Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: oLWD1lPVQxZIXo2QAgnN5LJYSFvx1a7UF5zi7H6UBHM=
Subject key identifier: 54:ED:CC:5B:30:2D:87:35:DE:6A:33:FE:FC:D8:64:6E:04:D8:2C:63
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 01A0FD220649038E2A2D44B82023E1C2F724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 03B3
Signing time: Fri 02 Oct 2026 15:01:00 +0000
Manifest this update: Fri 02 Oct 2026 15:01:00 +0000
Manifest next update: Sat 03 Oct 2026 15:01:00 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: dn8FPPTzrkT60RwPWg4fxhNbFtn+r/o09J0DpXeC9XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:06:49:03:8e:2a:2d:44:b8:20:23:e1:c2:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Oct 2 15:01:00 2026 GMT
Not After : Oct 3 15:01:00 2026 GMT
Subject: CN=54edcc5b302d8735de6a33fefcd8646e04d82c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:5e:3f:79:90:0f:71:44:8a:7d:46:d8:eb:
37:eb:24:c4:22:9f:21:8a:a1:a8:e8:ff:b1:f6:5a:
bc:96:eb:42:a6:4d:de:83:cc:ec:9a:de:9d:bd:0e:
75:a3:21:55:2b:77:0d:29:c4:fa:55:1e:02:6c:23:
95:b5:98:f5:63:4f:c3:37:f6:f2:b0:e7:3f:dc:e7:
fb:d0:7e:c6:db:f6:99:da:3f:f5:78:dd:bd:a2:60:
9d:de:ea:75:9d:81:fb:51:d8:e0:ec:94:38:9a:9a:
7a:4c:d2:de:7f:cb:93:98:50:05:cc:d7:8a:59:5e:
43:fa:7d:da:b4:a0:b3:33:08:7c:20:66:1e:07:77:
49:2b:aa:5a:b8:a5:fc:50:f9:94:9e:52:ad:7d:83:
12:f6:39:00:3a:4a:8e:18:8d:32:f4:44:ce:34:ad:
92:2a:6e:9b:2c:d3:76:cd:61:29:dd:66:fe:a8:6f:
54:4c:97:4d:c9:20:f1:fd:b0:31:c3:6d:a3:cd:12:
1d:3e:90:d7:cd:a7:53:bc:76:ad:10:7a:c2:6b:e0:
6a:d1:24:43:66:2e:88:1d:66:ec:46:01:45:8d:a9:
99:89:89:4a:f4:22:62:c8:dd:a5:72:c4:af:dc:86:
c9:0d:9b:40:ef:8a:f2:71:70:8e:ff:dd:ed:15:36:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:CC:5B:30:2D:87:35:DE:6A:33:FE:FC:D8:64:6E:04:D8:2C:63
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:68:ad:15:3e:f0:47:52:8f:1b:76:e7:b8:88:e0:d3:26:
57:e0:5f:98:8e:9e:6d:42:29:65:b8:7c:1e:bf:f5:a2:b5:de:
3f:94:94:80:24:77:0d:8b:64:59:f7:58:52:44:29:a2:2a:58:
51:ba:c1:cc:01:70:a0:a0:2c:ee:37:b5:0d:8f:f6:1d:4f:5a:
c2:07:da:cf:3c:cf:45:55:fa:32:50:c9:77:9d:60:67:56:59:
94:79:80:b8:cd:bc:77:93:2c:10:cd:b3:32:86:45:46:a1:32:
ad:a4:1a:e8:c1:95:44:1c:8f:2d:c2:ad:5d:4a:5e:22:c1:b0:
b6:18:7b:69:4c:fc:d1:95:7d:5e:f4:1b:d7:9e:0e:57:3e:47:
41:04:c9:cd:15:77:2f:84:54:6c:fe:a3:a4:49:a1:04:bb:2a:
f5:b7:08:94:8e:25:42:a7:47:99:38:4a:5f:79:34:70:a5:5b:
ef:5c:29:18:dd:e6:5a:3a:2c:51:a9:5b:ae:1e:e9:0e:7c:7e:
f1:d6:88:49:0c:f3:71:ab:73:76:ba:e0:fb:e0:f3:cf:01:7b:
f2:bb:50:c2:1a:a3:17:67:0e:ca:c6:da:06:11:6e:38:2c:99:
75:5b:64:45:cd:84:aa:02:ac:5a:3a:e5:2a:d1:88:0d:44:c2:
48:56:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:23:10 2026 by rpki-client