Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: MwXKXSHSa6NgD1zoZdApyDD2YEuhANxvzxxAMvGseg4=
Subject key identifier: 67:85:58:EF:CF:69:F6:28:8F:D3:34:0C:40:A4:B3:CE:04:37:EB:37
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01A0D45D68F5C86450FEBC1FE8F744AB9FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 14D5
Signing time: Thu 24 Sep 2026 17:01:26 +0000
Manifest this update: Thu 24 Sep 2026 17:01:26 +0000
Manifest next update: Fri 25 Sep 2026 17:01:26 +0000
Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: IndKmN1P8t91YaNuHHf/BW9eiNq8mqfUEBBLlWPGH/E=)
3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:68:f5:c8:64:50:fe:bc:1f:e8:f7:44:ab:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Sep 24 17:01:26 2026 GMT
Not After : Sep 25 17:01:26 2026 GMT
Subject: CN=678558efcf69f6288fd3340c40a4b3ce0437eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:06:37:bd:09:89:b2:72:99:57:fb:d7:b9:
fe:33:75:1d:c1:f7:71:63:e4:f2:2f:2a:b3:93:7c:
3d:a1:4d:3d:9d:2d:f3:ca:54:b7:e7:d9:4d:11:d7:
86:b5:62:75:d2:8f:f1:3a:88:e5:93:87:a9:fe:58:
68:b7:1a:b5:c9:59:80:be:51:8b:5a:b5:23:3f:f8:
0e:80:2d:8a:3a:00:1d:74:6e:af:1b:79:f0:2e:a4:
93:6f:dc:7a:2e:53:08:a6:5f:89:29:17:71:2d:7d:
3d:07:1a:4f:e1:a5:9f:8d:66:c4:3b:a9:ab:f7:07:
b1:17:0e:a6:48:72:48:eb:4d:8a:52:1a:9d:96:fe:
37:b9:6c:83:ab:92:1f:8c:e2:eb:c7:51:da:a5:c0:
93:02:2f:fe:b6:3c:6c:1f:59:34:3d:17:6f:35:bf:
45:e0:1b:17:ca:73:5c:a8:ac:82:0f:d0:e2:29:4d:
bd:68:50:b4:a0:8c:3f:8a:e4:a4:81:03:7a:bc:ee:
01:12:d0:db:24:41:19:d6:39:19:cb:28:d1:c1:12:
94:6e:1f:8d:60:f0:bd:8e:15:6a:d7:15:8c:83:6b:
ca:92:6f:40:1f:b5:88:22:c1:dc:a3:ab:b5:33:8d:
03:c2:30:40:ad:b4:07:bd:a1:60:94:27:ae:3d:8c:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:58:EF:CF:69:F6:28:8F:D3:34:0C:40:A4:B3:CE:04:37:EB:37
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c8:d9:4c:91:5d:88:c0:40:b3:9a:4a:ed:01:cf:0d:9e:6d:
bd:c7:a4:d6:f2:de:20:21:f6:df:d2:21:92:69:28:6b:67:f8:
c9:d4:51:61:05:39:56:e8:37:70:09:69:98:f3:63:81:db:3f:
d8:18:33:b5:44:b3:23:4f:6b:d9:27:aa:32:64:eb:52:ba:14:
d8:1e:dc:ec:8a:1f:2c:39:6f:34:c0:d3:5f:d4:a4:b0:ba:43:
94:84:92:84:67:62:38:c2:12:fb:ef:38:5e:0f:45:5c:bc:6d:
ed:d8:cf:37:68:36:3e:ec:ac:df:e1:f0:37:2f:0f:28:13:2e:
91:68:6c:b2:49:92:87:f7:b3:b1:b9:38:e2:43:e7:88:72:43:
08:c8:7c:b0:cf:c8:7e:89:38:78:0f:22:68:a8:04:61:fc:8f:
ab:9a:77:6b:13:a4:4a:18:cc:99:c9:33:d0:da:64:cb:19:f1:
58:8a:0e:a5:b7:09:af:a9:f0:d0:0d:54:63:53:f9:69:23:30:
76:93:18:66:07:dd:3b:ea:8a:db:fc:3f:04:6d:12:09:a4:a0:
e5:a3:db:7c:5e:62:3c:33:77:67:6a:9b:07:d6:fc:4b:c1:3f:
e9:5d:56:e6:20:49:ec:0e:b1:3c:0c:ad:71:bc:26:20:d2:3e:
97:84:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:59:02 2026 by rpki-client