Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: F98K/DO9kgSFCmzx2FRRFiPVp2FmbFuvZkcBN8H1RB0=
Subject key identifier: AA:40:0E:BD:D6:A8:E9:29:F0:91:B6:C1:8E:7E:C2:74:4B:D9:83:FE
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019D28BBA5B9DE47EE272EEFC766F3EBC448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0CC2
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: 7PuIJBgb+pTzk8C4PR6mBDjjku9gZa7g2OA0cNV9564=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a5:b9:de:47:ee:27:2e:ef:c7:66:f3:eb:c4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=aa400ebdd6a8e929f091b6c18e7ec2744bd983fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:75:8d:bb:be:e4:bc:b5:08:1d:7e:78:02:
4a:5f:12:44:c0:c5:48:65:f0:7d:3a:27:64:cf:ac:
3b:cf:54:45:1d:99:66:ac:6a:9a:3a:e4:0c:05:75:
45:23:04:63:1d:ee:b4:ab:b9:28:db:b2:77:3d:ff:
f4:45:8e:3b:a3:ed:56:3e:6f:ed:7c:2a:cb:5c:a0:
58:0f:32:39:8b:21:67:56:b7:7e:88:ed:c8:e8:b2:
9c:03:66:19:d2:cf:ed:fb:d9:7b:07:5c:d9:39:b0:
ad:2e:01:68:7c:63:1b:e7:05:8c:30:e6:fd:74:17:
23:48:e5:90:5a:b4:7b:c8:66:a4:36:41:2c:f7:4c:
5a:95:0c:9d:de:76:5b:bf:fa:74:83:55:eb:d1:39:
d6:43:3f:3b:cf:92:af:e2:49:03:9c:45:2a:5b:85:
7a:97:cd:c4:22:96:8d:8f:8c:a9:c2:7f:82:af:be:
13:6c:d0:4b:36:a1:27:4f:23:93:f7:77:bd:7e:91:
3d:88:da:fe:4a:46:dd:eb:09:6c:9a:8a:45:cb:1d:
23:c5:22:f8:47:e8:07:8f:41:73:0d:8a:41:0c:b1:
0b:87:84:fa:a2:81:ed:27:27:76:04:81:96:1e:4f:
2d:63:c0:fc:60:e2:53:89:5e:8f:e9:36:97:89:9d:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:0E:BD:D6:A8:E9:29:F0:91:B6:C1:8E:7E:C2:74:4B:D9:83:FE
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:07:00:7e:5c:ae:3c:2a:64:8e:3f:e4:0a:b3:2e:58:5e:
10:eb:be:79:d8:89:62:7f:70:0b:de:b8:b4:e6:58:51:0c:ab:
ca:ac:0b:7c:8c:32:20:c3:1b:17:03:46:63:5a:3e:c1:52:37:
7e:b2:49:3e:e7:e2:82:7b:c3:4f:ce:50:8f:b8:2d:82:a0:71:
fb:8a:26:49:3f:33:ce:6d:9f:be:6a:37:b4:96:12:58:73:19:
68:9e:fa:a0:22:72:39:d5:19:14:81:61:60:7d:12:bb:1b:a6:
b1:13:8e:6a:31:d9:9e:54:ca:f4:d3:f6:4b:ca:f9:6b:c8:2a:
c3:1f:9d:0b:27:00:e6:3f:f8:b6:75:a9:c5:50:6f:42:33:ff:
fa:58:cb:3e:6a:1b:59:f0:ce:2a:49:05:93:ef:d4:28:02:6e:
7f:4a:fb:af:62:bc:6d:92:12:4e:3b:56:3d:46:80:a5:7b:4a:
33:40:1c:16:70:d2:3f:47:59:53:59:4f:bc:f5:58:3e:0d:00:
0e:60:f5:39:2c:b8:7e:30:b1:48:0a:f0:3a:11:e6:5e:82:35:
91:79:45:af:a0:00:47:1f:28:cd:51:43:c2:34:b3:4a:15:2f:
90:31:cd:55:6b:f0:55:ba:7e:ca:93:07:99:77:8c:80:37:50:
33:86:3b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6W53kfuJy7vx2bz68RIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EyhhYTQwMGViZGQ2YThlOTI5ZjA5MWI2YzE4ZTdlYzI3NDRiZDk4M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumB1jbu+5Ly1CB1+eAJKXxJEwMVI
ZfB9Oidkz6w7z1RFHZlmrGqaOuQMBXVFIwRjHe60q7ko27J3Pf/0RY47o+1WPm/t
fCrLXKBYDzI5iyFnVrd+iO3I6LKcA2YZ0s/t+9l7B1zZObCtLgFofGMb5wWMMOb9
dBcjSOWQWrR7yGakNkEs90xalQyd3nZbv/p0g1Xr0TnWQz87z5Kv4kkDnEUqW4V6
l83EIpaNj4ypwn+Cr74TbNBLNqEnTyOT93e9fpE9iNr+Skbd6wlsmopFyx0jxSL4
R+gHj0FzDYpBDLELh4T6ooHtJyd2BIGWHk8tY8D8YOJTiV6P6TaXiZ27qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpADr3WqOkp8JG2wY5+wnRL2YP+MB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsMHAH5c
rjwqZI4/5AqzLlheEOu+ediJYn9wC964tOZYUQyryqwLfIwyIMMbFwNGY1o+wVI3
frJJPufignvDT85Qj7gtgqBx+4omST8zzm2fvmo3tJYSWHMZaJ76oCJyOdUZFIFh
YH0SuxumsROOajHZnlTK9NP2S8r5a8gqwx+dCycA5j/4tnWpxVBvQjP/+ljLPmob
WfDOKkkFk+/UKAJuf0r7r2K8bZISTjtWPUaApXtKM0AcFnDSP0dZU1lPvPVYPg0A
DmD1OSy4fjCxSArwOhHmXoI1kXlFr6AARx8ozVFDwjSzShUvkDHNVWvwVbp+ypMH
mXeMgDdQM4Y7Qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:00 2026 by rpki-client