Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: jw4BsjfdRxQUCusdjh01ASa+IwC8Iyuqc1vrmVZDYqE=
Subject key identifier: E7:B1:8A:84:15:23:8D:F5:C2:66:09:F3:00:85:0E:E2:5A:A4:24:69
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01A0D15C0765A8175DD5CB5DA5530F06688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 1112
Signing time: Thu 24 Sep 2026 03:01:04 +0000
Manifest this update: Thu 24 Sep 2026 03:01:04 +0000
Manifest next update: Fri 25 Sep 2026 03:01:04 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: W581CZuHJjFbZhG/C0+4yHO0DNMzUYRKe3h8d6PcnMI=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:07:65:a8:17:5d:d5:cb:5d:a5:53:0f:06:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Sep 24 03:01:04 2026 GMT
Not After : Sep 25 03:01:04 2026 GMT
Subject: CN=e7b18a8415238df5c26609f300850ee25aa42469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:2e:2e:b3:3e:b6:4f:be:25:25:02:5a:d2:
aa:ae:f3:ad:c1:68:ab:f6:59:e8:1b:21:ee:5e:b7:
37:03:5d:53:4f:f3:97:7d:c9:74:64:5e:83:00:19:
d2:d3:1e:89:45:7f:a9:5d:fe:91:2c:74:e2:2c:c2:
60:6c:30:5d:0c:68:42:14:8e:82:d6:cb:9f:4a:1b:
de:f9:1b:f6:98:44:8d:cb:99:d8:d4:8f:0d:93:57:
7b:2b:b0:da:0a:e7:09:f8:c8:d2:82:60:c1:04:4d:
f3:37:c4:38:aa:80:81:6c:39:85:e3:fa:f1:53:f0:
4e:45:39:39:69:9a:15:58:7d:3b:27:41:85:ef:e7:
ca:9c:88:e3:c8:bf:03:e2:3e:ba:de:85:36:99:6f:
fe:62:10:45:46:96:0b:a8:e1:b7:e0:25:82:53:bf:
85:24:f5:24:5c:55:19:bb:40:4d:82:d4:cc:14:0e:
cc:31:6a:38:02:3d:c6:20:55:df:b3:68:a4:50:de:
05:cc:a9:10:1b:37:04:cd:62:23:3d:7a:9c:b1:4c:
39:44:b0:3f:db:14:20:08:a3:e9:b6:a8:61:31:3b:
af:ff:b5:2f:a4:a7:5d:d7:3e:d5:c4:d4:df:bb:2c:
26:71:d8:c7:d7:a7:d7:3c:45:b2:82:8c:17:0e:a3:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:8A:84:15:23:8D:F5:C2:66:09:F3:00:85:0E:E2:5A:A4:24:69
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c4:66:8d:ef:e2:62:72:2a:3f:65:45:de:69:55:f8:e3:93:
10:00:e5:1e:4a:56:37:58:fa:c5:bb:b5:9d:dd:ed:36:80:f4:
c9:4c:97:22:50:f0:24:c7:dd:c3:5d:b7:60:fe:90:41:9c:3b:
f1:64:fa:df:3f:e1:85:cf:cb:e5:f9:7f:f1:8d:fa:2d:1d:d2:
34:08:d1:0d:84:b2:de:0c:63:66:95:bf:73:02:1f:2f:e9:fc:
83:73:ef:ba:d8:de:62:e6:f4:b5:c7:6f:a8:65:f6:5e:57:78:
ee:e8:77:fb:ec:00:6a:8f:74:7d:6d:b0:7a:ac:ad:0a:aa:72:
1c:2f:29:c5:36:60:f7:30:58:08:b4:67:6e:27:37:45:c9:f3:
07:aa:8d:a7:7c:1f:de:a3:97:f9:f6:44:a8:9e:d4:ac:6e:74:
28:70:64:7e:78:f9:a6:bd:6d:ac:f4:b1:af:70:57:f0:9b:f1:
e4:85:11:57:0c:b9:05:32:20:61:60:ec:d8:c5:cd:51:4f:85:
79:4a:79:f8:77:db:80:1f:03:c8:a9:48:8a:44:d7:a1:34:c8:
51:47:35:09:8c:b3:8f:53:8b:68:e2:56:15:c5:e3:78:a9:a6:
32:4c:df:61:db:e7:17:5c:b6:8b:68:b4:54:89:7c:c6:f4:0d:
24:e1:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:04 2026 by rpki-client