Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: +fGwCjCCx3kdV3ndCSKxj23YKwc1FnZAQSDCJRXJenE=
Subject key identifier: FD:0B:E3:67:26:0A:5D:46:4D:79:A5:10:26:EA:CF:53:70:86:EC:49
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 01A0DEAA30560CCE7E17CE3BEBC61ED53C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 17:01:30 +0000
Manifest this update: Sat 26 Sep 2026 17:01:30 +0000
Manifest next update: Sun 27 Sep 2026 17:01:30 +0000
Files and hashes: 1: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: f5hQvgWqMPPccTcWN9pQ9gTTFWvQn3m+jgEQJ5uwJdg=)
2: _In4h_FwuHoLeAhLdOO_0gDal3g.roa (hash: 5CWj3iN4WCDtTiUEN45Kg99lLjsQ7Kch3A5A4xC3N5U=)
3: fLkAXt4--q3hoUBnohxzj2MtAHQ.asa (hash: nUzSBJOLVdQVJSdyNI1NiKj8o8Pa7JnmM7atYEeGT2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:30:56:0c:ce:7e:17:ce:3b:eb:c6:1e:d5:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Sep 26 17:01:30 2026 GMT
Not After : Sep 27 17:01:30 2026 GMT
Subject: CN=fd0be367260a5d464d79a51026eacf537086ec49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:0d:9b:b7:a1:dc:c7:bc:26:77:dc:96:c3:
08:78:8e:93:bf:f1:4a:b9:e9:12:87:5c:ba:5c:98:
2a:6f:c2:5c:66:f5:42:4a:69:d5:94:87:d1:eb:da:
26:86:f9:47:83:a5:48:3a:92:07:9f:dc:53:73:26:
d9:cb:aa:44:7c:b3:79:44:76:ad:11:0f:40:53:93:
85:e0:e5:1c:a8:62:27:dc:c3:16:95:a7:b8:14:49:
53:35:42:50:f9:37:e3:08:8e:32:e2:1f:52:92:89:
28:51:39:55:52:76:b5:c5:ff:12:3f:f1:39:0a:25:
d4:d3:9d:13:96:e6:89:41:37:e0:05:4c:76:26:bc:
9d:4d:c9:0f:15:a6:db:eb:25:6c:0e:ee:f5:0e:e2:
e5:61:f0:34:1e:c3:89:26:73:ec:c9:ca:ba:7f:2e:
e3:18:97:9a:ed:4a:9a:f8:a1:ff:1c:d1:da:22:91:
3c:10:3a:bf:ee:a9:b6:61:f3:d8:0a:5c:e3:99:50:
a4:1a:1d:ac:30:62:0b:e2:20:ea:00:68:4c:ff:b7:
c7:e0:b7:d4:bf:a5:88:a1:66:cc:e7:f1:f9:7f:27:
0f:a6:a9:50:fe:af:18:19:da:eb:fb:34:70:6b:a7:
f7:cc:67:bd:0d:ca:1b:35:a0:32:6c:c8:80:fe:40:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:E3:67:26:0A:5D:46:4D:79:A5:10:26:EA:CF:53:70:86:EC:49
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:95:72:6c:a6:17:47:24:01:c2:6a:49:1b:c5:2d:42:8a:a9:
94:b9:ba:4d:33:01:9b:77:16:a8:f6:eb:bb:e1:ad:8b:91:44:
68:1a:91:f6:dc:ed:ee:f3:da:30:1c:89:03:29:54:26:f4:f6:
3b:b5:61:cd:be:e5:22:c4:cc:68:aa:f3:22:64:5d:ab:e4:a2:
f6:26:5f:25:1e:3e:ba:64:2e:98:02:c2:15:a8:72:55:42:01:
f1:81:47:05:2f:9b:a0:14:b2:dc:a0:2f:d3:47:98:c5:9a:ed:
7b:4b:60:7b:90:57:fd:c8:d1:6f:86:1b:59:88:9e:f9:3e:26:
e1:2b:c3:e0:33:11:33:c7:a8:c1:f6:32:52:05:87:07:da:2c:
34:13:bb:6d:d7:d4:68:81:94:d2:19:12:60:69:21:35:aa:b0:
2e:64:cd:af:0f:4f:d2:5c:88:39:b3:68:e6:ce:a2:69:76:97:
d1:d8:71:24:95:cf:6d:45:7d:f6:fe:58:56:84:7b:52:51:09:
1e:48:27:82:ae:8b:d2:f9:a4:1a:5d:79:01:29:0b:77:ee:ba:
b4:08:20:d0:64:d8:4c:c4:3f:0d:93:95:95:29:b9:fd:85:ac:
21:ad:3c:5a:82:cb:6a:30:38:5c:cb:14:c4:71:cb:a3:ac:e1:
40:ab:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:10:58 2026 by rpki-client