Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: nFLO+XD5n3hlk6zSM6yUpkFnjyXzvZnsoqWz1OToa7E=
Subject key identifier: 0E:54:32:E9:29:16:63:AA:A5:B5:92:18:9A:86:16:09:A8:6C:E2:E6
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 01A0DF8577721CC25E947770D9760FE9AF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 02D7
Signing time: Sat 26 Sep 2026 21:01:00 +0000
Manifest this update: Sat 26 Sep 2026 21:01:00 +0000
Manifest next update: Sun 27 Sep 2026 21:01:00 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: W9kImIH1MTEPXfq5N8NxvUFdOZcRwl+/4769xN/6pm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:77:72:1c:c2:5e:94:77:70:d9:76:0f:e9:af:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Sep 26 21:01:00 2026 GMT
Not After : Sep 27 21:01:00 2026 GMT
Subject: CN=0e5432e9291663aaa5b592189a861609a86ce2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:da:84:ae:f0:09:74:c8:3c:14:13:a5:1f:
ec:94:30:56:2f:ad:c0:70:ff:2f:33:08:7f:a6:2a:
dc:43:19:cd:7c:3b:c6:95:7b:39:d3:4b:b0:38:e8:
8f:2e:d2:3d:07:fa:de:d8:3e:63:7a:90:f1:ef:4f:
23:90:86:e9:90:0c:e6:df:4a:1b:3d:18:5c:b4:0c:
4f:1b:86:27:a6:e3:f8:e9:65:86:7e:02:e5:94:e5:
38:2a:20:02:5e:9c:fd:fd:be:30:48:df:f0:48:dc:
13:2e:86:7c:4d:65:81:11:ec:71:43:5a:65:f6:bf:
0d:bc:21:9b:5a:c1:3a:8b:3d:22:78:98:36:e4:1e:
73:f4:a4:fa:dc:f1:dc:10:d6:73:d0:b4:d7:74:68:
03:c1:bd:b2:3a:4c:40:bf:ce:c0:ca:01:cc:93:d6:
85:be:ab:ad:1a:e6:53:dd:71:35:cf:ab:c4:5a:23:
b8:48:e7:54:f5:9b:25:91:a4:1d:80:e9:52:2c:11:
1b:92:ef:de:8f:1c:26:49:94:af:f7:9e:84:d5:dd:
f0:15:a8:6d:bf:4e:24:bb:e3:1a:b7:4e:20:4b:e2:
db:6a:c0:67:ad:ed:75:55:fe:a7:14:2a:36:c2:5f:
b8:70:47:3e:3a:97:62:70:ce:0e:48:f5:3d:c0:fa:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:32:E9:29:16:63:AA:A5:B5:92:18:9A:86:16:09:A8:6C:E2:E6
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1c:e9:66:d0:2e:7d:e1:da:ae:bd:a4:fa:af:e8:e9:58:9e:
9b:30:af:5b:e1:2d:4b:7a:e2:14:fd:e1:28:68:00:68:00:b4:
01:e2:1f:74:40:61:2c:e1:fe:d4:0a:f0:0e:fd:8b:b7:16:2a:
61:5c:32:4c:00:42:07:4d:c1:93:9b:a7:7a:07:74:17:96:03:
56:b0:d7:a2:b4:cb:11:40:f1:c3:89:8e:80:c7:ac:5e:54:0f:
7b:e0:5a:56:e6:29:66:4f:25:d1:1a:91:0b:69:e4:d6:9e:63:
b3:2b:cb:29:28:48:18:78:ed:f2:56:80:b3:ad:e8:b9:59:5b:
13:b8:2d:29:28:fa:65:1d:f8:22:0c:f2:f5:64:6e:48:b3:e5:
f9:04:31:75:d3:b2:6b:92:69:b6:d2:60:6a:06:5d:de:03:fd:
d5:be:7d:a6:05:94:76:bc:91:ca:a6:fd:98:df:b2:77:53:05:
58:fa:b8:d9:16:5e:59:07:a5:fb:24:97:2c:9f:9c:5d:2e:91:
cc:c5:47:75:d6:52:13:25:f4:72:b0:76:64:4c:23:ea:87:cc:
f4:05:2c:82:bc:f5:5b:69:cb:c6:b1:bf:cc:4a:20:54:f0:7b:
81:36:8e:af:e5:2a:4e:d3:6c:db:7c:9b:40:c3:cd:d7:49:4f:
2f:22:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:04:34 2026 by rpki-client