Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: XqfEppLyOQHMlEoPyovnjG4B6Fr+/G/a73knzcF7Bzc=
Subject key identifier: 46:71:FC:16:93:FE:41:FD:5B:2D:7D:C7:47:3D:93:DD:CF:B3:7A:86
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019E1EA2B5189D9C9DA099121762D6ABDA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 0685
Signing time: Wed 13 May 2026 00:00:39 +0000
Manifest this update: Wed 13 May 2026 00:00:39 +0000
Manifest next update: Thu 14 May 2026 00:00:39 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: pHUVIw5lAcbazisIbiycIq8XuD0Xveahhol4Nd4pbnM=)
2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b5:18:9d:9c:9d:a0:99:12:17:62:d6:ab:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: May 13 00:00:39 2026 GMT
Not After : May 14 00:00:39 2026 GMT
Subject: CN=4671fc1693fe41fd5b2d7dc7473d93ddcfb37a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:9b:cd:f4:d1:28:5b:f1:13:43:a9:1b:99:
c4:fb:b5:69:85:8c:93:43:20:8b:1c:de:52:ee:99:
27:e8:3a:0d:bc:ba:af:f3:4c:4c:e9:1b:e9:51:69:
aa:18:91:ee:7c:fb:aa:ec:b9:22:99:be:d0:53:ef:
2e:91:d3:dc:49:70:a4:61:d0:c0:46:e8:e6:0f:7c:
1a:fc:84:6e:7f:54:4d:f1:d0:c4:3c:bd:18:b5:67:
2d:ae:05:39:89:b8:92:32:fe:84:a3:c7:0d:f2:76:
48:df:d5:79:b7:ab:e8:5b:ad:21:83:f3:6a:3e:68:
b4:15:61:56:fd:1a:f2:ac:b0:d9:00:03:70:d2:e1:
d6:ed:d2:f2:e3:f8:f4:2f:f8:9c:69:6e:9a:8c:65:
7a:c0:39:d1:24:05:97:80:16:9f:80:43:c1:2e:d5:
ff:bf:e4:a9:5c:77:47:2a:94:9b:9a:71:fb:d7:38:
fa:f2:a1:c4:80:53:ae:72:99:c2:28:9f:f3:6a:c8:
33:93:55:09:4d:07:03:b8:c7:c5:dd:6b:bb:e1:8b:
35:85:8c:26:ac:e8:6f:9e:68:a5:38:6e:4b:aa:fb:
62:b3:42:ca:68:55:a1:ab:ce:ac:da:0a:85:37:cc:
38:16:aa:6b:95:7b:ea:2c:67:e9:a2:ef:5b:95:3f:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:FC:16:93:FE:41:FD:5B:2D:7D:C7:47:3D:93:DD:CF:B3:7A:86
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:74:71:d0:b5:b8:98:05:94:1f:18:0a:63:18:4b:0d:91:d2:
72:f1:fb:36:1d:53:cf:b5:7b:d5:9e:08:52:a5:9e:94:73:69:
5c:cb:5d:1a:71:9c:78:47:b4:c6:3a:ed:3b:08:d5:dd:38:a7:
87:fb:75:e1:67:2b:68:f6:4e:5b:d8:0e:d4:36:6a:e3:5e:1c:
e0:ad:ee:0a:b6:bf:44:75:a5:ef:a9:6d:87:a1:b4:71:6c:a0:
de:21:6d:91:fc:77:c2:05:40:20:66:86:49:21:92:22:c1:ac:
4a:b2:02:a9:cb:04:69:47:e7:e5:17:40:cd:34:8f:22:99:f0:
63:be:8e:64:b3:77:74:ca:16:34:88:11:78:db:28:b9:27:da:
d4:48:3a:0c:5c:f0:76:1d:28:ca:1a:7a:bf:ca:e9:76:6a:d8:
b8:52:b8:4a:9d:d2:9f:44:dc:7f:98:7c:07:93:0a:0e:f8:4b:
28:d0:28:d7:22:27:c2:07:fc:2d:37:04:00:2e:3f:70:71:4a:
69:ff:b8:9c:fb:71:b5:54:30:cb:2a:eb:60:70:aa:f1:97:e6:
f1:1b:50:93:1e:39:81:f6:cf:47:a7:53:b0:88:e9:5d:cd:8a:
9c:c6:f3:34:0c:67:8a:ae:95:39:c9:17:17:a4:5e:24:65:ef:
15:85:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:36 2026 by rpki-client