Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier: PexHEM88EqIo8tkIyVcPl2NwG3PiZYkrXcQOID7aYws=
Subject key identifier: F3:F3:C8:A9:52:AA:DA:3A:A9:4A:A4:CC:7C:83:C8:06:30:25:B0:2E
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 01A0F29E97AE91CE69B4CE3F59773EDE7F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number: 1A8F
Signing time: Wed 30 Sep 2026 14:01:14 +0000
Manifest this update: Wed 30 Sep 2026 14:01:14 +0000
Manifest next update: Thu 01 Oct 2026 14:01:14 +0000
Files and hashes: 1: VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa (hash: PrU9zmhMpmRMgh3C3teCNmvz1i0g6szB8JeyH7euSZk=)
2: _jjiEn_0KRxjLGF802rPc0LFUKE.roa (hash: gAIQze9dIXWej1/MxLektAvIo4bB6BkzbYun5VRQHxI=)
3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: wG2yhpioidFhmMAYG5O8Vkoo5mOtK0AhG/uQQ+MDfSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:97:ae:91:ce:69:b4:ce:3f:59:77:3e:de:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Sep 30 14:01:14 2026 GMT
Not After : Oct 1 14:01:14 2026 GMT
Subject: CN=f3f3c8a952aada3aa94aa4cc7c83c8063025b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:23:bd:f1:5c:b1:55:41:ac:97:95:5b:32:
38:4e:6e:73:99:cf:cb:7a:e8:68:b3:d6:53:f5:68:
64:38:e8:97:8c:6d:39:02:9d:26:cf:fb:e0:a0:f1:
9a:b2:b3:b3:3c:6d:1f:33:53:8d:c2:49:3a:9b:c4:
4a:1f:b1:ff:4b:e4:3f:6f:9a:45:95:bb:9f:70:38:
ee:32:4d:a0:20:50:0e:45:ff:f5:62:98:eb:3a:77:
9a:d4:9d:88:5b:e2:3f:45:02:19:d8:c1:d3:fe:ac:
86:fb:fa:7a:0a:83:52:34:ae:f7:62:1f:4c:56:4e:
b8:55:5c:ba:68:64:01:c8:fa:6f:b0:1e:7d:f6:62:
ad:b0:39:75:ac:6f:10:3d:b6:98:08:b5:f3:2f:11:
da:c9:57:ad:92:09:ae:c4:fc:64:11:8e:83:18:8a:
4d:25:90:1e:37:1f:d1:30:06:f4:2d:80:fc:f4:a9:
18:26:7b:17:f6:b1:05:56:77:5a:09:0b:fa:ce:89:
14:4e:30:d2:a6:7c:5d:d4:d2:ca:50:d3:78:9a:8f:
5d:a1:7a:dc:97:76:50:e8:2c:f0:5b:f7:03:3a:ef:
05:3d:df:20:1e:26:0b:b3:62:b5:88:ec:4f:53:c2:
0c:62:26:c7:6b:78:77:e5:24:0d:29:34:17:73:ff:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:C8:A9:52:AA:DA:3A:A9:4A:A4:CC:7C:83:C8:06:30:25:B0:2E
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7d:4e:5f:61:be:9a:87:f9:0e:7c:81:53:93:c6:5a:03:9b:
07:2b:dd:56:0b:c6:8c:8b:b2:c7:ee:98:2b:3d:b4:7e:fc:fb:
86:2b:7e:cf:26:43:c5:29:4a:6f:00:50:69:ba:16:07:d4:15:
bd:78:ee:ab:90:f2:e1:36:f8:78:9a:4a:e2:da:01:e9:af:c2:
9f:66:2c:47:35:b4:4d:88:b8:5a:ad:94:73:bc:f4:4f:de:f4:
57:83:9f:72:45:00:8e:3a:d7:c0:0e:bd:43:b9:da:ae:39:6c:
95:b0:f0:16:d1:2a:19:e7:14:4d:bb:9b:3c:6f:59:ef:b0:12:
d9:40:69:90:74:c7:7e:78:f9:d1:17:86:8a:fd:ed:d6:9d:84:
5e:e8:a9:19:ea:60:a3:a7:f4:2b:99:ed:17:d2:21:12:16:39:
11:0e:ae:0b:36:95:4b:1b:7c:12:ee:de:cd:1b:8c:11:3a:3c:
04:b0:dd:89:0f:91:00:ad:c4:6c:4f:99:d2:4b:17:82:67:c9:
9b:27:2f:87:1f:46:21:2b:1a:a2:79:1c:5e:2b:06:4c:05:54:
98:9e:d3:10:94:aa:e9:90:fc:ff:60:d3:71:63:2f:35:38:57:
5b:c9:08:38:a0:ea:0f:f6:4d:3e:9f:39:47:20:c9:fc:8a:63:
b9:08:fa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:57:01 2026 by rpki-client