Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: bvZ7JJxtRckL8Raz/h+ydtEeLQsXEQQDzn0TtMc2H8Y=
Subject key identifier: 30:C6:44:91:47:AB:32:57:92:4F:50:B6:A5:3F:55:27:33:66:41:F5
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019E1C0FBEB044FB0F0F34AFC63CFF6E2282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0D40
Signing time: Tue 12 May 2026 12:00:54 +0000
Manifest this update: Tue 12 May 2026 12:00:54 +0000
Manifest next update: Wed 13 May 2026 12:00:54 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: hXnuvWiFKIKc9lqDxR+ERGYxIQNyHJ/5C9GRNDcIRXw=)
2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:be:b0:44:fb:0f:0f:34:af:c6:3c:ff:6e:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: May 12 12:00:54 2026 GMT
Not After : May 13 12:00:54 2026 GMT
Subject: CN=30c6449147ab3257924f50b6a53f5527336641f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:09:c0:c6:31:b0:24:a2:a0:13:40:1b:e9:
94:95:cf:81:57:00:64:a9:fb:b4:f7:eb:4c:2f:64:
87:6e:92:67:91:a4:31:53:83:2c:5b:27:1e:0c:2f:
e8:67:6b:84:93:a3:47:5d:d5:3e:51:e1:48:60:4a:
b7:ab:4b:c8:e1:c9:56:1a:fc:3a:6b:36:bc:77:b9:
69:39:b5:b1:84:bb:59:71:b3:b5:08:2c:cb:c4:73:
1b:79:42:9d:20:c5:0d:c0:0d:7f:8c:7d:c1:35:c4:
df:71:fb:81:e2:3e:44:37:e9:76:1d:b9:74:6a:c6:
ab:95:cf:f8:9d:23:6b:60:59:71:25:7d:73:96:b1:
b9:10:97:7f:fb:a5:30:20:d2:31:5b:98:0b:57:58:
27:5d:88:4c:24:13:b2:a0:58:08:f3:bc:ba:97:a6:
3f:de:14:6c:ae:47:e6:3e:3b:0f:b7:4f:b4:ee:b3:
11:33:3a:f4:02:70:1f:71:9a:3f:ed:f9:7b:7c:33:
1c:2e:2d:fa:51:03:1b:df:d6:d9:34:63:4a:e4:b3:
ee:6d:96:39:5a:b7:ba:36:76:32:9e:57:b2:89:74:
84:b4:c4:db:9b:12:33:79:df:55:1f:25:28:43:1c:
7d:da:03:65:3e:5b:14:f6:b6:9b:1a:23:eb:16:ed:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:44:91:47:AB:32:57:92:4F:50:B6:A5:3F:55:27:33:66:41:F5
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:50:f1:81:d8:2f:15:a0:c5:6d:a0:9b:42:96:ba:3f:8d:
14:73:02:c1:57:96:cb:98:70:d4:be:8a:f8:f9:6e:38:23:27:
eb:67:96:54:94:61:c3:5b:b7:75:6a:f4:02:d2:16:2b:66:b8:
8f:61:0d:b3:aa:27:24:58:a2:34:f4:66:6f:0e:26:4b:df:e6:
c6:6e:1a:5f:fc:14:b8:40:bf:42:38:12:83:82:9f:a9:34:3d:
f1:de:68:92:b5:a4:c0:19:3f:d8:46:26:98:89:aa:f7:f9:b9:
2b:a8:c7:46:ff:ad:ac:e6:ad:96:e9:d9:0f:c3:4e:5f:ae:eb:
a3:03:dc:f6:f7:f4:2f:1f:18:5c:a1:72:d1:3b:55:d2:01:f5:
64:b8:64:a9:aa:5b:0d:e4:d5:a1:e5:91:43:4d:37:21:93:f7:
a6:08:36:bb:c8:a7:bb:6e:72:cc:32:89:e7:1c:d2:7d:dd:5a:
40:84:7b:fe:49:09:15:a4:89:d6:1f:47:91:97:2b:56:a4:a3:
4e:75:f8:44:99:f6:dd:ce:c3:ca:cf:1f:47:48:c5:d7:bf:e6:
70:d7:68:71:e2:cc:ec:4b:16:a8:a5:e5:54:5b:49:b6:2c:fe:
ca:4f:87:5e:08:d1:f5:fe:55:38:59:5e:20:1f:8d:4a:3d:03:
d7:4e:dc:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD76wRPsPDzSvxjz/biKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjYwNTEyMTIwMDU0WhcNMjYwNTEzMTIwMDU0WjAzMTEwLwYDVQQD
EygzMGM2NDQ5MTQ3YWIzMjU3OTI0ZjUwYjZhNTNmNTUyNzMzNjY0MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDAJwMYxsCSioBNAG+mUlc+BVwBk
qfu09+tML2SHbpJnkaQxU4MsWyceDC/oZ2uEk6NHXdU+UeFIYEq3q0vI4clWGvw6
aza8d7lpObWxhLtZcbO1CCzLxHMbeUKdIMUNwA1/jH3BNcTfcfuB4j5EN+l2Hbl0
asarlc/4nSNrYFlxJX1zlrG5EJd/+6UwINIxW5gLV1gnXYhMJBOyoFgI87y6l6Y/
3hRsrkfmPjsPt0+07rMRMzr0AnAfcZo/7fl7fDMcLi36UQMb39bZNGNK5LPubZY5
Wre6NnYynleyiXSEtMTbmxIzed9VHyUoQxx92gNlPlsU9rabGiPrFu2qrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDGRJFHqzJXkk9QtqU/VSczZkH1MB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa45Q8YHY
LxWgxW2gm0KWuj+NFHMCwVeWy5hw1L6K+PluOCMn62eWVJRhw1u3dWr0AtIWK2a4
j2ENs6onJFiiNPRmbw4mS9/mxm4aX/wUuEC/QjgSg4KfqTQ98d5okrWkwBk/2EYm
mImq9/m5K6jHRv+trOatlunZD8NOX67rowPc9vf0Lx8YXKFy0TtV0gH1ZLhkqapb
DeTVoeWRQ003IZP3pgg2u8inu25yzDKJ5xzSfd1aQIR7/kkJFaSJ1h9HkZcrVqSj
TnX4RJn23c7Dys8fR0jF17/mcNdoceLM7EsWqKXlVFtJtiz+yk+HXgjR9f5VOFle
IB+NSj0D107cxA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:15 2026 by rpki-client