Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: 6ZPJ/Rfr19+34bHWIJ7SAdyCxXz/ceobNlajVoUNGNU=
Subject key identifier: EB:AA:C0:8B:7D:58:7F:2E:96:86:07:DC:31:1C:D2:96:E2:1E:8D:1A
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 01A1016CDEABEAB55409B3746E32D5BA86E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1585
Signing time: Sat 03 Oct 2026 11:01:14 +0000
Manifest this update: Sat 03 Oct 2026 11:01:14 +0000
Manifest next update: Sun 04 Oct 2026 11:01:14 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: AxQ0xV9fvqcyB+chNc0A3RIVTil+0nn5C6KxJ34nefs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6c:de:ab:ea:b5:54:09:b3:74:6e:32:d5:ba:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Oct 3 11:01:14 2026 GMT
Not After : Oct 4 11:01:14 2026 GMT
Subject: CN=ebaac08b7d587f2e968607dc311cd296e21e8d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:8b:2e:0f:44:77:45:af:7d:0e:b1:4b:fb:
38:ba:f2:60:36:99:40:3c:a8:72:6a:ba:fa:72:a5:
78:86:26:a3:e2:59:65:99:71:e0:36:ea:ea:45:a0:
2e:eb:dc:22:6d:38:61:d8:f2:af:ee:82:eb:2a:22:
23:b0:7b:c5:f7:eb:98:a7:ec:21:95:d8:1f:c8:80:
2b:7e:61:09:7e:a1:50:47:37:11:69:d8:e7:71:df:
7e:aa:62:51:90:b6:1f:68:53:53:75:71:10:9b:02:
11:69:b0:29:d4:28:c0:8d:18:5d:ce:87:f2:a5:e1:
e1:f2:b6:61:f1:96:92:bd:6a:8d:49:d5:b6:06:56:
c8:b0:79:75:e5:e8:00:83:c0:64:28:ea:68:b2:29:
38:7f:36:77:ea:64:98:e9:f9:a3:f6:e3:87:4d:c8:
8e:ea:70:51:9b:86:60:25:d8:92:9a:7f:22:12:89:
c5:76:51:e9:4c:c3:15:ee:44:4c:8c:f7:a6:b9:0d:
e0:de:6a:7b:23:95:1d:aa:1e:bf:d3:04:a1:8b:49:
4f:d8:7c:39:52:dc:3d:7c:3e:94:c4:74:04:50:8f:
58:54:af:61:93:d6:8e:a8:30:30:5b:f8:04:eb:a6:
62:f2:2f:bb:e3:6e:32:93:02:6c:d3:4c:66:d5:e2:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:C0:8B:7D:58:7F:2E:96:86:07:DC:31:1C:D2:96:E2:1E:8D:1A
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ce:6b:26:a1:94:b7:94:21:46:d2:75:f3:8d:57:66:40:78:
89:98:b4:cb:c5:95:9e:9b:ef:be:24:03:3e:96:a4:cc:7d:19:
36:bb:50:ea:4c:0b:4b:cd:68:90:96:d6:57:8d:c1:8b:05:77:
24:b3:9b:f8:89:0f:2c:6e:35:b3:65:77:3f:ab:66:34:69:57:
fe:64:0d:c1:86:80:65:1b:dd:15:9f:a5:fb:73:40:63:7c:90:
ee:3b:ec:98:4e:92:7a:a7:04:e6:da:88:2e:10:de:bf:b9:58:
80:af:96:47:dc:a7:30:b6:49:c2:a3:35:76:25:98:d9:22:31:
1b:39:32:12:bf:e7:d1:c2:35:df:54:55:ff:4f:23:23:4a:ad:
a8:db:f3:34:46:3d:16:f7:f6:22:95:b8:6d:3f:50:7e:61:b2:
f2:19:e8:d0:fe:df:bc:e7:29:a6:87:99:a9:7a:fe:98:6e:cc:
d0:72:23:a5:d6:f7:c9:b0:23:d7:06:d1:08:b4:f9:2b:f0:ee:
a5:6a:14:78:82:0e:0e:4f:3b:18:fc:07:d5:f3:32:3c:df:4f:
47:d9:1c:e4:e7:ad:54:37:46:b1:4e:54:80:ac:05:30:6e:d2:
c2:47:d1:69:fe:3e:f2:11:d2:ce:51:ab:0e:42:db:1d:66:59:
56:46:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:44:37 2026 by rpki-client