Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
File: O54AjSoXhEnxK2widbR_DP2Ug4U.mft (raw, json)
Hash identifier: MkjVGcIwn360ArLR12UKN7esmWI7M2fAj8MG+lXQqZw=
Subject key identifier: A7:7C:10:FF:7F:27:AB:5C:7A:D5:78:41:77:29:B7:9A:61:F0:FA:94
Authority key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Certificate issuer: /CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Certificate serial: 01A0CB22775C590DEB974084D6B78A39B1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
Manifest number: E3
Signing time: Tue 22 Sep 2026 22:00:28 +0000
Manifest this update: Tue 22 Sep 2026 22:00:28 +0000
Manifest next update: Wed 23 Sep 2026 22:00:28 +0000
Files and hashes: 1: O54AjSoXhEnxK2widbR_DP2Ug4U.crl (hash: UdwwoOSCJMvuR/Tg6x3hN3Cq2NWMeX1d/D0/nru9gVY=)
2: nOAz1MxeL2Yg_diTkYktSjclA6o.roa (hash: 6mcYdwnRDHXSQccR8+DP1sM9YZzuVk/TWlcrFx1aUlQ=)
3: yGKmCQjSxTAezYkUefPEIpl-2A4.asa (hash: QCwVUrLjfeyHUk6twv0KxQ0njTcdU9mmBG1CLHKGs6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:77:5c:59:0d:eb:97:40:84:d6:b7:8a:39:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Validity
Not Before: Sep 22 22:00:28 2026 GMT
Not After : Sep 23 22:00:28 2026 GMT
Subject: CN=a77c10ff7f27ab5c7ad578417729b79a61f0fa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:d0:76:4a:b7:dd:55:aa:0c:8f:85:1a:0d:
46:9f:01:2e:c3:ef:bf:68:81:30:76:cc:e0:09:fc:
71:7b:04:c8:9e:28:0c:a6:47:38:17:f3:45:31:8c:
b4:ec:fd:62:dd:03:f9:69:be:b4:bc:69:1d:ed:d0:
0f:a9:e0:52:61:3c:41:83:06:85:87:ac:c6:a1:51:
3c:f4:b7:39:93:0f:ab:18:8b:e4:6a:94:9d:7d:b6:
a5:fc:2f:95:3a:87:57:01:7a:da:89:da:6a:6b:88:
76:97:72:13:6d:a3:da:94:12:50:1c:b5:63:d2:9a:
91:56:64:2b:64:60:c8:72:c2:2d:7f:e3:c9:a9:12:
48:05:1c:c6:8d:c5:b4:01:23:db:4a:93:0e:62:39:
3f:14:5a:17:79:e1:9a:30:98:3d:93:9c:f7:2c:0e:
10:33:0e:bb:f7:69:aa:49:f7:e8:cc:df:ad:43:96:
13:a2:e0:e4:a3:4b:e6:39:48:46:3e:fc:5e:0f:0f:
a3:9e:e3:00:48:48:7f:36:ba:88:56:5d:28:98:08:
6c:41:49:47:e9:b6:08:4b:76:de:a6:1f:0b:3f:00:
2d:99:a7:5c:2c:23:02:73:9d:f2:0d:a8:e5:1b:56:
eb:91:31:4f:10:b0:ad:6b:cc:5b:f8:09:a3:f6:56:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:10:FF:7F:27:AB:5C:7A:D5:78:41:77:29:B7:9A:61:F0:FA:94
X509v3 Authority Key Identifier:
keyid:3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:f7:49:7d:47:f5:32:50:12:66:54:f9:52:6c:8a:ad:dc:
d1:dd:80:ed:5c:ed:7c:f7:7c:78:39:e4:f9:5a:93:e4:30:a8:
42:1d:22:ad:92:2e:2a:c8:12:26:e4:ca:49:05:fd:cd:5f:da:
41:62:ee:64:0c:4c:d4:3e:aa:9c:27:81:7d:32:37:e6:8a:7c:
5d:c1:e3:d4:9f:67:3c:7e:a1:5c:c7:a0:73:0a:54:fa:0f:f7:
e1:95:3a:92:b0:35:fb:db:77:4c:1b:d0:1d:a3:35:d3:57:c6:
87:3d:3b:f6:9e:1e:91:79:4a:cf:8a:3f:5b:4e:50:17:69:84:
f8:7f:0b:0f:fd:fb:85:fb:db:ae:3d:83:fa:87:f9:e2:16:fd:
98:fb:ef:60:c7:bb:9e:4b:2b:a4:b8:ee:8f:b1:b3:d1:c4:a0:
35:57:32:29:be:c7:4d:33:68:c2:09:7f:3d:1c:f0:70:ad:b5:
c2:7a:0e:52:75:c6:b9:80:7f:32:9c:de:a3:fb:a8:3c:43:88:
1e:f3:c6:a5:20:62:69:8d:69:b5:f7:97:8f:76:76:bf:66:44:
59:69:f7:76:c5:25:b6:e3:69:05:dd:44:eb:0b:d7:65:12:cf:
d0:ea:7a:d9:29:5e:03:a4:1c:12:fb:37:a9:49:4b:1c:f3:f9:
8e:0a:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:40 2026 by rpki-client