Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: UnQfvg/Y3i0maFaXeUgxbN2tDvCQA1ThgakwLzDWTPQ=
Subject key identifier: CA:7D:F3:5B:49:32:61:5B:DA:3B:6D:71:F9:BA:2A:11:04:D9:DC:38
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01A132FDB74FA5E21FD2B75E951E65182020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1AAF
Signing time: Tue 13 Oct 2026 02:00:50 +0000
Manifest this update: Tue 13 Oct 2026 02:00:50 +0000
Manifest next update: Wed 14 Oct 2026 02:00:50 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: jTar/XZ3o1q8H9BZeqXx0ClLvSM/qceMBR25W382zSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fd:b7:4f:a5:e2:1f:d2:b7:5e:95:1e:65:18:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Oct 13 02:00:50 2026 GMT
Not After : Oct 14 02:00:50 2026 GMT
Subject: CN=ca7df35b4932615bda3b6d71f9ba2a1104d9dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:61:52:51:d9:f9:be:30:3e:d8:f6:46:f0:
ef:1d:05:a8:f3:90:d7:11:7f:9f:53:e6:eb:b1:e0:
62:2d:35:15:32:21:a9:1b:7d:6f:4b:42:6b:f7:7a:
2f:6e:07:0f:67:70:15:17:b0:dc:32:c1:e8:48:1f:
eb:d7:65:ea:fc:18:18:d9:23:85:59:52:4f:4f:44:
55:e8:8a:06:2d:2a:d8:12:f1:ea:7b:b9:4c:9a:71:
45:f9:d6:4b:a9:f3:d4:23:b0:ae:f8:20:b1:ee:9e:
aa:ac:02:be:29:09:13:02:33:aa:c1:61:39:b1:cc:
b6:db:90:34:e6:85:f0:c6:39:8f:a1:0c:70:a1:ba:
bb:ef:9c:89:14:f3:71:37:86:c9:6e:9e:9d:4a:9a:
62:76:db:65:18:e0:d3:f3:d2:1f:11:f0:4e:25:32:
12:11:b5:73:a2:79:69:f0:4d:b8:4e:ba:d6:1e:63:
05:7d:cc:1b:58:4b:34:f2:64:02:85:25:05:a6:7f:
3c:e7:e9:24:b0:50:99:74:2d:52:e2:5b:d9:e2:81:
aa:75:5e:c8:53:aa:b4:47:f1:71:38:6d:a5:4d:c8:
82:18:3f:4b:b8:ee:4a:6d:62:f7:6c:80:93:61:f0:
91:eb:70:f2:c2:ca:de:4f:c4:3f:0d:0a:6f:1e:75:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:F3:5B:49:32:61:5B:DA:3B:6D:71:F9:BA:2A:11:04:D9:DC:38
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:54:63:17:05:58:d0:39:e0:9f:00:ee:1f:53:e1:07:de:
d1:3d:b8:da:7c:ae:a9:ef:50:1d:f1:ba:4e:c6:5d:f5:55:b2:
7a:7a:50:eb:8d:96:e0:32:42:47:7d:f6:b2:d5:b7:11:73:7f:
06:09:a9:f2:f7:dd:0b:0b:67:15:8e:bb:4c:88:90:5b:98:b6:
4b:6a:21:33:9c:50:ce:ee:7f:e8:9f:d2:2c:d8:9c:f0:e2:b5:
ee:96:f8:9e:0a:18:ce:6b:fd:f7:6f:5a:8a:44:c2:9f:09:64:
cf:7b:b8:0a:0f:de:3d:63:84:00:eb:49:63:53:58:ea:53:92:
b5:54:87:2c:77:76:db:2d:47:bc:34:85:cd:05:3f:26:05:84:
78:e1:4d:c7:24:b9:f5:c3:a0:60:49:5d:e6:34:70:57:1a:c3:
75:6d:1d:79:a3:b1:ac:84:be:35:fb:28:c3:0d:74:ed:7d:57:
39:f1:c5:9f:83:ee:ce:71:9c:2d:03:f6:59:21:59:5a:c2:d0:
39:73:47:e3:bf:76:d8:cb:35:26:9b:74:34:df:a7:64:c5:6c:
4e:c4:f0:4b:3d:ab:cd:e1:49:60:63:e9:2b:ca:4b:54:39:33:
e2:dc:51:04:ae:bb:b5:d6:73:66:d9:a1:8b:f6:9e:58:74:96:
6f:bb:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:34:48 2026 by rpki-client