Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier: Sr6lUT0DMH5+HHrtFlJXUSybr5ghKNxwF7aqtklltkY=
Subject key identifier: C6:DD:F4:54:E1:8C:04:61:5E:4B:0C:AD:16:7B:B9:75:93:FC:9D:B1
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 01A0EF66A90B4C89526C7887C96C3DC6CC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number: 0F49
Signing time: Tue 29 Sep 2026 23:01:17 +0000
Manifest this update: Tue 29 Sep 2026 23:01:17 +0000
Manifest next update: Wed 30 Sep 2026 23:01:17 +0000
Files and hashes: 1: IH423EjGhjGEYUhA9Vkl_n9zB8E.roa (hash: JSP/u1wkfocZw2cQtJFX46pxKJk7V7jUMeaOiY9+bXo=)
2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: MhCg4fiAXPPgMvL+7tyiS5ME/I3tw1ap9R+jKMJ+Ho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:66:a9:0b:4c:89:52:6c:78:87:c9:6c:3d:c6:cc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Sep 29 23:01:17 2026 GMT
Not After : Sep 30 23:01:17 2026 GMT
Subject: CN=c6ddf454e18c04615e4b0cad167bb97593fc9db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:bf:3b:3d:b0:b8:bc:81:cd:e5:b7:7a:89:
26:70:69:85:c8:36:e4:e6:70:fc:6c:7f:f2:14:68:
1a:6d:eb:a7:23:35:1f:44:43:b1:f5:78:ef:b1:84:
a3:06:43:32:b5:37:f9:7b:46:52:aa:b4:1e:6f:7f:
a2:a2:ae:16:83:41:b3:11:6c:88:75:c2:21:4e:0b:
a4:e4:a1:27:8e:c6:89:9a:b1:eb:c8:9c:f5:a1:a7:
54:b9:e3:89:44:b0:0b:3c:2b:5d:e0:7c:96:6f:8c:
59:4e:87:bf:20:17:15:92:77:40:a9:9a:61:b2:c4:
3e:f7:71:a7:bf:a0:7e:c0:79:e8:b3:c8:55:08:19:
e9:cc:0b:42:c5:2a:46:a0:fc:0f:97:38:0b:8a:87:
a4:7c:3e:20:a0:99:9c:f0:0b:21:dc:7a:5c:4e:7b:
ed:6b:99:19:ec:34:e4:e1:7e:dc:fa:84:08:76:9c:
39:9d:28:a0:7a:83:0b:e3:8d:ff:45:3f:2c:b2:d7:
12:88:d7:3b:08:8a:15:42:58:f6:eb:27:6b:b8:e9:
29:58:18:89:b3:26:9e:34:57:14:1f:45:8e:82:68:
e5:0d:4d:54:2b:f8:6b:38:de:f0:64:ac:01:f0:fe:
40:e9:34:f1:e5:c4:22:f5:81:d5:3a:25:65:f5:eb:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:F4:54:E1:8C:04:61:5E:4B:0C:AD:16:7B:B9:75:93:FC:9D:B1
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:06:b6:c0:26:b8:f1:de:bb:d7:a6:59:38:cc:00:c1:9f:
32:73:e2:a0:09:ab:af:ed:19:a5:b0:a3:ea:dc:68:36:50:18:
28:0a:05:08:e8:f8:19:f6:88:db:2c:91:e7:f2:e3:76:06:72:
33:6d:df:57:de:0b:89:43:c6:81:57:87:22:36:a7:f7:ff:51:
f0:35:44:0b:19:22:85:ce:9e:d6:34:50:22:b9:5d:1e:c9:bf:
4a:8a:12:d6:02:a0:18:52:22:79:d9:ea:10:ce:50:5a:d7:3e:
43:fc:67:f1:04:8e:c3:e0:75:87:9a:41:a5:fc:a4:65:42:0a:
cc:b7:e1:4f:ae:9c:13:3c:0f:44:67:e6:d5:6e:68:04:bd:1e:
33:41:74:d8:af:b7:00:f4:30:54:ef:9d:4c:b1:eb:6c:eb:a3:
45:27:80:86:62:78:c0:88:de:0a:a5:00:2c:7b:c2:5a:c8:67:
8a:df:c3:06:15:fc:e9:37:33:26:69:b6:8b:3b:bb:44:04:00:
25:40:11:44:dd:54:c7:c4:4e:2f:d6:53:f4:64:42:68:21:dd:
89:c9:cd:f5:3a:3e:26:77:a6:a2:76:61:1b:cc:03:73:93:a7:
2e:3b:35:83:d8:8a:9a:c5:49:d8:2d:c7:b6:7c:65:f8:40:fc:
a9:9d:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:01:10 2026 by rpki-client