Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: MDbJQ8HdHUnsyr30B2lFQbCRDu3HLwgELO5R+Eajtxs=
Subject key identifier: F0:18:7F:36:75:8C:BC:E7:B0:12:27:A0:61:EA:FB:A5:CB:84:C7:F1
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01A12BB1D7D07C57C8E1DA6268C55850E90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 16:00:37 +0000
Manifest this update: Sun 11 Oct 2026 16:00:37 +0000
Manifest next update: Mon 12 Oct 2026 16:00:37 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: gFmeP1COiIDKZCmdqOxTp+oI+EvngtbxRjFltsNbCoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:d7:d0:7c:57:c8:e1:da:62:68:c5:58:50:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Oct 11 16:00:37 2026 GMT
Not After : Oct 12 16:00:37 2026 GMT
Subject: CN=f0187f36758cbce7b01227a061eafba5cb84c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:58:54:f9:b2:aa:f4:d8:73:c6:f7:09:37:
92:44:b3:ae:39:2b:e0:96:78:1b:a3:e9:84:ed:2b:
a3:1a:d9:77:92:60:35:69:7a:ad:96:5d:21:52:6b:
a9:17:60:42:82:a8:7d:1a:76:f2:f3:7a:c0:97:72:
68:ec:28:fd:b7:cf:79:9d:61:e8:e8:0e:9e:52:9f:
1a:f7:fe:7a:67:a5:ab:23:a4:ec:78:17:eb:72:4b:
8c:0f:91:d9:b1:30:ff:65:32:b2:12:8b:fc:49:e3:
4a:47:8d:cf:54:c6:c3:54:25:81:a4:2b:45:79:8f:
dc:af:57:48:86:96:99:8d:cc:23:df:70:13:3d:b4:
1b:53:de:f7:6b:a3:1c:99:6d:a3:c2:a6:e3:bb:21:
c8:20:6e:21:74:9d:d8:e4:ba:d9:07:08:76:0d:02:
95:5c:3a:2f:9a:c3:93:fa:52:05:3c:9d:a4:0d:ff:
ef:8a:27:03:93:b7:52:6e:ba:5f:e1:15:fa:c6:08:
8d:2c:e1:fd:ee:ad:5a:be:42:c3:9a:7a:99:a4:25:
a5:9b:1a:68:49:96:1b:a3:e4:56:8b:66:16:6a:b0:
16:75:06:12:68:3d:d6:0a:cd:31:7e:fc:71:db:56:
c6:6f:29:eb:ca:04:d6:40:6a:b2:cc:1d:43:00:7a:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:18:7F:36:75:8C:BC:E7:B0:12:27:A0:61:EA:FB:A5:CB:84:C7:F1
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cf:6c:18:2a:87:f5:02:0a:50:44:87:82:4c:06:c5:bf:15:
67:2e:f9:52:d0:29:e6:cd:a8:3f:73:25:1c:46:19:4d:39:e7:
6f:d0:e6:2e:63:65:21:d7:f3:22:ee:08:28:cb:2f:76:72:c2:
fa:a5:a2:70:ae:e9:43:86:b4:d8:11:bd:b1:28:0f:f3:ef:20:
b4:a1:ed:e4:17:97:9a:90:af:4a:9c:7e:5c:86:60:3c:89:b4:
f7:13:87:0d:17:ec:3d:b6:7c:a7:df:69:fb:9a:a2:42:20:dd:
f3:59:94:5b:f1:e4:a7:b0:21:9f:07:fd:a5:5a:60:44:21:8e:
a6:e3:a9:5a:92:a1:92:64:e0:bb:36:f9:a1:22:7c:c4:91:c1:
47:c4:58:fc:87:33:0f:fa:6b:56:e0:80:47:99:d1:25:d6:3a:
10:9b:11:99:64:fe:06:3b:0b:bf:b3:48:74:69:84:60:06:3b:
d6:e8:8e:83:48:eb:74:13:d7:65:eb:00:27:59:9b:fb:ba:22:
15:31:f5:23:68:60:e9:72:f4:a7:0d:33:a0:d1:f4:a4:62:f0:
39:53:b6:0e:66:64:95:43:ec:85:f5:5d:30:d8:2b:16:88:e6:
6b:1d:4d:83:66:80:3c:cb:e7:e5:a2:f7:e8:fb:9b:32:35:48:
ad:9d:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:04:50 2026 by rpki-client