Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: Mg1d/N7wBH0bIFhlNd0TVyWPupAi8hlhojq/k4D3huw=
Subject key identifier: 82:B7:19:EC:84:4B:33:BF:77:11:61:F1:BB:55:8A:07:91:BD:24:CA
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 01A0D07F61D4B8A5E6135AA910F02305E919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 07FD
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 7uHUEROuk+eJLbTQMrJho1Bjn0Ij8FiLwzGIne0u1K8=)
4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:61:d4:b8:a5:e6:13:5a:a9:10:f0:23:05:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=82b719ec844b33bf771161f1bb558a0791bd24ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:ad:73:fe:2f:5e:0a:c7:be:6a:26:d5:cf:
8c:1f:43:68:5f:e3:de:30:6b:7f:f2:a7:b6:4d:c9:
53:ba:53:8b:40:e5:17:d7:c5:d0:ed:f6:96:b7:97:
45:3b:11:92:89:5d:c0:bb:4b:4e:db:70:cf:8f:66:
38:fc:e7:7f:dd:64:13:0e:1a:f4:ed:a1:0e:32:fa:
ff:97:63:fa:4b:69:87:2a:3f:59:51:00:10:01:98:
ef:3e:66:f7:56:2c:fb:23:3d:17:b6:0a:78:58:95:
62:71:84:85:82:42:0b:56:99:35:52:c5:05:ca:67:
02:ba:15:c5:7c:26:c8:b8:79:54:ca:87:4b:52:36:
12:f2:61:af:07:36:ce:4a:2e:eb:1a:5e:fb:1a:a5:
b2:33:9b:3a:73:12:76:84:6e:a0:eb:5c:51:05:7d:
33:9a:87:4c:34:00:0b:13:04:4d:94:3c:e7:12:da:
d3:d0:ec:b5:8a:4a:28:09:a5:91:c2:ab:38:32:3a:
c3:43:d6:5b:3a:7c:cc:18:4c:dc:47:5b:ec:11:13:
96:c2:b6:33:41:e4:62:89:64:29:23:31:6c:af:5c:
d8:22:e2:57:6f:18:c3:36:32:fc:88:59:10:15:ba:
87:00:61:eb:f5:5a:0e:9e:c0:02:de:43:82:d6:29:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:19:EC:84:4B:33:BF:77:11:61:F1:BB:55:8A:07:91:BD:24:CA
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c2:c0:41:03:96:aa:f3:59:b3:b5:c6:c4:00:00:7f:b6:74:
2e:5f:9e:1c:94:72:f7:2f:eb:83:d1:5e:ef:9a:df:de:3a:24:
ca:57:f4:b0:36:5e:5d:64:b9:17:06:66:8d:47:bf:e0:bd:92:
86:5b:68:7a:f4:10:e4:00:ca:6e:95:1b:1e:f4:b5:0a:5f:e7:
1f:0f:cf:ef:9a:d0:55:52:48:82:a9:e3:12:d3:81:e0:30:ff:
ab:cc:78:d6:87:20:ac:48:3c:48:b0:2f:c2:de:c1:fc:d1:9b:
d8:f5:79:82:24:73:6c:a6:1d:1d:f4:57:b8:3c:5f:6a:1b:f4:
fe:c6:d1:5f:fe:26:a6:c8:a5:d0:73:2e:18:97:37:97:07:46:
b5:f0:6e:b5:18:53:f5:4f:2d:34:c9:48:13:2a:17:51:f6:d3:
b2:63:e0:60:67:2d:cc:41:13:e3:25:65:6d:1d:32:ac:85:7d:
cf:78:67:70:f2:f5:d6:fd:3d:02:e0:43:7e:34:44:fb:fa:36:
a4:9f:38:08:ed:fa:99:78:5f:e0:92:db:bf:a5:06:00:17:67:
0a:ed:62:5a:16:97:f5:39:29:a4:46:23:98:bd:f0:4d:68:8e:
09:99:f6:c3:5b:b6:4f:50:99:cc:9c:11:e9:23:70:90:c1:53:
fd:26:b8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:05:14 2026 by rpki-client