Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: F9jNFsXtcjNSYugOH0ssvGY5oBbzXbPMP1Ov8zU36ao=
Subject key identifier: 5D:68:FD:05:9E:5E:0D:C0:C6:8F:9C:30:09:30:47:97:A2:CB:34:29
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01A0EB89E286208218A05F20303C923336FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 05:01:17 +0000
Manifest this update: Tue 29 Sep 2026 05:01:17 +0000
Manifest next update: Wed 30 Sep 2026 05:01:17 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: XfnbBUQcwU9WBpscj1SSI58HzuYPOVKlCmeBriYtPk4=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:e2:86:20:82:18:a0:5f:20:30:3c:92:33:36:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Sep 29 05:01:17 2026 GMT
Not After : Sep 30 05:01:17 2026 GMT
Subject: CN=5d68fd059e5e0dc0c68f9c3009304797a2cb3429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:52:b1:75:a0:8a:bb:a1:56:74:b4:fd:c1:
8c:97:9e:84:46:f2:a4:9c:ad:6f:cd:93:8e:44:ed:
dc:7e:80:d3:73:4e:70:d8:21:a6:6c:3c:65:7f:a6:
70:10:d4:1b:84:2b:ab:2f:d0:49:e1:ad:d9:c3:10:
ae:bd:94:91:3b:83:3c:fd:11:de:33:cd:a4:7f:7d:
89:4f:81:b2:3e:9b:fd:af:e7:d8:ed:78:8e:53:38:
1f:23:7f:00:73:7d:9f:37:de:db:a6:68:76:20:9b:
f2:a2:bb:1a:d5:2f:e2:ab:7f:98:02:84:38:c3:65:
65:f7:0c:3c:8d:7d:79:2d:ae:37:e8:28:3e:fb:5c:
48:58:aa:09:1c:66:97:37:df:2c:c2:2c:6b:74:80:
a3:17:d8:80:32:9f:42:53:0e:4a:f3:d3:fc:1c:09:
fd:40:67:41:8d:a3:0a:36:01:f0:bb:b4:d7:de:58:
1b:1e:89:e3:78:8d:5e:4b:8a:78:c1:5e:2f:83:eb:
f0:76:1c:b4:68:20:cf:78:a0:7a:cf:6a:cf:58:c0:
c9:85:d5:77:e8:97:72:a4:1c:06:98:69:5d:aa:e7:
74:d4:78:85:64:d2:1d:de:d8:42:9e:1d:28:f2:d0:
a7:c3:37:a1:cc:59:1d:fb:d6:1e:e5:8c:ab:2b:cc:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:FD:05:9E:5E:0D:C0:C6:8F:9C:30:09:30:47:97:A2:CB:34:29
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e8:33:93:3f:5f:29:77:fb:7e:71:01:60:30:c1:d6:e0:19:
95:1f:bb:d3:c2:17:7b:f5:5a:85:51:75:a4:67:53:0b:15:3d:
b3:4b:4b:ef:51:52:f5:9f:86:c0:99:89:2f:5c:b3:a5:74:54:
7c:a1:07:61:2f:b2:fa:5d:aa:d1:1f:26:91:11:cf:05:cc:8f:
85:f3:5f:96:b3:1c:c2:39:45:bb:3f:25:29:e6:12:1c:e9:67:
e7:f4:a6:c1:1b:69:40:c5:e6:bc:46:63:79:40:82:25:a1:96:
2b:1c:bd:23:a3:32:a7:4d:20:ac:ff:b6:f1:92:17:c3:0f:d9:
66:87:d0:60:c8:50:56:a0:3e:ed:3d:b4:20:7a:d9:0d:56:c6:
c6:a1:cd:37:67:a2:38:f8:cb:aa:bc:6a:3e:dc:50:04:fa:e0:
c0:3d:f5:4b:98:cf:00:97:82:11:16:7c:d0:7e:fe:22:43:44:
9b:3b:c0:88:84:09:da:11:fd:a9:3d:a2:ed:d4:11:5d:b4:e3:
1a:14:21:4c:3c:92:20:d2:9a:6a:c2:e6:1a:ac:53:e7:0b:32:
58:bf:a2:8c:2d:ba:e3:09:f1:e5:9a:d0:7f:ec:5e:b4:c7:84:
c8:fc:fe:86:53:f5:1b:84:6b:05:6d:10:1d:c3:7c:cd:99:1e:
fb:c1:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:10:14 2026 by rpki-client