Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: qiBsgToxqtxeAjK1pe4gAjyeprPUDnxEK8rZdvxyCog=
Subject key identifier: 6C:64:0B:04:39:E2:C7:CA:31:0E:33:9B:06:B0:55:04:63:7F:B8:B4
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01A0DA289B5884D0D1CA40B382762C738A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0D63
Signing time: Fri 25 Sep 2026 20:01:29 +0000
Manifest this update: Fri 25 Sep 2026 20:01:29 +0000
Manifest next update: Sat 26 Sep 2026 20:01:29 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: EFh0NUbG6Z2EopLDiKKAVQL1ucG6fJGmAQn+JcZj6gg=)
4: YjbFkBDTS5NFbwdiI2IQ_URw5m0.roa (hash: cn5rnF1l3S3ChlA89Iu+p7qW6LDPQzVtJ9Adx3d+SJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:9b:58:84:d0:d1:ca:40:b3:82:76:2c:73:8a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Sep 25 20:01:29 2026 GMT
Not After : Sep 26 20:01:29 2026 GMT
Subject: CN=6c640b0439e2c7ca310e339b06b05504637fb8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:5b:43:5d:1c:ce:71:71:f5:b3:c9:4d:1c:
97:76:8a:3f:0a:91:66:d1:d9:f2:11:3a:bb:65:66:
69:0f:4d:2f:49:6c:ef:fe:51:5a:f1:b5:a0:e0:18:
16:df:38:a1:ef:87:08:e8:dd:7e:06:54:22:57:fe:
04:8f:01:6d:92:1e:51:1f:e0:1d:11:15:78:ae:1c:
43:01:a6:50:22:18:80:ca:64:30:d5:7c:c9:63:99:
0d:ae:2d:de:d0:2f:fa:a7:70:64:60:8c:e6:ad:ae:
fb:b6:8c:c1:7a:61:87:8f:80:7e:a7:2d:46:7b:50:
97:9e:ba:1d:04:6a:2e:d5:b2:f2:39:f3:f6:d3:37:
34:04:cd:33:8a:e7:fb:ec:f2:f9:d1:7c:39:08:9e:
6e:08:e7:bb:9b:c6:e4:e8:0b:d3:a8:e0:3e:ea:93:
6c:c8:c1:d1:6c:84:ca:0c:cc:e0:fa:73:ea:a5:62:
10:3e:d8:3c:d6:ad:4a:cb:17:1a:ad:80:c5:71:5d:
23:74:b1:dd:ff:94:46:78:f6:44:31:95:8f:86:b6:
57:dd:bf:fa:6a:fc:d8:8d:bf:5d:c9:d0:a6:05:29:
5e:c9:70:90:d1:cf:30:e9:04:23:45:e7:c2:71:0f:
b0:72:a0:20:e2:65:34:d5:42:67:cf:c9:73:33:71:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:0B:04:39:E2:C7:CA:31:0E:33:9B:06:B0:55:04:63:7F:B8:B4
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:f4:21:e5:ac:c9:09:07:0b:05:13:c6:09:c5:69:4a:46:
c4:21:69:70:d5:79:79:af:60:ab:f6:aa:a0:7e:1e:82:81:d1:
98:86:f5:7f:6b:14:e6:75:72:4a:14:c1:08:b3:2b:79:8f:d8:
42:f5:50:6a:d9:da:a4:b6:48:72:e2:e1:ef:bf:f5:33:fb:62:
6c:8c:4f:2d:34:4f:83:0c:17:be:ea:88:56:e5:f4:1e:94:b9:
38:0d:40:c9:cf:6b:c6:f6:be:1d:57:90:ab:19:22:23:d7:db:
14:cf:07:e6:60:46:ed:48:63:6a:4a:40:20:0c:c9:eb:af:94:
33:dc:35:04:b3:a9:b3:2b:fe:fa:37:59:17:83:72:e4:da:bf:
38:2f:99:ae:72:6e:43:94:bd:a6:91:2e:dd:0a:54:06:7b:4f:
db:90:ad:49:03:eb:23:a9:de:6f:09:2c:36:57:14:5c:0b:16:
d7:9c:81:3b:32:b3:0d:4a:e4:6f:a8:7b:f5:6b:f3:2b:77:83:
2b:a1:3a:95:1a:12:ed:5b:bd:5c:9d:24:3e:1c:ca:19:00:d5:
0c:92:e3:ef:0c:bb:28:7d:1f:ff:60:7e:ca:a9:f9:88:07:cc:
0d:9c:b7:aa:83:63:dd:b8:e3:f5:fa:9c:5d:a4:5a:e2:5a:43:
8d:16:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:59 2026 by rpki-client