Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: GctLwNhsP7v+q5i8B5feVor0DG9KoUJl01ce83GNvrk=
Subject key identifier: AC:BB:76:45:58:93:A2:88:C9:AF:73:46:38:70:71:1F:82:E1:FB:D6
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01A0EFD5407E2A4B935530B29A8D731FCD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 12FE
Signing time: Wed 30 Sep 2026 01:02:05 +0000
Manifest this update: Wed 30 Sep 2026 01:02:05 +0000
Manifest next update: Thu 01 Oct 2026 01:02:05 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: ywQDVJ/ulbbT5MSChT57E+OGv+ZOapWlFjromXNkGmU=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d5:40:7e:2a:4b:93:55:30:b2:9a:8d:73:1f:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Sep 30 01:02:05 2026 GMT
Not After : Oct 1 01:02:05 2026 GMT
Subject: CN=acbb76455893a288c9af73463870711f82e1fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:23:ef:60:68:f1:8b:23:e2:05:3b:08:f6:
48:92:bb:ba:e5:7b:b4:9c:70:71:41:71:98:a5:13:
0d:54:36:4b:67:3a:b5:f1:9b:99:73:35:39:1b:a9:
5a:59:b1:09:d2:ca:c5:89:11:9d:9e:b9:5b:7e:f7:
33:54:b1:ba:a4:08:86:4b:78:5b:b5:1a:03:5d:7b:
d7:c8:85:a6:ef:7f:60:29:f9:3e:c6:11:d1:ff:29:
30:a3:c8:6d:38:f7:cb:61:48:c0:75:a3:65:5d:0b:
3e:47:77:53:bc:dc:d3:39:c0:a8:15:44:9b:87:a0:
82:a1:4b:88:11:15:bf:55:cf:fe:d8:57:31:b5:29:
9f:88:32:d9:26:df:59:ea:d6:e0:9a:21:1d:0f:bb:
28:b3:a4:4a:f0:c4:c5:f3:f6:8f:f3:c9:61:32:f0:
d9:92:da:c3:97:cc:3f:f4:32:f8:03:e5:e6:67:94:
89:76:99:6e:79:37:43:23:f2:e7:67:c0:c7:8d:e1:
e6:df:e7:e6:ae:be:53:66:26:79:79:b7:57:a5:d7:
e3:49:50:30:9c:07:99:28:56:c1:10:28:7b:aa:61:
23:f8:f3:f1:73:40:d4:2d:f7:65:cb:59:00:50:db:
15:26:61:b9:4b:ce:b6:1b:9a:c2:5d:7b:a3:ea:d1:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BB:76:45:58:93:A2:88:C9:AF:73:46:38:70:71:1F:82:E1:FB:D6
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:61:e2:74:1e:c1:f7:40:01:53:a2:37:10:1b:82:9c:30:7e:
67:8a:67:94:a9:a5:63:0a:63:79:df:9c:18:da:ea:e9:e1:19:
30:52:2c:34:c0:3f:9d:97:6a:87:4b:7e:06:bc:ef:4f:05:db:
24:5b:e3:0a:c1:f1:98:8e:b6:ab:52:f0:26:ea:f4:80:6b:14:
19:74:c0:07:50:8d:54:43:44:ea:c1:a2:41:03:18:6f:10:2b:
47:ac:9c:d8:5c:11:c1:f8:da:e4:16:e2:e7:5c:90:b9:1c:45:
04:6c:c0:03:94:bc:46:7f:ec:e6:e1:ee:a3:a1:1f:a5:f5:55:
09:fe:30:99:34:bd:2e:a6:be:7e:d0:d5:13:47:e0:cc:5d:bc:
ab:2a:e4:3c:85:86:31:98:7a:77:11:2f:59:76:88:60:31:80:
7b:ab:31:9b:1b:1d:c1:b2:c0:a4:9b:b8:70:21:5a:7d:66:49:
14:90:42:57:bf:da:bc:d9:80:4b:ba:b0:98:4a:a8:c9:fe:a4:
7b:93:1e:a9:ee:50:e6:ef:fc:53:5d:31:2a:58:27:e1:cd:97:
b0:2a:c7:a8:2f:ba:d7:27:ed:4a:cc:bb:b7:11:5b:fc:f6:64:
44:57:00:8c:52:8f:78:72:28:2d:1d:3c:56:71:8c:27:bc:c7:
9f:f0:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:35:52 2026 by rpki-client