Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: mHJ+0E+6TfP5ek73R2yEZuvZ5mgPIO0AjEPJ00WrwhQ=
Subject key identifier: 34:A1:BB:9E:CC:D7:50:BD:65:9F:03:39:41:EE:E3:B2:22:AD:7E:47
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 01A0DC174734D675043F0ECCF6EA23C01627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0E71
Signing time: Sat 26 Sep 2026 05:01:48 +0000
Manifest this update: Sat 26 Sep 2026 05:01:48 +0000
Manifest next update: Sun 27 Sep 2026 05:01:48 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: VujDuwFAlglVkPDuEriKyI/Ol/pWuLs479SxdeiPP8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:47:34:d6:75:04:3f:0e:cc:f6:ea:23:c0:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Sep 26 05:01:48 2026 GMT
Not After : Sep 27 05:01:48 2026 GMT
Subject: CN=34a1bb9eccd750bd659f033941eee3b222ad7e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:98:36:8e:58:27:19:64:6b:1b:3d:a2:cd:
25:48:4f:6c:1a:8b:fc:6e:07:ea:d6:d8:0d:c5:45:
00:9e:ba:98:3f:43:24:54:d5:2e:b5:36:49:3c:b9:
0a:ca:13:2d:40:d3:33:c5:96:50:a7:40:22:2f:82:
e5:8d:e4:23:25:d5:d6:f6:4f:66:f5:96:a5:00:16:
df:37:2e:12:95:0f:27:75:a2:88:e6:45:4b:77:ca:
5b:0e:26:41:40:81:ea:da:78:a7:15:16:ac:3d:88:
a0:4b:b6:e0:4f:6c:23:85:a1:49:08:60:83:0f:35:
8c:f3:cf:dc:8e:99:18:18:7c:09:01:a2:5f:c3:96:
28:f4:2c:05:1b:13:09:ab:dc:b3:d0:b3:4a:ff:ff:
f4:2d:33:65:31:d2:62:a2:89:09:4e:5e:e4:23:21:
77:8f:ba:42:b2:95:15:50:03:59:ff:bf:a6:48:c0:
b8:39:ef:86:c4:d4:7c:3d:2c:91:59:ed:70:f3:ba:
34:d9:bc:65:2a:ea:55:cd:c6:1a:59:f1:bc:72:22:
b3:dc:50:40:81:98:0c:9a:b7:06:69:ee:18:9f:4d:
f9:44:c3:fa:79:dc:c3:c6:fa:2c:2a:de:81:97:ad:
c4:49:7b:ed:e2:74:df:e1:e2:94:0a:d0:6f:34:96:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:BB:9E:CC:D7:50:BD:65:9F:03:39:41:EE:E3:B2:22:AD:7E:47
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:5e:9f:a7:9b:a6:72:36:46:c2:cb:79:de:41:04:54:88:
f4:8d:4f:e8:cd:a7:d1:d8:32:8d:76:9d:c4:1c:61:5b:e5:72:
d5:89:db:45:a9:5c:7e:a4:fe:2e:68:95:52:1f:be:25:0d:2d:
30:69:9f:a2:80:d3:f2:44:16:16:6e:c4:cc:78:8f:db:a1:92:
87:5a:95:f9:9c:93:27:5c:c8:bf:67:b3:6c:ff:e2:d2:f0:17:
b5:ee:70:b0:92:b5:74:24:36:3a:84:39:fa:45:ff:fe:ef:e4:
70:2f:3e:5f:5e:e9:9f:c2:dc:60:6b:13:9f:fc:e4:50:08:73:
69:8c:df:50:3c:a0:27:b9:a4:35:0a:d5:5d:e1:6d:bb:92:06:
33:31:bd:3c:9d:40:32:47:ea:4c:50:6b:04:42:90:67:f9:38:
32:8f:b6:00:23:e0:63:6d:9b:9b:07:32:c4:5a:21:10:70:17:
e2:85:2f:0a:bd:1d:bc:fe:8a:7f:06:98:35:5b:bf:ba:b0:d3:
94:0c:ef:20:17:d3:72:c4:bf:12:b8:b6:b9:75:26:fe:77:09:
cd:91:3c:2f:1f:ad:3f:c2:e8:0b:e3:a8:80:0e:1d:08:65:fe:
84:83:b6:ea:c4:27:c3:a0:11:d3:43:6a:09:9d:06:bc:d8:9f:
46:e3:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:57:12 2026 by rpki-client