Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: 2AA+qVyVA+V/XVq45l/tF1Fpu0HMoBVigDvea9u8hho=
Subject key identifier: 60:54:A1:83:C5:81:AF:F4:A0:00:D9:06:D6:F8:CA:69:7F:3A:63:AC
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 01A0FCB46A6D3C4F3B390297BECDF47FACE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0F12
Signing time: Fri 02 Oct 2026 13:01:17 +0000
Manifest this update: Fri 02 Oct 2026 13:01:17 +0000
Manifest next update: Sat 03 Oct 2026 13:01:17 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: Uwh/MZck7YBjKZ2TEO1hHq+MTacJbly6XfBeFb0+3AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:6a:6d:3c:4f:3b:39:02:97:be:cd:f4:7f:ac:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Oct 2 13:01:17 2026 GMT
Not After : Oct 3 13:01:17 2026 GMT
Subject: CN=6054a183c581aff4a000d906d6f8ca697f3a63ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:20:e5:3f:74:80:a3:09:2c:cd:62:af:6b:
11:6d:2d:cd:dc:2d:a7:9b:79:a7:3c:74:f7:b8:c6:
e5:ad:e3:b1:b0:47:1a:eb:66:b8:65:67:d5:c8:d1:
c5:30:27:22:36:e2:57:ec:74:20:9b:48:1e:c9:9a:
f1:18:2b:21:cb:ae:33:e7:2f:68:8e:0b:c3:b1:0a:
11:cc:b2:c9:36:01:2a:f9:ff:be:51:79:c3:45:d8:
71:57:ec:8b:62:65:33:75:59:62:c5:95:cb:a2:39:
0f:9b:45:c7:bf:1c:da:ac:14:8f:bf:79:60:df:d6:
f9:93:22:3e:a8:b0:ae:39:e2:27:5a:68:60:d3:dd:
af:c1:f1:68:3b:7a:eb:a2:30:b7:33:cd:3e:c5:c1:
d1:cd:89:f0:52:47:10:27:4a:e3:29:69:eb:a9:aa:
17:8a:b4:d3:fa:23:16:ce:60:6e:73:39:64:9a:30:
b6:4b:e2:10:f1:90:b6:09:5a:32:10:31:cd:ac:d4:
76:b3:f5:e2:cb:5d:97:0a:4c:21:2f:f7:ca:3d:aa:
bb:48:37:aa:83:cd:ca:1a:04:36:3f:8b:75:1f:2b:
c7:5f:c0:5d:8d:cf:d9:22:2e:7e:38:04:6a:39:71:
e1:69:10:a0:62:1c:a0:09:37:47:76:43:dd:91:a8:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:A1:83:C5:81:AF:F4:A0:00:D9:06:D6:F8:CA:69:7F:3A:63:AC
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:af:d7:a4:8f:36:04:0a:7f:8a:02:ca:8a:12:76:9c:fa:6a:
ee:64:f5:d5:53:82:95:df:4f:74:19:99:52:90:93:b6:5e:b7:
58:a0:a6:ee:1a:31:65:b6:08:b1:fd:03:96:5d:51:ef:ef:98:
5a:58:12:9c:fa:47:ff:a9:7f:f1:6a:38:01:2c:9a:b5:b8:d0:
28:ea:58:31:75:9a:6e:27:fa:16:ff:c7:19:ca:5d:b4:fe:4c:
bd:dc:25:76:82:50:58:56:52:50:9e:d4:17:85:17:23:20:b0:
5a:2a:e9:19:06:31:c1:6a:05:b2:7f:bd:1a:6d:5d:7d:a1:4a:
e1:a2:af:26:2b:5b:96:e5:cd:98:92:f2:9d:89:5c:b0:fc:c0:
40:80:52:f6:f1:05:a5:a6:7d:ce:91:4d:8f:e9:1b:90:ef:3f:
f8:dc:8f:fb:94:fd:99:73:fd:7f:fe:c8:e5:61:de:02:cc:ed:
93:df:91:c9:64:9f:b2:2c:95:db:cb:da:24:26:40:10:56:f3:
f4:7e:52:b7:14:c7:be:27:06:44:d2:2e:bc:55:7a:43:a6:4c:
44:7c:3a:60:b4:4c:a8:28:4f:02:4a:fd:6a:ed:37:52:35:0a:
f4:11:7d:8a:2a:8c:de:81:d4:d7:62:57:54:cb:1e:ad:fc:34:
b3:33:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:57:09 2026 by rpki-client