Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: qeg+08KYxsWOUM5aOf50hQvl7VKtdXUT9lK09qyqKUI=
Subject key identifier: 9B:79:6A:CA:96:1D:BD:6D:31:B9:BD:FD:54:A2:D5:19:38:CD:4E:80
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019E1EA3276023588648B7A98993940BF5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1285
Signing time: Wed 13 May 2026 00:01:09 +0000
Manifest this update: Wed 13 May 2026 00:01:09 +0000
Manifest next update: Thu 14 May 2026 00:01:09 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: HgEQ0NtOk52JaDn/J84l00WEwjH98wfWtK86BvLnvmc=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:27:60:23:58:86:48:b7:a9:89:93:94:0b:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: May 13 00:01:09 2026 GMT
Not After : May 14 00:01:09 2026 GMT
Subject: CN=9b796aca961dbd6d31b9bdfd54a2d51938cd4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:86:75:95:fe:1f:fe:a1:65:a2:75:6e:c1:
c7:a6:21:f7:27:15:d5:06:7e:1d:d0:73:e3:8d:e2:
ac:cf:19:87:00:9a:07:ae:a2:33:fe:08:1a:49:fa:
bf:2a:83:e3:d9:90:5b:02:0a:d6:1d:e7:43:13:2b:
74:04:ba:be:27:26:68:06:55:f5:cc:05:2e:ee:ce:
95:9d:68:b9:b1:45:5e:c3:60:7e:b0:fe:53:71:13:
fe:48:25:c9:b8:92:4f:59:48:65:7b:8e:b5:f3:0f:
ec:bd:a3:23:b9:c1:cb:32:a2:6d:8f:78:4d:01:19:
0f:8c:a5:93:18:84:b6:c4:6f:b0:5a:23:5f:bd:42:
5d:6e:70:a7:98:a7:d3:5a:94:4a:00:8c:7c:03:7d:
56:13:93:ef:7e:2e:f6:5a:f3:73:0d:a2:a7:c0:e8:
11:4b:af:28:fe:b5:2f:bc:ba:3f:fc:88:81:59:a8:
ab:1f:c5:f1:7e:76:a1:11:ba:d3:93:24:b2:02:c3:
75:50:57:22:79:5c:6b:66:9d:ff:bf:24:98:83:d3:
75:65:63:f4:e5:9e:a5:60:b7:a5:ad:46:12:cc:cd:
af:ce:c5:61:19:ea:d8:62:55:36:91:00:19:45:58:
9d:12:ce:d5:58:2a:57:85:f0:57:fe:4c:cc:52:28:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:6A:CA:96:1D:BD:6D:31:B9:BD:FD:54:A2:D5:19:38:CD:4E:80
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e2:21:1a:78:86:f0:fb:b6:82:a1:2e:9f:5e:d6:e5:06:2a:
76:b3:17:1d:26:e0:3b:b3:8e:31:30:8f:25:ae:26:06:28:58:
f7:8b:b9:89:a1:41:9b:ab:f1:cf:c4:86:45:98:ac:d2:5a:37:
95:5e:24:94:f4:9a:3c:de:20:5a:ba:83:ad:cf:ba:d0:94:d0:
ac:a9:0c:59:55:bb:4e:d7:42:76:b3:9e:b8:6d:0a:ae:73:ea:
7c:ae:76:56:87:28:44:ca:24:53:cf:cf:24:f2:ad:4d:d9:db:
57:55:f2:3b:70:fe:29:5f:65:b2:83:33:bf:24:fe:f2:4a:64:
64:4b:84:d3:53:c1:88:f8:75:6a:f0:13:10:53:97:72:5a:f9:
89:dd:9a:bf:d1:81:be:d5:e8:ba:a4:ea:5b:34:27:1c:29:28:
3d:64:e9:ca:bc:9f:54:0e:59:a8:a2:ee:7c:6f:e4:de:5d:94:
43:69:bf:05:8f:2e:0f:6a:ab:23:ae:15:ed:b3:fc:ee:cb:07:
92:03:a7:58:cd:55:f7:15:e8:4c:6e:b1:29:0a:c5:85:09:ed:
da:e5:55:81:9d:12:5d:da:06:82:6e:af:70:90:74:d1:73:c1:
51:ae:ec:29:53:ae:d0:84:78:1e:d9:c0:6d:7e:8d:3c:03:4d:
33:60:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:18 2026 by rpki-client