Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: 5jCVmqgJ5boAVPUYXcXnksJ4VnQiprpRLDe3O9hA5rs=
Subject key identifier: F7:64:81:25:31:A0:86:3D:08:C9:E5:B8:9A:D2:6C:FF:9B:0C:F5:00
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 01A0D53927993FC3A63ECC40094AD01861FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1A80
Signing time: Thu 24 Sep 2026 21:01:27 +0000
Manifest this update: Thu 24 Sep 2026 21:01:27 +0000
Manifest next update: Fri 25 Sep 2026 21:01:27 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: k1DXXSz4h0qhjh/QJ+ou8J7uXHGBkvaEwfCpVvPHQog=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:27:99:3f:c3:a6:3e:cc:40:09:4a:d0:18:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Sep 24 21:01:27 2026 GMT
Not After : Sep 25 21:01:27 2026 GMT
Subject: CN=f764812531a0863d08c9e5b89ad26cff9b0cf500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:73:1a:16:91:96:65:fc:a8:d0:a9:80:0e:
f5:99:dc:fa:fb:37:8c:1d:fe:c3:4c:b4:e5:dd:7e:
34:6b:70:d6:05:94:bb:58:3f:e6:24:11:99:2e:7f:
9e:b4:ee:8d:f5:0b:ed:cb:b0:60:8e:a8:6d:46:63:
5b:3c:49:77:3d:ec:cf:aa:cb:06:df:81:e5:a7:4b:
1a:a8:7e:cc:1f:92:6a:c2:cc:ec:d0:95:53:6e:77:
f9:29:11:1a:ca:7f:3c:92:8d:0d:1e:60:6e:d8:74:
25:38:6d:8f:1b:5e:5b:4b:db:96:e5:c0:8c:88:a6:
e8:0f:a5:e6:60:ca:1a:c3:c2:b9:93:c8:35:10:f6:
06:e1:16:4c:29:28:13:4a:a5:89:ec:59:3e:e8:a5:
26:ff:2d:84:e7:36:8e:e3:47:dd:e3:66:5a:cf:1a:
58:d5:b4:37:b6:4f:06:c0:c3:ed:ce:f2:bd:ea:10:
5d:b1:26:ad:a9:5e:a6:0b:bc:e2:e9:e1:a8:da:ad:
2c:0b:10:98:fd:50:29:5d:17:9e:c2:1e:50:08:55:
19:eb:77:6b:c3:6a:72:fc:8a:79:df:a9:86:34:58:
d8:3f:d1:10:6a:66:f4:c0:26:be:77:2a:bf:bb:5e:
63:c4:bd:8f:e1:3c:1a:68:59:72:ba:57:29:9d:4c:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:81:25:31:A0:86:3D:08:C9:E5:B8:9A:D2:6C:FF:9B:0C:F5:00
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:63:30:0f:26:f4:0e:8f:f9:ab:1b:8f:e3:46:17:e1:f9:
c2:05:11:3a:f7:cc:d4:c4:a3:99:21:63:07:fa:09:53:52:8e:
e8:21:2d:dd:ab:3b:de:60:9a:04:3f:15:5c:64:62:29:18:c4:
b6:26:9a:8f:49:7c:f3:55:e1:34:a8:18:7e:92:f4:8d:d5:a5:
50:10:b6:c2:b0:93:38:ed:d0:21:01:70:80:7b:56:d0:6e:ad:
8f:79:2b:09:6f:c6:d7:5f:35:a9:6b:82:87:a0:e7:f6:b8:e1:
9d:88:a4:d8:e1:6d:4d:ab:c8:39:25:0b:45:ad:a6:3d:66:15:
d1:c0:56:15:89:a7:c5:22:59:f7:05:08:3c:07:c9:7d:03:f4:
2d:9a:6b:01:a2:d2:ce:2d:bf:ec:0c:a6:08:b7:37:82:4c:ee:
af:45:7e:7d:b7:09:80:24:4e:04:1a:73:a2:97:12:1a:d5:a2:
b0:9d:6a:70:b9:5f:4d:d4:2a:70:a3:0f:27:4e:68:1a:36:3b:
9a:81:81:20:55:c2:8f:f4:6c:c6:fb:22:ee:d4:54:11:46:b4:
71:d9:18:5e:86:33:76:73:64:2b:66:f8:e6:90:b2:62:d1:a8:
c6:21:d0:84:d7:8e:7d:a4:c6:d4:5a:a9:b8:4c:54:05:c4:95:
40:9f:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:39:18 2026 by rpki-client