Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: ZYJBlJKx/8gB4qSoiGZNBeeGwKK2NMqqAO9C/VjK0qQ=
Subject key identifier: 85:F6:C0:64:52:50:73:EA:8E:79:42:DA:97:0F:90:E9:7E:19:20:6A
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 01A0D237022557B55F5246C29475E445FE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 1709
Signing time: Thu 24 Sep 2026 07:00:15 +0000
Manifest this update: Thu 24 Sep 2026 07:00:15 +0000
Manifest next update: Fri 25 Sep 2026 07:00:15 +0000
Files and hashes: 1: CFiA9ts48FJD7FxMXnq2yBPpxUo.roa (hash: 0N4k8Pu9Li9wdDzVVf7qsFKX5AusWq9aMPBrYyncX/Y=)
2: XbE0JN5jq94dXWDTKIUYec-r3Lc.roa (hash: JOZZ+QdzMx2pEFrNvMLDdQZiQJU9htYpi2wTwwjdH54=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: emx6fSJOMOzzBUxgBu8wJzTfjStNrubGe83+CxMaqiI=)
4: sr8WeIRMBJ4bRfuf-lp3-tgD570.roa (hash: TnOmb2gICaHIuyc6o/5CaEP4UWNo++HGY655v8j+/yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:02:25:57:b5:5f:52:46:c2:94:75:e4:45:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Sep 24 07:00:15 2026 GMT
Not After : Sep 25 07:00:15 2026 GMT
Subject: CN=85f6c064525073ea8e7942da970f90e97e19206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:d7:66:49:1b:d8:ba:3c:93:09:bb:f3:27:
0c:22:f6:01:2e:4d:f0:60:e2:26:38:81:78:7f:43:
d9:53:0c:d8:57:3f:c2:41:54:3f:0a:76:2b:60:1f:
a6:3e:38:f3:cf:ae:5d:01:69:7f:51:b8:96:99:28:
19:71:14:76:12:ea:36:37:20:e6:ab:8f:85:58:48:
7a:07:eb:1e:ab:42:80:60:69:31:e0:18:13:d8:e8:
89:f2:f7:33:99:02:31:bd:28:82:2d:8e:1d:28:3c:
2e:6c:4a:82:28:c1:0d:9d:c1:f6:b3:f8:91:40:bd:
aa:5e:8c:6d:cf:a0:15:84:97:3d:1b:03:d1:b7:f7:
6f:64:fa:d7:95:73:de:68:e8:aa:97:e6:e3:76:f5:
c9:e2:fb:0b:4d:48:73:7d:34:ce:be:23:14:42:49:
5b:4b:09:14:4b:ec:c3:be:97:c4:17:be:9c:51:1f:
3b:f1:aa:df:e8:f6:23:04:eb:c1:c9:f2:4f:2f:5e:
69:5c:9d:41:ae:be:8a:71:2f:83:94:6e:8a:79:45:
9a:33:e9:38:d4:31:8c:7d:a2:f5:52:5f:6f:7c:52:
a1:8a:52:5e:10:a3:28:d7:81:ec:d2:9e:a9:5d:a9:
62:a1:6d:c6:56:22:48:24:5b:e8:83:76:e3:d2:31:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:C0:64:52:50:73:EA:8E:79:42:DA:97:0F:90:E9:7E:19:20:6A
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:28:1b:e1:1c:27:70:f0:f0:1c:29:fb:b8:a6:c9:2d:5d:
fb:15:3b:85:9c:25:88:7d:cf:ab:9a:b1:e2:21:7d:d8:67:df:
2c:54:4e:63:8a:e2:b6:04:3c:51:2f:5f:45:11:a1:00:37:05:
da:65:9a:2b:88:4e:92:6c:1f:bb:6a:40:24:b3:df:17:10:cf:
86:07:fc:5c:d0:9c:92:cf:4c:2b:47:cb:ad:25:c7:a5:72:0e:
cd:7f:e0:f3:ba:e0:04:1b:7c:78:e1:da:60:5f:03:c9:8b:e4:
cb:e6:12:16:1f:78:e6:83:af:47:a9:02:12:14:6e:91:98:e3:
51:86:ee:7b:0b:78:1b:ed:79:f5:de:20:e5:fd:e1:44:3c:25:
1c:fa:54:72:58:42:03:69:d6:46:40:4f:28:24:69:0d:75:5c:
08:9a:4e:e6:ca:9d:b1:07:04:da:d4:33:99:c0:01:0e:dc:ca:
cd:d5:17:c8:ad:6d:81:d7:5e:18:b0:05:1f:84:3b:98:f9:9d:
5b:ab:0c:8b:87:01:c1:1c:0d:1c:f6:7e:c0:c2:cd:f3:43:26:
88:bd:a5:6d:f8:38:ae:77:d3:fb:c4:fe:73:62:ad:e5:f8:84:
17:06:4d:7c:4c:26:c8:e9:9c:3e:ad:e4:16:d2:30:00:6d:57:
a9:22:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:30:32 2026 by rpki-client