Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: m1mTZKrKcwA4naRy+niIYOdQRxCoxC+SGFVBbwmKcFs=
Subject key identifier: BF:09:08:83:9E:DC:3E:18:6D:82:97:A4:00:F2:F8:45:A6:4B:85:C7
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01A0D7CBD9416CEF476155ACA5E199C01822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0CB1
Signing time: Fri 25 Sep 2026 09:00:55 +0000
Manifest this update: Fri 25 Sep 2026 09:00:55 +0000
Manifest next update: Sat 26 Sep 2026 09:00:55 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: 6JM5aYq7+UsChTwgbuGjtnSTuW4wBHsbSwTWCWZHqKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d9:41:6c:ef:47:61:55:ac:a5:e1:99:c0:18:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Sep 25 09:00:55 2026 GMT
Not After : Sep 26 09:00:55 2026 GMT
Subject: CN=bf0908839edc3e186d8297a400f2f845a64b85c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:8b:c8:d4:51:b0:e2:f4:54:ed:e9:19:6d:
fc:3f:b2:60:ce:ab:af:bf:98:32:da:60:7f:b4:d3:
53:38:13:3a:00:70:88:af:18:7d:c8:8c:bc:ac:23:
b0:a6:da:da:06:1b:dd:34:90:e1:86:45:95:87:a6:
a1:7e:7c:58:dd:cf:ef:d8:d3:00:d7:a1:cd:7f:02:
2f:b7:b8:10:5b:52:1d:cf:c4:b6:5e:59:42:27:00:
e2:43:db:c4:30:d2:d8:ed:87:bd:3f:20:20:8a:f0:
88:bf:80:f9:2d:11:b4:e7:c2:6d:6c:38:2f:96:17:
0b:b6:ce:18:83:f8:d7:c6:8e:7d:c5:e6:6a:07:6a:
0c:55:85:af:d3:db:c2:99:19:86:94:f7:8c:a3:6e:
a6:5a:6f:90:2c:1f:47:b7:87:9b:94:e8:01:72:83:
f1:f5:18:e1:70:3f:2d:c2:e7:19:08:aa:4c:53:e0:
ac:fb:0b:be:ca:55:3f:16:6b:a9:40:75:a1:c2:08:
18:f2:93:f7:fd:0f:ca:8e:86:85:e5:f0:bb:06:ed:
d8:24:81:da:a0:23:55:5d:72:0d:96:b6:5f:b8:e7:
47:e0:c3:9d:c3:01:08:13:51:de:94:88:b1:22:d2:
be:c4:e8:94:18:5c:e0:46:e5:d6:5a:cf:4e:47:f9:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:08:83:9E:DC:3E:18:6D:82:97:A4:00:F2:F8:45:A6:4B:85:C7
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:01:27:41:79:15:c2:c2:18:41:05:e3:8a:31:32:76:8a:
4c:90:ed:c0:cc:4d:49:18:20:11:bc:44:2f:ed:d6:fa:be:27:
01:49:e4:0d:1a:c7:e0:37:0d:c0:d3:6b:eb:7c:4f:1e:c7:52:
18:ad:c7:d2:83:40:3b:47:f7:1e:e1:d6:19:9c:8b:0a:91:a1:
4c:38:6e:a5:c7:f2:ba:14:25:fa:59:d9:9a:35:f4:dc:1b:4a:
32:62:d7:06:d3:2c:93:c1:7e:0a:89:8b:22:94:9a:24:e2:56:
a8:ec:5b:33:e5:61:2c:ee:31:10:70:d7:4b:a6:cc:ec:d7:24:
79:a7:65:79:49:13:e9:d3:33:4c:a6:3f:79:12:9c:4b:d0:9e:
c6:25:e9:71:3c:9f:52:57:df:0a:be:59:fd:00:13:28:c1:cf:
83:6e:7a:65:7a:fc:3a:e7:9e:fa:ca:23:3f:24:94:ba:5e:e3:
da:cc:2f:ca:86:62:3d:e3:f0:6e:67:a7:13:9a:a5:e4:75:bf:
9e:bd:4d:be:56:0a:a2:67:7a:89:ed:cd:7b:39:82:17:6d:72:
3a:3a:fa:f9:d2:70:68:03:4c:79:59:a4:0f:5e:2d:29:0a:ae:
5d:6f:af:8b:48:c1:40:d0:d3:45:8e:d9:97:a7:83:04:5d:0b:
24:54:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:14:56 2026 by rpki-client