Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: JIehfEkBXRjJGT25IoaUsWZAkL0WoU85um7t9CjvW4w=
Subject key identifier: 49:BB:A4:90:81:1B:83:77:55:AD:AE:AB:45:E1:5D:B2:95:34:F4:D2
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 01A0D07F83C4ECB6A7FF72B4493AD929D0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 14A4
Signing time: Wed 23 Sep 2026 23:00:12 +0000
Manifest this update: Wed 23 Sep 2026 23:00:12 +0000
Manifest next update: Thu 24 Sep 2026 23:00:12 +0000
Files and hashes: 1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: JAP3NGRU+TAWyOF4at046TnsVp/qzwLIH+dn5mcBD3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:83:c4:ec:b6:a7:ff:72:b4:49:3a:d9:29:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Sep 23 23:00:12 2026 GMT
Not After : Sep 24 23:00:12 2026 GMT
Subject: CN=49bba490811b837755adaeab45e15db29534f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:36:ad:db:e1:1d:ed:6b:19:ab:d2:19:fe:
57:73:00:45:73:46:01:cd:dd:fa:17:3b:bb:eb:12:
58:18:a6:87:5e:87:06:46:3a:13:d6:69:28:51:cd:
c3:75:89:3b:2e:04:a9:43:52:ad:7b:d0:b9:b8:5f:
50:78:3f:1c:d8:32:b8:46:8e:fc:c3:a6:bd:b4:58:
51:3a:17:3b:b9:89:1b:d0:67:bd:b9:b0:ed:0f:83:
c5:82:b7:f4:39:35:ee:d6:e8:94:75:a1:07:79:d4:
95:60:e5:92:e0:08:e8:9a:cd:50:5e:68:0e:ee:55:
5e:51:99:07:2d:65:30:cc:4c:bb:73:0c:49:ee:26:
30:84:9b:2a:0a:e3:66:24:6d:4b:4c:9b:3e:6e:e9:
e8:ec:e6:3e:5f:65:9a:ce:ad:8b:83:df:70:b5:46:
81:a0:58:8c:66:5f:e4:7a:7c:f5:3c:33:76:2b:f8:
19:fd:17:54:ca:4a:b8:a6:a0:16:17:df:46:0c:3a:
f2:f1:99:ca:5f:d8:8b:56:8c:27:ff:5c:d5:b8:7c:
a0:21:db:3f:09:9a:73:45:de:ca:f5:6a:1e:90:a3:
4f:2c:b0:09:4e:6f:78:a6:d8:a3:5d:7c:d0:a5:9a:
20:b9:49:ea:01:04:00:4d:a9:c8:72:d4:1d:e0:3f:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:A4:90:81:1B:83:77:55:AD:AE:AB:45:E1:5D:B2:95:34:F4:D2
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4e:eb:c4:20:4b:ec:9b:0d:99:3b:c5:6e:fa:3c:36:92:4d:
3c:77:dd:62:6e:0f:d1:d0:60:c2:9e:14:2d:35:28:5a:54:06:
e8:6d:25:55:b6:0e:ef:02:2c:51:a0:39:7b:0a:90:15:d0:7e:
12:1b:04:d1:cf:d6:ce:2b:4a:e8:dc:3a:35:cd:b4:00:d1:fe:
bd:49:43:5e:2a:b5:4f:f4:7d:e1:d7:26:cb:53:42:96:a0:6b:
f0:1e:3c:24:cf:ba:84:52:8d:3b:a6:f5:1d:8e:8e:71:97:e1:
c7:a2:1b:81:ec:4a:55:bb:a9:06:2a:a9:c5:08:15:49:1a:9d:
7f:98:cf:42:2f:e0:18:32:7a:82:1f:d5:39:44:47:93:c9:3f:
ba:4a:13:e6:da:58:b7:a9:49:93:a9:58:1c:49:1d:47:2d:10:
b5:a2:4d:5c:e4:cf:24:de:85:45:41:6d:eb:de:07:9a:7d:95:
af:bf:cf:70:ef:94:46:b9:8b:82:71:b9:b6:eb:85:ae:f8:ce:
82:3c:e8:1b:0d:e1:f7:0e:ba:53:f3:4e:9a:26:61:09:12:ef:
e5:d8:28:e0:c4:a0:3b:78:de:9c:d5:45:e1:65:17:79:f5:59:
95:aa:44:71:57:db:41:44:14:c8:5e:dd:7e:48:00:c5:cc:28:
44:7f:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:53 2026 by rpki-client