Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: 3fr9o6WJB7bqJvJEPMorshwd07JXClaALd9YLq2xR3Q=
Subject key identifier: 9B:F7:3D:71:7D:C0:C2:BD:5F:09:A7:C6:6D:E4:C4:0D:76:95:8D:DA
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 01A0CF6CF41DFF11A21B15555D8189324759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0EA6
Signing time: Wed 23 Sep 2026 18:00:19 +0000
Manifest this update: Wed 23 Sep 2026 18:00:19 +0000
Manifest next update: Thu 24 Sep 2026 18:00:19 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: olTWtZ7qp2kZiH36onP8xeJyc6H48oZ+2a7igfmwwYk=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:f4:1d:ff:11:a2:1b:15:55:5d:81:89:32:47:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Sep 23 18:00:19 2026 GMT
Not After : Sep 24 18:00:19 2026 GMT
Subject: CN=9bf73d717dc0c2bd5f09a7c66de4c40d76958dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:67:67:d3:bf:6c:a0:e3:85:66:8b:16:af:
81:3c:0f:76:5d:5e:01:2a:15:81:14:c8:c9:a8:d6:
fe:b0:bd:5b:13:2e:78:73:94:97:b2:37:42:cc:ab:
e6:5c:67:b3:c8:31:04:f8:3f:cd:08:a3:b1:9b:7e:
c6:e1:f1:42:32:2c:43:b2:f7:08:58:f3:88:1c:b0:
dc:21:45:4f:14:f7:ef:ae:16:27:0b:69:d2:9f:ba:
db:08:cb:7b:77:5f:81:57:58:b0:13:ae:58:70:65:
a4:a8:54:57:0e:17:e2:ec:84:0b:b4:94:6a:11:5d:
66:ed:89:e7:b8:f4:a5:1e:6f:7d:68:f7:5b:bc:45:
3a:ae:69:03:10:ac:dd:41:48:c9:fb:21:b2:92:79:
1f:af:97:95:d9:85:46:4a:27:c2:a6:cd:05:fe:35:
e8:36:57:3b:6b:d0:db:60:f3:e6:72:08:6d:a4:34:
a2:54:83:eb:44:ea:dc:48:be:1c:23:99:59:47:73:
df:93:c4:b5:5b:35:57:c0:d4:91:0a:f8:f2:07:d8:
b3:3f:a7:d9:86:ab:0b:bd:60:46:a8:31:1c:d2:85:
b2:09:d1:1f:40:b5:b2:76:b7:19:2c:d4:6b:27:3b:
83:b8:10:42:1e:6a:62:94:04:a3:38:b9:8b:fd:5f:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:3D:71:7D:C0:C2:BD:5F:09:A7:C6:6D:E4:C4:0D:76:95:8D:DA
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0c:a2:0e:86:6d:f1:85:4b:87:bf:66:57:b2:68:f2:41:9b:
a6:5b:1a:e6:67:f1:d4:52:4c:f2:44:e3:69:6a:ae:f5:aa:8e:
22:89:7c:7a:c6:31:6c:33:05:fe:b6:28:dc:9b:32:f0:2b:2e:
08:8e:3f:bc:c6:6c:da:d5:29:55:3d:5e:5d:18:70:6c:31:9e:
86:ee:07:5e:f9:40:cf:d9:c8:0c:53:f8:aa:55:69:81:b5:c9:
5f:29:bd:92:9f:2e:31:b5:97:0b:f8:2b:42:d4:e0:40:88:d6:
2c:48:d5:8b:db:ee:91:06:2e:36:98:b6:36:83:94:53:e3:b8:
59:10:14:7d:be:b8:42:09:89:f1:99:44:53:a9:e5:d9:0a:ef:
32:93:a2:9d:2b:61:b0:28:eb:48:c8:1d:71:f0:ca:b0:db:8f:
3a:39:f4:bb:20:05:52:cb:d5:40:93:d8:37:61:55:16:dd:f5:
02:4a:f1:d2:3a:56:15:6f:dd:0b:ca:ed:dd:24:28:11:b7:c4:
e3:35:61:21:de:97:23:a2:06:a9:7a:18:c0:9a:73:05:fb:6d:
cd:61:e1:ca:12:24:e4:4e:73:6d:c0:e1:ed:86:a9:fb:26:a3:
a2:96:70:ca:f8:a5:bf:01:a9:fd:79:78:bd:98:e3:f4:95:dd:
9a:d9:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:24:05 2026 by rpki-client