Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: MIUPFnkAg/PyCdetXpBM3w3UnMjP3hSnuNOnYgnlepE=
Subject key identifier: EB:61:D3:D5:F4:9D:B3:9F:58:78:52:30:05:6B:F4:F3:27:9C:24:27
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 01A0D9BB0C157E9957193CBFE700012316BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 045F
Signing time: Fri 25 Sep 2026 18:01:49 +0000
Manifest this update: Fri 25 Sep 2026 18:01:49 +0000
Manifest next update: Sat 26 Sep 2026 18:01:49 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: NBzTOmHgWfyyCVTLMJGCLztYBJJSbkpu0Hz56ikKa/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:0c:15:7e:99:57:19:3c:bf:e7:00:01:23:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Sep 25 18:01:49 2026 GMT
Not After : Sep 26 18:01:49 2026 GMT
Subject: CN=eb61d3d5f49db39f58785230056bf4f3279c2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:60:fe:18:47:0a:a5:d6:c6:94:05:ad:e2:
46:0a:e6:05:2e:4c:72:7d:ac:49:44:d1:20:ea:99:
38:86:7f:e1:f2:a4:f5:26:e5:ac:c8:3c:9d:d8:2c:
05:e1:b6:9f:1b:38:4c:e3:7f:b3:0c:b5:0e:29:fe:
f8:55:44:c3:81:2e:7c:49:79:e2:b9:2a:7d:78:37:
2a:a7:88:02:6d:4d:b9:ea:72:94:a5:4e:7d:47:ce:
a8:91:16:58:06:2e:ea:dd:5d:da:2f:9e:cf:7a:b1:
31:4b:df:4a:2b:94:e0:bd:a0:0e:e5:39:e5:7f:d8:
79:6f:03:ab:e6:40:cd:6c:4f:95:1c:25:74:0b:fb:
1e:81:b4:64:85:c1:16:2d:10:cd:c6:14:e8:b2:0c:
d3:2f:d8:84:60:b6:59:45:b4:e5:f0:44:96:2d:4d:
08:c5:0d:c1:d9:95:2a:d1:f0:3b:b2:7b:df:0a:0a:
84:ab:a8:dd:69:fd:e4:a0:df:94:00:f9:8b:fb:e7:
e4:9b:14:3d:1f:60:44:34:bc:b9:a8:1e:a0:b2:74:
0d:76:81:bb:3b:4e:3b:66:69:83:75:59:aa:2d:59:
fa:b0:e1:fd:e3:63:eb:48:26:5f:09:67:16:5b:c5:
b1:15:9c:75:da:90:e8:70:84:76:90:5a:13:f2:44:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:D3:D5:F4:9D:B3:9F:58:78:52:30:05:6B:F4:F3:27:9C:24:27
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:2b:2c:75:01:fc:67:36:fb:a1:b2:d0:3e:69:6e:fe:f9:
72:e1:c2:5f:ec:6a:8f:1e:72:05:38:14:5a:74:85:45:aa:24:
bc:17:56:31:0c:d3:bd:fe:dc:da:86:65:81:0e:f2:c5:72:00:
94:22:d0:d7:d2:c3:0c:4c:0f:a9:7f:3d:44:9f:88:6e:ab:58:
36:53:d3:f7:bd:af:f7:f6:be:7d:1c:ff:48:40:66:a7:1d:1d:
a6:09:f9:df:ee:7b:21:74:f4:ba:b3:68:de:c5:48:ff:47:d7:
88:31:35:af:ad:c1:51:b1:1c:22:2e:f4:29:6f:a6:30:2c:27:
a3:24:3a:c0:ae:3a:d7:2b:65:52:83:c3:73:25:ff:ee:8b:e3:
aa:c0:ab:f7:33:eb:5c:cb:d8:0a:2e:35:07:e9:87:97:2a:d1:
a9:74:74:a5:3b:41:b7:1e:ae:69:24:16:dd:cf:7e:e7:cc:dd:
39:8b:bb:e8:04:b9:c9:f2:e1:59:70:95:2f:57:c7:85:9a:2d:
38:cb:97:54:a4:1a:d6:b2:9f:6f:01:82:7f:d5:6a:10:e7:2e:
28:29:15:b3:86:5c:a3:21:56:69:10:7f:da:14:95:49:f4:0b:
46:9b:ad:25:8a:fb:ce:7f:4b:bc:54:66:2d:20:60:ad:88:5e:
e9:45:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:38:10 2026 by rpki-client