Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: OsEXSnYV1L4cBJXiwWx4Dt3HTlhdLCDS5Ov/BDJE8ek=
Subject key identifier: 6E:3F:5E:41:6D:08:6A:B0:A4:EA:49:87:EF:4D:2E:C3:76:9F:80:8C
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A1476022B78DA7400BC5F00E19CE04F897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1700
Signing time: Sat 17 Oct 2026 01:00:44 +0000
Manifest this update: Sat 17 Oct 2026 01:00:44 +0000
Manifest next update: Sun 18 Oct 2026 01:00:44 +0000
Files and hashes: 1: SILmdN_k0hAwwcd5aO58JpMMhcU.roa (hash: nQR9MafvgRfhU+4mU9GSk9xhrq7Cg3nhVrjZkbbiQrI=)
2: W6xDj92QB_yTt67MOz4LRRk37bc.roa (hash: LxBOm9LqiQOWvpCTWjabQmnHLwm7xyywKss1rcgcfNA=)
3: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: NW3l1eQnwn1F8ymLgKomEFpo/X1m6Tb1VSpPR1SSQVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:22:b7:8d:a7:40:0b:c5:f0:0e:19:ce:04:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Oct 17 01:00:44 2026 GMT
Not After : Oct 18 01:00:44 2026 GMT
Subject: CN=6e3f5e416d086ab0a4ea4987ef4d2ec3769f808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:c8:37:cb:aa:87:69:4d:f7:ef:a5:16:34:
6e:0b:ed:c7:75:6e:21:7b:09:d7:d2:85:01:48:14:
29:1c:9d:3d:98:a6:ae:ea:48:65:48:b2:23:b0:87:
a8:ca:b3:aa:66:9e:81:ee:1a:c8:f3:00:27:6e:0d:
03:34:27:2e:e7:c8:63:ec:f8:24:cc:ad:c6:d5:cc:
bf:11:28:55:ab:ea:96:f5:f2:39:5c:d5:d1:d8:eb:
c5:42:7c:00:5e:f1:ec:4b:fb:99:22:40:a0:47:38:
59:ab:05:42:ce:a1:d6:5e:bd:b9:56:bf:9b:e9:d7:
fd:b9:97:67:0a:8e:b2:e9:37:d9:61:f8:2b:63:00:
ef:58:02:42:10:5c:9d:fb:f4:85:8c:b0:6b:30:18:
eb:fa:c8:90:32:16:bd:8c:4c:eb:34:ed:82:6a:5c:
30:0f:a7:00:e2:56:10:b8:78:99:f8:d3:ae:fd:52:
3f:c8:5b:93:8d:d4:58:99:2c:74:36:98:af:a5:ac:
e6:27:52:27:e0:b8:ea:72:fa:00:6e:0f:72:59:3f:
ba:38:06:d8:73:d3:76:0e:8a:09:f0:fc:61:18:3b:
14:48:3c:3c:d9:77:e9:12:1c:35:60:1c:8f:37:43:
7e:bb:26:f2:0a:f7:a2:4e:aa:57:04:68:d1:2b:56:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:5E:41:6D:08:6A:B0:A4:EA:49:87:EF:4D:2E:C3:76:9F:80:8C
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:22:ed:30:db:30:f4:fd:70:23:2f:c4:71:75:2b:2a:2c:
1a:f1:cc:55:7e:f9:a7:a4:c7:7e:f6:29:ff:86:2d:1f:29:51:
71:fd:e1:36:4c:d0:8c:b3:69:07:fa:d9:5d:15:59:0c:5b:06:
7a:16:35:d0:40:6b:31:e4:9a:e7:f5:9b:b4:70:96:36:a1:61:
15:73:aa:21:57:bf:91:c5:25:d6:a0:6c:be:52:30:dc:89:d2:
d8:a7:37:5a:b0:3d:82:f3:77:1d:26:dd:56:17:ba:77:6e:b2:
03:0f:fd:6c:47:2b:dd:ef:cd:67:15:8b:e5:a0:12:e4:35:fb:
3c:89:3b:f6:ca:b7:aa:23:df:db:b1:27:21:7d:cd:c8:ae:53:
b1:c2:37:cf:d0:1e:b5:16:f9:b6:d2:1a:9b:40:10:23:b2:1c:
93:75:fa:5d:70:99:93:c6:ed:b2:16:6c:75:0f:85:13:0b:cb:
c8:eb:ba:c5:2b:29:c3:5e:d6:e3:c8:df:ad:d0:eb:54:7e:0c:
a3:e3:b6:0a:c0:82:18:e6:5d:d9:ae:42:d5:6b:f9:c9:35:14:
09:de:43:2b:cb:c6:dc:9d:7d:46:47:bf:4e:84:3c:ee:ab:9c:
44:bd:9b:67:aa:ae:44:a4:ce:69:27:68:85:e8:54:b3:cc:6f:
38:13:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:38:59 2026 by rpki-client