Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: wZEx4BzgcKri3qpLvSixuornw8lOLrXmpcw1n/kJIog=
Subject key identifier: A0:59:0D:4E:6B:42:AD:CD:7C:89:FA:8D:E5:E2:9A:7E:05:BB:12:F6
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01A0D124F645E69952512A343EB7BCF6F066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0677
Signing time: Thu 24 Sep 2026 02:00:55 +0000
Manifest this update: Thu 24 Sep 2026 02:00:55 +0000
Manifest next update: Fri 25 Sep 2026 02:00:55 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: Pf4ocK2KiaHPqeW5VY+EwMgmGQ4K49hSc8Vqsjf0G68=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:f6:45:e6:99:52:51:2a:34:3e:b7:bc:f6:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Sep 24 02:00:55 2026 GMT
Not After : Sep 25 02:00:55 2026 GMT
Subject: CN=a0590d4e6b42adcd7c89fa8de5e29a7e05bb12f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:e9:ae:ee:92:91:2f:66:bc:d7:a3:e5:89:
ef:7e:7c:c7:66:9a:1b:d8:13:89:50:94:b3:3d:61:
d6:38:55:67:5f:43:80:97:ef:ad:45:4d:ae:99:94:
10:8e:f6:57:5d:39:aa:55:9d:35:cf:68:8a:bd:3b:
5f:d6:f6:70:6a:14:71:12:19:31:5b:18:70:43:8c:
1e:bf:83:09:3a:49:99:0e:ee:c8:54:91:58:57:b3:
ba:7a:57:4f:f7:1e:d5:0d:b9:d7:1e:df:a2:cf:e1:
3c:23:43:8e:99:cd:21:b0:f7:5b:31:24:71:5e:9b:
9f:da:cd:83:f0:b4:19:04:4f:2b:94:85:d4:d2:8d:
d7:44:4e:45:a0:d1:41:24:52:30:a1:a5:40:e8:45:
cd:e5:c5:17:f2:0e:2b:6e:eb:0c:c2:ff:52:75:c5:
1f:1e:4d:fe:b9:07:1c:17:4c:ca:1b:c9:0c:12:5c:
08:d9:eb:72:ec:d4:d3:de:08:ca:94:d5:8c:f3:f0:
cf:26:e6:95:c5:6d:e2:ba:b2:20:10:67:29:d2:f3:
56:e3:71:0a:54:7d:42:57:e7:a7:59:c0:ec:b2:e4:
09:a6:c2:8f:cb:60:01:b0:c8:04:33:ed:2e:34:33:
d4:b6:4e:c4:49:78:57:c3:17:41:e9:02:81:32:4b:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:0D:4E:6B:42:AD:CD:7C:89:FA:8D:E5:E2:9A:7E:05:BB:12:F6
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cb:4c:f8:0c:69:51:cc:25:f8:35:1b:c4:e9:10:3a:82:3b:
6b:a0:07:70:83:34:46:9e:a8:1d:c7:37:37:a2:c1:4d:94:4e:
40:7b:49:5d:8f:ff:b0:a7:64:03:33:2b:89:6e:29:40:00:45:
a8:73:c6:55:f4:f6:6e:dc:47:4b:63:a3:15:36:38:3a:0a:11:
70:88:9d:f8:df:af:04:c5:a0:9e:06:18:03:1f:80:cf:70:f0:
da:11:50:9e:65:7c:45:f0:31:d7:bf:82:bc:02:64:3e:72:83:
19:35:aa:4c:01:23:ba:5f:74:be:19:d2:ee:f7:fc:af:b0:a3:
ef:aa:09:ab:2c:28:0f:24:e2:f3:49:bf:b3:a9:b2:24:33:38:
6f:11:49:1e:26:cb:76:97:13:c8:21:8e:98:fb:c2:22:50:e7:
84:23:9c:7d:23:39:52:7e:01:e3:bb:30:55:ae:70:d7:92:30:
fd:07:a9:d6:f2:b9:bd:6b:1d:9a:b1:06:1a:e3:62:e2:19:21:
4b:26:8f:53:1a:0c:c1:4d:5b:e4:e2:8d:ca:26:8f:b5:9d:03:
c1:8c:5d:d4:19:22:bb:be:9a:1f:b2:49:f3:16:15:c9:c8:90:
96:76:2c:d9:83:8b:1b:0c:08:18:a4:dd:3b:ae:66:36:f3:a2:
54:67:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:29 2026 by rpki-client