Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: PK0mEOMIfvjSwUbqJHTTG1uBLMq/dfeKk+KoFAq5Zmk=
Subject key identifier: F2:9B:BA:34:E6:DA:CE:EE:71:3A:D9:76:B9:6C:E2:1A:C0:9B:3D:2D
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01A0DA29327F33CC4D8E3CC0532A91E548C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 19F8
Signing time: Fri 25 Sep 2026 20:02:07 +0000
Manifest this update: Fri 25 Sep 2026 20:02:07 +0000
Manifest next update: Sat 26 Sep 2026 20:02:07 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: QkGtOXU/yeUESsjWK4UNncHUZDb/Yoi2DUmEkifiy/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:32:7f:33:cc:4d:8e:3c:c0:53:2a:91:e5:48:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Sep 25 20:02:07 2026 GMT
Not After : Sep 26 20:02:07 2026 GMT
Subject: CN=f29bba34e6daceee713ad976b96ce21ac09b3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:58:fd:10:50:a0:81:2e:df:ef:e3:b9:42:
88:8c:78:8b:4c:9f:ee:b7:f0:62:4c:20:b1:1f:17:
6b:aa:72:ae:02:73:9e:e6:4c:97:e4:c3:1b:8d:b3:
ea:03:f8:50:0e:b5:f8:77:6d:fa:23:fd:33:40:ff:
e0:80:b1:c2:46:83:d1:7b:f8:3a:73:87:ba:6a:a2:
7a:3e:54:bb:bf:64:ea:36:fe:4b:fa:af:37:f8:26:
d9:68:f1:d7:97:ae:3e:42:cc:73:29:ae:ca:9c:ff:
b0:39:0b:32:c7:7e:df:a3:fc:b6:36:d4:67:16:9f:
41:6a:25:31:29:57:54:fb:12:3e:10:b3:fc:14:14:
77:5d:d4:7d:b6:71:b6:d1:fd:1b:93:b4:87:c5:42:
36:28:34:7b:61:30:89:e2:72:e0:5c:40:de:c5:5c:
c3:1e:dd:49:e9:6d:80:84:5d:b3:67:0a:a3:48:ee:
c7:b9:10:89:d1:b0:39:4b:6c:5a:f4:a0:c8:3f:95:
77:48:b7:ef:44:a6:ae:3a:9a:9f:f6:bf:af:1c:ff:
97:62:64:04:89:c1:3a:bb:c8:29:cf:f0:29:9e:86:
bc:d6:4c:12:54:d8:70:64:da:24:1a:80:9f:58:71:
74:99:aa:a8:e1:67:90:eb:9c:f6:b8:5c:a4:b4:b3:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:BA:34:E6:DA:CE:EE:71:3A:D9:76:B9:6C:E2:1A:C0:9B:3D:2D
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:bf:d8:34:50:9f:70:22:0e:c7:ff:64:4b:2c:04:16:7c:
9f:7b:28:9d:25:d9:9d:ac:06:8e:4c:b6:47:3d:80:82:a7:05:
57:0f:b3:40:42:31:f4:3c:3e:9f:cf:81:69:c1:99:13:b4:ad:
20:1b:58:d3:e3:f6:82:3a:46:70:97:1d:bb:a9:9a:47:3c:9e:
1a:84:3e:0f:a7:00:43:13:5b:e2:ab:12:05:b5:30:61:66:d5:
79:2b:e4:78:e3:39:48:c7:c1:44:51:d2:d4:b5:b6:65:f3:3b:
31:06:f9:74:8d:88:4b:bb:8c:26:da:57:68:25:b1:11:7b:ee:
60:3a:52:13:98:5a:77:42:c0:03:28:66:4b:f5:0d:29:9d:c3:
67:20:72:a2:d2:c9:13:f4:f9:bf:a6:15:99:5c:6d:13:d3:26:
c0:2b:bf:e2:dd:51:8e:5f:56:b8:a5:9e:02:ce:2e:1d:29:8c:
ba:18:b6:1c:e5:50:e2:dd:e3:c6:20:c0:48:90:5a:47:49:0c:
9c:99:e2:80:f3:40:38:1c:c1:66:43:f0:cd:6e:ef:f9:59:0b:
eb:8b:4a:de:fb:e8:f1:c7:35:47:26:8c:34:ab:4f:5d:92:5a:
fd:32:51:a3:4a:4d:ff:2f:21:04:02:dd:c5:76:61:cb:2c:dd:
bb:bc:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:48:16 2026 by rpki-client