Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: rACThJUz9+bn5iFByg8ff2Dde0JwIjjGWyXHHFmtRWw=
Subject key identifier: 04:34:36:FF:2D:8C:87:62:C7:2C:24:61:6C:5C:69:D2:5A:5C:BD:C0
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 01A0EA09E6FBE819E298716642F9BD512A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 09DC
Signing time: Mon 28 Sep 2026 22:01:52 +0000
Manifest this update: Mon 28 Sep 2026 22:01:52 +0000
Manifest next update: Tue 29 Sep 2026 22:01:52 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: CJ1WsWDHXNxxxY8Fz/hFSKDMef+i45vhueAEqJobgsc=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:e6:fb:e8:19:e2:98:71:66:42:f9:bd:51:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Sep 28 22:01:52 2026 GMT
Not After : Sep 29 22:01:52 2026 GMT
Subject: CN=043436ff2d8c8762c72c24616c5c69d25a5cbdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:44:f2:51:65:bb:dd:3f:54:f7:dc:9d:c0:
85:81:4b:d5:1f:88:68:99:22:58:b5:32:20:5a:3d:
6f:2b:f4:89:a0:ef:b1:3b:b2:bf:3c:a6:af:71:9d:
d8:9f:9d:22:7a:5c:e4:6f:61:c4:83:26:0f:82:e0:
f7:5d:75:81:45:fb:e0:eb:25:ca:a5:a4:03:dc:3e:
8d:fc:8a:6f:0a:6e:f2:9e:0b:aa:57:f0:90:2d:e1:
e9:ba:ce:b1:81:3c:53:e1:3a:35:77:db:29:ab:1e:
42:a1:7a:6c:30:4f:f4:bb:a5:98:76:6d:4a:db:d7:
fa:33:f2:55:12:7e:dd:9d:c6:c5:ed:01:df:13:bb:
5e:12:e4:d5:21:0b:c0:2d:4c:f6:6b:bc:d6:56:61:
c2:75:5d:7d:cd:b0:02:1f:d9:a8:69:50:01:9b:9e:
c2:44:3b:1e:e4:8d:78:bc:5e:ae:a5:75:4c:00:f3:
67:ee:78:aa:6a:06:3c:b5:f4:07:9c:10:d9:e1:f0:
37:58:5e:f8:3c:54:f2:95:22:2d:82:ac:c6:87:f8:
0d:8b:b2:ca:3f:84:82:3c:d8:a6:9d:29:10:ea:fb:
2c:eb:ab:3e:50:d2:42:83:6d:f3:99:f2:22:4e:75:
d4:40:1e:2d:7a:04:e2:1d:98:db:09:59:48:52:e7:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:36:FF:2D:8C:87:62:C7:2C:24:61:6C:5C:69:D2:5A:5C:BD:C0
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9b:bf:22:85:92:de:dd:73:e6:aa:03:b4:7f:4b:be:66:93:
b0:a7:3d:78:b5:f5:00:1d:18:3e:71:3e:62:a2:90:12:eb:f3:
93:4c:9c:df:32:88:9f:a7:f0:c9:99:91:74:6b:23:69:b6:95:
a4:5d:a0:2c:ff:9d:7a:3b:a4:4f:b1:b2:d2:be:90:6a:68:06:
ee:25:a3:c0:91:10:31:92:08:0a:c7:2b:cd:99:f3:03:9e:30:
9f:62:7e:1a:33:3f:80:7b:67:d3:12:8f:d7:b4:c4:4b:b7:c0:
42:60:ac:4d:80:93:01:1b:94:31:5e:32:97:b8:de:43:85:cb:
a7:fb:61:9d:ca:38:4a:7d:d3:4a:31:21:f9:e8:7a:91:c0:63:
48:24:1b:51:27:81:9c:d6:e3:13:a7:d9:71:aa:1d:7f:95:df:
d0:42:15:7d:ac:7b:52:97:b4:3e:0b:54:8b:27:34:ac:15:bb:
cd:59:ea:ea:e8:5a:a8:ed:cd:f4:8c:08:72:bc:f5:66:d9:f9:
8f:61:d4:ee:51:8c:23:bd:12:d3:34:4d:7a:b0:08:f3:a1:68:
97:e8:7c:7c:3e:e6:5c:b2:dd:04:0b:b9:4d:db:f2:c1:98:09:
e0:fa:5b:26:3e:a6:52:9b:65:48:7e:fa:3f:3f:e9:f1:cf:02:
ec:f0:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:53:17 2026 by rpki-client