Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: nklN3XDSt2SOGi2v0T6IkRs37Kg6C2qRpxjBRyg3Y0w=
Subject key identifier: 32:4E:27:4E:69:C4:99:44:21:EE:F5:2B:A5:FB:D0:89:D6:6F:D0:C4
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019F91DA3DF123A3F57AB3E73204F3B83355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0CB8
Signing time: Fri 24 Jul 2026 02:00:26 +0000
Manifest this update: Fri 24 Jul 2026 02:00:26 +0000
Manifest next update: Sat 25 Jul 2026 02:00:26 +0000
Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: kL7OtQYdAlCijjTFxq8R7icVFPofwcGnQewLyzG1DfA=)
4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:3d:f1:23:a3:f5:7a:b3:e7:32:04:f3:b8:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jul 24 02:00:26 2026 GMT
Not After : Jul 25 02:00:26 2026 GMT
Subject: CN=324e274e69c4994421eef52ba5fbd089d66fd0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:44:c1:b4:68:ca:df:ec:5a:f8:2d:48:39:
ed:ea:2a:d9:fa:8a:42:e5:f4:3d:49:c1:28:59:04:
a4:b7:b1:0c:c6:23:85:b2:c3:6f:34:be:89:6f:0f:
98:1b:58:04:86:17:47:a5:34:4c:3f:1f:3c:3b:f7:
58:9a:39:37:e9:c3:1d:96:13:11:3a:12:47:4d:40:
d0:14:76:f7:4a:dc:ef:2f:f2:a5:fb:9b:2e:4f:d1:
00:1f:03:8b:7b:c9:48:62:01:da:c0:2c:83:c5:13:
c6:ed:6b:55:b6:b0:f8:c2:e6:d5:69:c0:3b:37:f5:
2b:84:59:18:45:03:04:40:9f:60:b6:f8:99:8b:47:
d6:0a:32:37:ab:e6:13:ff:1e:fa:bd:f0:70:c7:cf:
a8:65:bd:c6:2d:9a:76:6f:a3:6f:a4:63:55:3a:f3:
32:b6:8d:3e:80:bc:ac:b5:04:df:e0:17:8d:2e:c3:
80:29:45:f9:10:e2:5e:57:20:86:85:d7:aa:84:50:
fc:a2:69:05:d6:99:f6:09:c7:e6:02:26:d2:27:eb:
9e:f6:1e:e1:95:98:22:44:ab:7a:bc:8a:25:7f:63:
11:6f:6f:9f:f4:15:f2:77:ea:5c:5a:06:08:1d:33:
99:b9:99:3f:92:dc:3a:1f:7b:37:00:52:b6:b9:74:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:27:4E:69:C4:99:44:21:EE:F5:2B:A5:FB:D0:89:D6:6F:D0:C4
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:78:54:d1:00:46:80:91:13:fb:97:13:60:12:7f:16:41:
f6:dd:96:6b:50:75:68:28:2f:67:79:37:ba:fe:2e:7d:bf:a2:
f4:94:73:15:cc:ed:08:e6:e1:bf:fc:94:43:e3:ea:96:ac:17:
60:61:47:c1:44:14:5a:d1:4e:1b:e9:cf:89:06:93:d5:d9:a4:
79:5c:b8:74:a0:2a:01:83:50:12:c0:da:65:b5:c1:5d:ff:44:
91:5d:51:2c:1b:5f:f2:fe:60:68:78:6d:7a:04:c5:d7:9d:a3:
42:2b:e6:a0:1f:85:5d:fb:11:ff:c3:ea:63:55:91:1e:3d:47:
b6:cf:7b:d3:1d:a3:a2:86:67:42:b7:29:65:a3:15:12:5c:0e:
19:d4:d3:fe:20:98:35:35:6b:fd:6c:ad:08:7a:50:98:ef:15:
d7:b7:6a:0b:82:a2:38:cb:91:66:22:99:b6:05:b6:23:30:7a:
1a:84:be:44:3e:5a:2b:1b:e8:17:08:c9:27:de:76:d9:42:6a:
8a:23:55:dc:f8:b8:a1:78:a1:5a:78:80:ba:dd:bf:d7:04:2b:
91:74:d1:30:b7:c4:7a:0d:80:20:58:26:38:82:60:6c:14:17:
81:75:f4:35:3e:f4:33:cb:23:bb:84:4f:53:2b:ff:48:0b:4e:
45:8d:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:12 2026 by rpki-client