Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier: mzmflVeb37RSKaldeUqEO8GhST3vliwGxueP312af8Y=
Subject key identifier: DD:A3:A2:FC:67:CF:49:CF:87:D6:27:43:58:26:90:A3:D9:E9:CE:43
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A0D5DDF08C5423CF0F43023E0A31D34AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number: 0278
Signing time: Fri 25 Sep 2026 00:01:27 +0000
Manifest this update: Fri 25 Sep 2026 00:01:27 +0000
Manifest next update: Sat 26 Sep 2026 00:01:27 +0000
Files and hashes: 1: 17iDKnMCPzF4M2zO_EMSp433meI.asa (hash: IN8ZKdhOHTTTwuLE4YUbOHesEFUMPKZ5d6iCYuk1AHk=)
2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: ppGf2sOxREk7OQSoKnDr2x05pEVnAS/RCE30md6iNFU=)
4: UmhoW5VfIZWn13lemnKnlkHqPAs.roa (hash: DGzNzZVpk2iVMIiaSeZ6GUmQLgsZVVAd5WcJYRZRIwU=)
5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
7: xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa (hash: ujOmUW3uo+zC741aDRMzurWVfgMAgyR64bWgpanO+zs=)
8: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:f0:8c:54:23:cf:0f:43:02:3e:0a:31:d3:4a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Sep 25 00:01:27 2026 GMT
Not After : Sep 26 00:01:27 2026 GMT
Subject: CN=dda3a2fc67cf49cf87d62743582690a3d9e9ce43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d6:31:d5:2e:47:fd:7e:fa:82:5e:13:43:
a2:10:34:3e:aa:64:93:f7:9c:4e:f9:64:48:6f:a4:
ce:30:98:4f:7c:b8:d9:ae:20:4e:13:bd:15:6c:db:
72:be:cb:49:23:5a:2d:81:b4:7c:30:d2:0f:1a:2b:
df:fe:c7:4b:52:cd:2c:6a:1d:7d:ce:a3:f8:ff:c3:
a2:d1:4b:82:12:5d:69:dc:ba:6e:2f:54:e4:91:94:
3b:6b:7b:49:01:0e:ff:c6:4a:f1:c4:fb:c0:9d:1d:
01:f0:50:41:32:71:ad:9b:70:a1:bf:13:0e:09:0f:
a1:ce:4f:62:6f:f9:03:26:0d:27:17:8c:3f:d1:73:
7f:41:48:bd:b8:31:da:a2:65:ea:13:e5:71:f4:86:
b7:31:b2:21:64:af:39:1f:14:a0:7c:ce:42:3e:a5:
c1:fe:0c:9e:d3:d5:36:f6:cc:37:73:05:31:64:f1:
1b:6c:3b:9b:ad:6d:47:1a:47:42:07:5a:d3:0c:31:
f7:93:f8:9a:db:19:16:de:3d:36:a4:e6:61:60:10:
b7:49:da:66:24:88:ae:39:6d:bd:21:74:2b:9b:7c:
7c:09:5a:d0:22:c7:14:7d:f6:1c:51:97:19:e0:4d:
1a:80:fb:b3:18:c9:b8:96:78:e8:d6:a3:5d:83:bd:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:A2:FC:67:CF:49:CF:87:D6:27:43:58:26:90:A3:D9:E9:CE:43
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:79:bf:67:88:4b:66:b9:2e:a2:4e:ab:98:f3:89:8c:9f:c4:
86:09:73:17:fb:a0:4d:cb:2e:fb:b5:33:ac:40:42:3b:2d:c6:
9f:b6:8a:a6:9c:f9:b2:14:75:b1:a9:3e:ac:0e:08:24:60:fe:
47:96:4e:7b:8d:4c:f6:5b:bf:ee:9c:ec:24:d8:74:4a:af:03:
86:12:a2:10:d5:81:f2:70:07:5b:4e:89:a0:5a:32:1b:c2:c5:
b0:09:94:a1:62:03:cd:8c:d4:7a:1e:09:b5:85:f9:78:29:77:
78:6f:37:fb:a1:d3:f5:10:eb:af:bd:d9:a5:59:5a:24:27:9e:
d9:3d:2f:8c:44:04:dd:2b:c0:e0:c9:1d:4f:1e:4b:f2:c9:60:
cf:5d:b3:e9:cf:e4:e7:cc:f7:3a:8a:85:27:ed:4c:ae:19:6d:
f4:f5:d5:d6:72:d1:e3:ea:db:0f:46:b9:96:60:d1:e3:d7:49:
c2:74:ae:d3:16:a0:e1:b4:3b:bb:fe:cb:52:7a:a3:98:a6:20:
f1:7b:50:69:44:bd:6c:49:a3:fc:83:21:b9:5f:2c:87:14:61:
88:81:b0:e1:f0:ad:e2:48:64:e4:b4:46:da:82:36:bf:02:f9:
a2:d9:0b:dc:74:0c:ff:c0:10:c7:5f:92:d7:59:70:7c:ef:78:
34:a2:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:22:45 2026 by rpki-client