Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: eNX6eAOPXQYAbVLhvlktwvlL2lr5U6szM2rZZjYTNts=
Subject key identifier: 33:CB:4A:79:29:C7:1D:DC:63:DA:F6:50:21:7D:B2:28:9C:54:1C:8A
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 01A123C1FC4DC44AAA5AC607E5D89BA322EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 19DA
Signing time: Sat 10 Oct 2026 03:01:17 +0000
Manifest this update: Sat 10 Oct 2026 03:01:17 +0000
Manifest next update: Sun 11 Oct 2026 03:01:17 +0000
Files and hashes: 1: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: DKb/zLL9SIimVoKNwewB0L6TQKlnLaEItRB1r62v3OM=)
2: sWZCCJ9mYF4x-AZV9gqyKfwmtqw.roa (hash: ENzKV46vc1yAkS1qAwIAJTRoo8u9W0tkvlFZn62IWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:fc:4d:c4:4a:aa:5a:c6:07:e5:d8:9b:a3:22:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Oct 10 03:01:17 2026 GMT
Not After : Oct 11 03:01:17 2026 GMT
Subject: CN=33cb4a7929c71ddc63daf650217db2289c541c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:7a:62:23:04:ba:e4:32:7e:91:9a:c1:3f:
7e:f1:70:44:04:d1:44:dd:ff:3c:8c:d1:6d:04:20:
94:d1:94:b6:fc:4b:d6:3f:4a:a3:b0:46:be:56:e1:
9e:eb:94:7b:a0:c7:6a:51:0e:2d:83:4b:b8:75:18:
66:72:7f:8e:4d:46:bf:c4:9f:94:e8:2c:db:f8:d5:
f3:72:03:d1:59:cc:b7:1d:6f:60:f5:40:b1:b6:6d:
17:b4:61:a1:e4:b8:e5:41:32:81:0b:5e:62:da:29:
00:4e:34:87:a8:0c:50:a7:37:37:2a:5b:1c:b5:c9:
cf:f4:24:73:9a:6a:a6:2d:43:ba:52:fc:3d:9d:95:
3a:34:e5:ec:49:26:36:5b:b5:6b:5c:aa:94:d2:49:
f0:1e:f3:4a:5c:43:c4:a2:95:34:c4:ac:3e:6a:7a:
b0:32:d5:1d:7f:fa:86:af:d2:d8:89:72:70:dc:d7:
50:2c:76:df:ce:c0:a2:69:0d:8a:b3:0d:4d:e7:9e:
ca:d5:67:44:c9:30:0c:a8:03:cf:34:d0:6d:3c:22:
d1:fe:14:3f:06:88:b4:4a:ce:f4:f9:f3:ee:3f:5f:
73:7f:ac:d6:f4:d2:76:e2:4b:e8:d2:f1:79:ec:1a:
e3:c8:e0:eb:a6:4d:9d:a9:07:15:60:c9:16:88:97:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CB:4A:79:29:C7:1D:DC:63:DA:F6:50:21:7D:B2:28:9C:54:1C:8A
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:bf:81:d5:c0:96:05:03:8e:a9:20:ed:c7:70:4f:94:d4:
0e:d6:3b:62:24:74:1c:64:ef:79:30:88:85:78:b5:93:ac:e4:
1a:50:c0:de:81:0d:f3:38:f1:e6:70:cb:c6:a6:72:a1:41:ae:
5b:43:28:0b:51:20:38:88:d2:cf:9d:46:78:5b:56:90:b4:71:
85:ef:03:d1:c1:a9:7f:93:8a:08:21:cd:b7:42:66:b4:12:02:
fd:54:85:75:34:a7:86:9f:3c:ac:26:53:46:5d:78:a7:4d:84:
b9:99:be:1a:27:d1:8c:9a:ab:21:5a:0c:24:2f:02:8c:05:d6:
00:73:ed:9a:9b:a1:c3:c5:46:3a:49:7d:f0:08:c0:c2:6d:23:
cb:c3:86:a1:2e:da:66:ec:75:15:15:99:c5:7a:71:b5:0d:37:
20:01:7f:b8:46:1f:58:08:31:01:55:e6:91:ef:7e:5d:b0:b5:
35:ba:99:67:0f:b6:75:42:35:a9:44:df:9e:f8:b1:04:75:f5:
8a:6b:ea:0d:30:f4:5f:5a:f9:43:fb:56:9c:06:52:d7:99:5e:
52:f1:c3:3b:f0:95:08:ca:4a:d0:83:c9:09:9b:69:48:2d:7d:
d4:06:e1:83:d6:a1:dd:62:fb:1c:26:6b:78:13:fe:d9:13:fb:
61:0a:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:16:16 2026 by rpki-client