Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: 2o/CmrA6oJpj52dS430jpucef6ssIuaqzUh1WtJ2c98=
Subject key identifier: D8:28:1D:CE:1C:8E:66:87:8E:DD:6E:30:12:93:7B:E8:96:4D:DD:56
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01A0FF47EE1DE2D59FCFE5E9645C1E12B5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1A88
Signing time: Sat 03 Oct 2026 01:01:39 +0000
Manifest this update: Sat 03 Oct 2026 01:01:39 +0000
Manifest next update: Sun 04 Oct 2026 01:01:39 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: HtL8vgXphDIdSWw6OFgPGlk3vbv7/RiLg4r+i9zsOGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:ee:1d:e2:d5:9f:cf:e5:e9:64:5c:1e:12:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Oct 3 01:01:39 2026 GMT
Not After : Oct 4 01:01:39 2026 GMT
Subject: CN=d8281dce1c8e66878edd6e3012937be8964ddd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:f3:96:64:15:59:c8:d3:85:0d:85:fd:a5:
17:ea:cc:03:7e:45:9e:8a:d0:6f:58:6d:bf:70:2e:
60:a2:b3:0a:92:8a:7d:3a:ac:c0:b2:f2:12:72:21:
f6:3a:36:1f:df:f8:81:af:f0:01:05:40:02:49:ed:
e5:0a:42:e4:fa:d6:0f:66:71:f5:87:5b:b3:0e:79:
55:f8:62:68:19:42:49:a6:7f:f5:40:a2:ca:5e:48:
6e:92:6f:3a:d0:07:6a:23:39:ff:19:65:ac:1d:73:
dd:52:08:0c:f8:cb:68:89:ee:fd:aa:95:07:89:b1:
21:c5:a9:bb:69:fa:4d:93:79:34:ce:03:fe:8e:59:
59:41:57:6d:8a:e7:24:e6:73:87:07:1d:fc:77:51:
ae:e6:c9:00:c2:41:76:ef:7d:8a:7e:10:38:89:6d:
c2:bf:3e:37:ea:41:2f:bf:e0:57:fe:4c:b0:c5:e0:
cc:f2:06:51:6c:fa:9d:26:2f:d0:bd:2d:63:ce:cb:
c6:e3:d3:dd:d7:36:20:15:88:68:32:e9:31:11:71:
49:a6:57:90:3a:82:95:4a:11:9b:90:32:2c:c9:d6:
f5:41:4e:fe:f6:5e:ab:6a:e0:93:f6:d5:62:4f:ba:
f8:9c:23:f7:44:b0:64:69:ea:5b:c1:45:86:4d:99:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:1D:CE:1C:8E:66:87:8E:DD:6E:30:12:93:7B:E8:96:4D:DD:56
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:85:fb:73:f1:c9:0d:83:10:21:27:26:79:32:d1:59:e4:
7b:b4:c4:de:b4:7c:ed:82:01:d6:0f:d4:66:0d:16:76:73:e4:
da:a5:14:c6:a8:b5:56:4e:0c:1d:e0:1c:5f:33:c1:31:24:ef:
35:6a:bf:be:f1:71:44:1c:8a:49:1d:de:5b:87:2e:72:75:05:
64:79:1c:ac:fe:21:99:4d:a0:25:4e:b0:f9:f3:ba:af:24:df:
48:8e:22:fb:84:c6:e7:b9:fc:60:2a:e0:95:99:30:5a:ce:60:
92:73:97:29:f7:6e:69:94:eb:89:ca:b7:e5:28:ac:e2:eb:00:
38:f0:3e:67:ea:27:c2:6f:80:e6:9b:d6:af:f8:94:bc:2b:4d:
c3:45:04:c3:ca:5f:c7:87:49:b5:40:6e:9b:57:d9:1c:7a:4c:
dd:ed:96:10:6d:1f:e8:fe:4d:c2:57:95:90:5d:e4:7f:5e:b3:
f8:fa:b5:82:b2:2a:75:fd:3c:68:9c:47:6f:19:b1:ba:91:65:
6f:71:d5:da:1f:ae:9d:bb:13:69:ec:fd:6d:cd:72:9d:93:c2:
ed:cd:0f:68:d2:d7:3d:ce:eb:82:a5:18:2f:1d:4b:ac:c2:45:
3a:7f:29:e2:3b:e1:7c:bb:22:a3:df:8c:2e:ff:b9:6f:f7:b9:
9a:78:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:13:34 2026 by rpki-client