:c9:4c:49:1d:9a:66:6a:b1:55:77:
28:1d:9d:87:80:56:d7:a0:d0:3a:cf:56:01:a4:2e:
57:59:1c:29:ab:70:3d:37:2a:32:d3:1f:dc:7d:ca:
d9:c2:a6:07:59:5c:8d:38:4a:45:81:ed:3e:0b:3a:
9f:34:dd:54:e9:8a:7b:b5:dd:eb:27:eb:6f:5b:2c:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:C9:93:A9:E6:6A:95:E2:F4:B3:99:46:37:8B:65:6E:E6:B5:30
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c3:9c:99:22:0d:08:24:f9:4b:eb:1c:21:01:57:c4:ff:9d:
71:7b:cb:a5:01:b5:1e:1a:cd:ca:b6:46:7c:99:82:6d:7f:e5:
d2:95:79:ee:23:f6:1f:c0:04:20:92:33:23:07:6a:3f:ef:0b:
02:c1:f1:0f:5c:c2:a5:87:5b:6a:24:04:a6:26:ce:94:dd:12:
52:bd:ba:81:20:c7:7a:87:0e:f4:4b:98:50:92:ab:0b:b2:f2:
79:98:4f:ed:aa:76:2c:f6:78:32:db:95:86:68:09:90:21:61:
a3:44:a7:f0:3f:72:05:34:8e:8b:91:2e:94:d8:96:62:0d:fd:
5d:31:3c:a4:59:57:4a:59:ef:62:1c:17:dd:ae:d3:cb:24:7e:
2d:67:d4:21:ad:ae:aa:9c:9f:bf:1c:d3:4d:6c:c4:e2:c2:ff:
19:fc:a9:7f:89:3b:73:9b:2c:9c:69:ce:c3:39:5a:95:4d:31:
dc:95:9b:c4:55:6a:5a:c5:84:5f:e0:5b:d0:96:1d:98:48:d2:
1c:c4:5c:48:ea:fd:9f:5c:c6:22:d3:b8:54:db:ba:22:33:aa:
52:a7:b6:5c:f5:5b:94:83:f0:c8:bc:05:b4:75:d9:3b:fc:5c:
b3:81:7c:07:cd:7a:91:1e:88:ab:fa:8a:9e:4d:75:2a:75:e3:
f3:09:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:44 2026 by rpki-client