Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: kSox0sPMWHE9biJPSTPeFm/PdQifQqEh45AiWtLx8r8=
Subject key identifier: 56:9E:01:3E:0B:0E:FC:01:71:F6:53:29:DE:5F:E7:1E:CE:DC:D2:B6
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 01A0D20158DD5722ACFCF83006A3D420026A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 07EB
Signing time: Thu 24 Sep 2026 06:01:38 +0000
Manifest this update: Thu 24 Sep 2026 06:01:38 +0000
Manifest next update: Fri 25 Sep 2026 06:01:38 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: kmHjt8Bc5ViCYbtZmRyfXm/JbTCHLT5INHFZKo/CFhc=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:58:dd:57:22:ac:fc:f8:30:06:a3:d4:20:02:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Sep 24 06:01:38 2026 GMT
Not After : Sep 25 06:01:38 2026 GMT
Subject: CN=569e013e0b0efc0171f65329de5fe71ecedcd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:7c:f6:61:33:c7:39:4f:fa:39:d2:f5:50:
a8:b1:0e:5f:b2:25:e6:6e:b2:d4:4c:15:1c:b5:1f:
ed:7c:a8:9c:43:72:6a:84:05:da:b8:62:4b:a9:6a:
0e:10:37:cb:c8:ae:ef:11:98:6e:10:bb:a9:6e:5b:
ed:fa:9e:16:01:ad:7d:51:59:d7:55:71:a2:4c:45:
27:d8:63:cf:6e:55:b2:96:0f:7d:b3:d2:3f:83:28:
dc:84:3e:24:8d:b2:5e:be:88:ae:ee:19:6c:b4:22:
48:b6:0b:75:dc:31:e7:63:d1:99:af:be:98:03:45:
31:c1:cf:12:a4:f7:9b:85:2e:17:bf:5b:dc:02:94:
a9:97:d3:0d:19:06:dd:2e:f6:ba:51:b4:c7:1b:fc:
a1:2c:41:74:86:40:60:34:28:29:d0:08:e7:55:9b:
6c:89:f1:86:da:97:30:6f:20:a2:ba:fe:7d:f1:e8:
50:34:fd:cc:36:43:96:d7:ff:36:cb:1f:1d:66:4b:
e4:78:3f:b0:ec:24:67:9c:45:55:51:63:28:25:40:
5a:a3:3f:c3:af:82:d3:f1:05:a3:e5:a0:3a:52:63:
79:b2:fd:f6:6a:b6:4a:17:5f:04:00:8b:7b:c1:9b:
24:c6:72:3a:82:72:84:cb:4b:02:04:5a:01:45:ee:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:01:3E:0B:0E:FC:01:71:F6:53:29:DE:5F:E7:1E:CE:DC:D2:B6
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:54:ad:c7:52:c2:05:ea:8b:32:ad:7d:ac:22:69:dd:0f:9e:
d8:03:c2:cd:44:26:80:75:db:ba:49:83:ca:ff:86:e1:e9:1b:
32:56:5e:4e:35:9e:fe:40:fd:05:7c:8e:eb:82:5b:0f:7f:29:
0b:4b:52:86:ce:99:72:05:98:a0:66:3b:be:27:22:c2:94:0b:
54:6e:e5:63:a0:c9:fd:c2:0a:fa:94:5a:18:6f:81:bb:25:bf:
82:f6:85:a0:69:a5:3d:b0:69:67:23:46:f1:4d:f9:eb:5e:7f:
03:a2:fd:85:04:d8:5b:f7:1b:e2:10:dd:4c:c9:7b:c2:45:48:
ef:d7:5b:a2:f7:55:c1:fd:1b:9a:58:af:45:fb:bf:e2:06:ef:
16:54:fd:77:f1:7e:b9:56:95:f1:fd:7e:ca:04:ac:d9:f7:32:
4f:28:4f:bc:ad:e9:9d:29:0a:72:74:38:9e:57:6e:53:f7:54:
0e:2f:07:94:ab:2d:e9:db:f6:ae:64:c6:03:eb:e5:a7:f2:f3:
1e:b3:8b:95:f4:eb:da:d4:1c:6a:f0:a9:ee:35:3c:c1:3e:ae:
9a:ec:4f:71:30:7a:b8:7a:a4:2a:8d:3d:8c:f6:ff:cb:71:61:
5f:2c:b1:82:73:7f:8d:69:21:dc:54:d8:ea:37:76:50:5f:6c:
6f:49:b4:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAVjdVyKs/PgwBqPUIAJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw
YzcyMmEwHhcNMjYwOTI0MDYwMTM4WhcNMjYwOTI1MDYwMTM4WjAzMTEwLwYDVQQD
Eyg1NjllMDEzZTBiMGVmYzAxNzFmNjUzMjlkZTVmZTcxZWNlZGNkMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfJ89mEzxzlP+jnS9VCosQ5fsiXm
brLUTBUctR/tfKicQ3JqhAXauGJLqWoOEDfLyK7vEZhuELupblvt+p4WAa19UVnX
VXGiTEUn2GPPblWylg99s9I/gyjchD4kjbJevoiu7hlstCJItgt13DHnY9GZr76Y
A0Uxwc8SpPebhS4Xv1vcApSpl9MNGQbdLva6UbTHG/yhLEF0hkBgNCgp0AjnVZts
ifGG2pcwbyCiuv598ehQNP3MNkOW1/82yx8dZkvkeD+w7CRnnEVVUWMoJUBaoz/D
r4LT8QWj5aA6UmN5sv32arZKF18EAIt7wZskxnI6gnKEy0sCBFoBRe5RVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaeAT4LDvwBcfZTKd5f5x7O3NK2MB8GA1UdIwQY
MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt
NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl
LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1Stx1LC
BeqLMq19rCJp3Q+e2APCzUQmgHXbukmDyv+G4ekbMlZeTjWe/kD9BXyO64JbD38p
C0tShs6ZcgWYoGY7viciwpQLVG7lY6DJ/cIK+pRaGG+BuyW/gvaFoGmlPbBpZyNG
8U35615/A6L9hQTYW/cb4hDdTMl7wkVI79dbovdVwf0bmlivRfu/4gbvFlT9d/F+
uVaV8f1+ygSs2fcyTyhPvK3pnSkKcnQ4nlduU/dUDi8HlKst6dv2rmTGA+vlp/Lz
HrOLlfTr2tQcavCp7jU8wT6umuxPcTB6uHqkKo09jPb/y3FhXyyxgnN/jWkh3FTY
6jd2UF9sb0m0Eg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:02:34 2026 by rpki-client