Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: Tl5HoripQjUISrZNT79/5dsKN8vn28SfbA5euc1x3XU=
Subject key identifier: D3:90:40:AB:94:DA:20:F0:DE:AC:2A:53:F5:36:BF:83:3D:2F:0A:61
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01A0CF360D0750C0ED61D14AEB53E7EBD17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 17:00:21 +0000
Manifest this update: Wed 23 Sep 2026 17:00:21 +0000
Manifest next update: Thu 24 Sep 2026 17:00:21 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: ZmoMPdH7gtkLmvEAiJxHY4GIrnUrp2jb7lbZAkwVeQk=)
2: sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (hash: 71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:0d:07:50:c0:ed:61:d1:4a:eb:53:e7:eb:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Sep 23 17:00:21 2026 GMT
Not After : Sep 24 17:00:21 2026 GMT
Subject: CN=d39040ab94da20f0deac2a53f536bf833d2f0a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:c5:84:d2:32:94:63:66:4e:00:c3:03:20:
36:f3:00:da:21:d7:1d:74:36:07:ad:34:41:4c:04:
74:d2:b6:4a:bb:3f:9f:70:00:6f:d3:e1:aa:6d:3d:
62:7e:c3:16:e8:0d:3a:5b:eb:96:23:6a:58:5c:84:
32:8e:5c:3e:57:b0:e1:23:7c:78:31:d0:41:67:89:
55:dd:02:3c:fd:e2:7c:fd:b9:89:44:ee:76:4f:ae:
c7:b0:98:f8:02:d8:00:a4:73:50:06:bb:87:57:26:
43:8e:67:1c:ff:9f:fa:2d:ec:93:d1:3d:f5:13:60:
a2:c2:91:a7:2e:1a:b7:b2:db:3e:15:7f:bd:e7:2b:
3d:af:10:43:8b:52:02:a8:07:43:cd:40:e0:68:3d:
f3:25:63:40:92:6a:24:65:40:b7:ca:f4:7d:27:e2:
92:9c:70:28:e4:80:66:69:2d:a2:04:c8:e1:65:34:
20:e9:00:be:6e:e6:92:18:0d:44:99:68:ea:32:37:
f2:27:ad:a7:b1:16:94:ba:9c:51:37:79:b0:51:48:
81:3b:49:78:a4:39:b1:13:06:88:72:26:b8:e5:a1:
79:a5:39:60:d1:03:3b:99:71:4a:f9:dc:41:a1:48:
c8:ee:3d:e4:07:0f:b3:6e:3c:4f:c1:45:7a:cf:67:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:40:AB:94:DA:20:F0:DE:AC:2A:53:F5:36:BF:83:3D:2F:0A:61
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:67:56:7c:13:e6:d9:42:e2:e1:f4:ca:f1:33:ed:0c:d5:
fd:f0:8a:10:0e:5f:50:67:fb:ec:fa:9b:9e:03:b0:09:dd:91:
84:f7:b0:3b:4b:21:f4:bc:d8:07:b3:58:de:0d:0e:7b:a3:b9:
79:27:69:3c:a9:b8:1c:37:96:87:52:02:2e:17:3d:e2:f8:4e:
81:89:26:48:9a:b4:e6:4e:13:8b:c7:35:77:57:35:d0:27:46:
32:27:fa:89:da:23:10:34:ef:5d:56:d1:8d:09:dc:ab:c6:aa:
09:bc:6a:5e:e4:ec:17:c6:0e:f5:18:32:6a:4a:d7:d0:d3:65:
9f:8a:9e:7b:c3:c8:dd:dd:51:6b:98:d2:58:8b:25:c2:3e:0b:
d7:70:d7:41:e4:29:83:7e:64:19:f3:9c:4e:9a:cb:da:09:1f:
93:0b:20:2f:de:65:06:75:a2:96:d8:0f:1d:0b:85:a0:c2:d3:
4d:62:f2:a8:28:4a:40:46:66:42:df:11:39:c5:f7:df:f5:8b:
bc:17:a9:b3:44:10:37:29:f2:a5:c2:ef:3d:9d:d6:a0:70:f5:
ba:83:28:ae:7b:21:9b:0c:59:f9:87:aa:8c:1e:2d:52:f6:16:
03:19:d2:25:1a:b3:09:88:7b:8d:7d:07:48:53:f1:cb:a5:9c:
35:e9:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:59 2026 by rpki-client