Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: 73qmDODYndw65Egjf/EolBiaKu29qbRdzrJLlou4HhY=
Subject key identifier: 73:82:3F:97:E5:E1:28:19:9C:EA:88:0A:40:F1:E7:78:FB:B7:9E:D0
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 01A0D5DE2B4533F6DF1EE17702751EC0D4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0D84
Signing time: Fri 25 Sep 2026 00:01:42 +0000
Manifest this update: Fri 25 Sep 2026 00:01:42 +0000
Manifest next update: Sat 26 Sep 2026 00:01:42 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: RLAZnd7Z4D/cG4p/IHenVxVmxBhhYzAbqelA+Dmtp2g=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:2b:45:33:f6:df:1e:e1:77:02:75:1e:c0:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Sep 25 00:01:42 2026 GMT
Not After : Sep 26 00:01:42 2026 GMT
Subject: CN=73823f97e5e128199cea880a40f1e778fbb79ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:15:12:8b:92:8a:b4:be:4d:05:6b:87:bf:
8f:fb:f3:91:95:cd:96:78:46:ac:a3:6f:09:46:9f:
55:1d:69:00:cc:29:34:22:66:99:6b:f7:da:c3:98:
45:01:2e:49:ed:87:31:93:a4:f9:0e:af:ce:28:82:
6f:49:64:88:20:99:f1:2a:73:fb:e8:da:c3:ba:d9:
83:92:a4:6b:08:3c:26:a5:c3:a4:dc:fa:fd:1f:51:
5d:21:3b:de:9c:26:99:36:5f:37:03:85:19:e0:c5:
9f:7c:e7:5e:cf:03:78:7e:92:c9:3e:35:3f:d1:86:
96:c5:17:c2:93:1c:4f:69:a5:87:74:17:a2:28:fa:
a7:1d:dd:d8:75:74:5d:ee:2d:e9:d8:9f:af:e4:e0:
d5:7e:c5:80:bf:76:46:57:71:6d:b1:d4:01:87:f8:
01:01:c5:26:15:97:1f:14:12:56:20:46:f0:ce:55:
0a:c0:68:46:6d:3a:59:df:da:4e:81:d0:8f:3d:8b:
e1:05:c9:b8:2d:7b:f0:9b:c6:02:15:75:89:80:60:
d8:aa:0f:85:0e:75:5c:bd:c8:7b:cb:0e:84:e7:5c:
5d:0c:70:7c:c5:4d:99:94:3b:62:45:68:6d:b9:a4:
1b:af:89:10:08:65:bd:09:c3:2e:33:b3:fb:d3:50:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:3F:97:E5:E1:28:19:9C:EA:88:0A:40:F1:E7:78:FB:B7:9E:D0
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1e:30:ad:1b:c4:56:83:0f:d9:3e:10:23:7e:7a:62:b2:31:
c7:03:a4:6e:65:5f:f7:9d:cd:47:27:40:eb:a7:9e:32:93:00:
d1:21:d7:03:1f:fd:a7:2a:4d:0f:d7:9c:17:bf:26:cb:4c:c4:
c0:41:2f:d9:0e:2f:62:40:d4:29:6e:2e:4e:41:68:ad:3d:17:
11:27:3e:fd:e9:8c:a4:96:8c:6b:26:75:de:fc:f3:34:21:1c:
a6:46:ab:17:2c:07:82:34:f0:f9:f1:eb:96:b0:83:de:8e:46:
da:5f:ac:00:b6:e6:e3:90:7c:36:5b:b5:a4:b4:da:27:5b:f7:
3f:0f:98:ee:a8:84:d0:f9:b2:48:4a:dd:15:8e:f4:8f:23:8c:
15:91:b2:19:87:01:65:ff:16:66:56:35:0b:9c:50:a1:ed:bd:
74:4e:af:36:07:e6:4e:a0:e8:d4:68:a4:7c:31:f3:63:62:a2:
c1:3f:f9:62:eb:20:d6:fa:8c:d8:7a:65:9e:22:a7:21:32:a1:
4b:b7:13:13:4d:88:1e:96:20:d2:67:42:91:72:80:74:64:e8:
4d:46:61:82:46:3d:3a:b8:4f:2e:c7:ca:71:64:fa:71:cc:be:
a2:82:bb:ab:84:08:77:b2:67:52:70:f0:cd:52:b3:c9:cc:fc:
35:58:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:51:44 2026 by rpki-client