Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: bXQwc9bwAj9WoeUzoedveWvs5sY8gI42QWftwN2x5aA=
Subject key identifier: 58:EB:B7:43:DE:A1:59:D8:06:69:DD:59:86:3D:1E:2D:06:D7:11:31
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 01A0D5A7018A74599E4FE6A8711D042BD679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 23:01:26 +0000
Manifest this update: Thu 24 Sep 2026 23:01:26 +0000
Manifest next update: Fri 25 Sep 2026 23:01:26 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: myFh+HE3jsfWQVtJnrTVdJ0zEj1p0duBG5IyOFeNvb4=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:01:8a:74:59:9e:4f:e6:a8:71:1d:04:2b:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Sep 24 23:01:26 2026 GMT
Not After : Sep 25 23:01:26 2026 GMT
Subject: CN=58ebb743dea159d80669dd59863d1e2d06d71131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:c6:7f:54:32:45:e0:e2:3c:8f:97:76:f1:
67:10:a5:e9:25:82:4d:ad:2e:9e:1f:d7:2c:1d:b9:
67:86:16:22:0e:7e:c8:32:13:0e:da:9a:c7:6e:ce:
89:7c:45:5b:80:15:d8:d3:e5:62:5b:0e:37:5b:0a:
06:e9:9d:b3:d0:1e:ce:8b:6b:cb:f4:93:72:74:62:
a8:f0:6a:55:b5:05:17:59:7f:b0:ec:95:2f:3b:ee:
d0:42:17:88:b9:1f:97:2f:75:d1:f0:81:3b:7a:55:
6c:95:ed:5d:4b:0d:2a:2b:6d:2c:f9:d7:33:c4:ba:
38:04:09:22:b7:2d:ab:70:8b:97:ec:bb:ac:d4:b2:
75:03:63:a5:9f:7d:30:2b:18:82:9c:f3:ba:ae:51:
a0:42:b5:e6:c7:bd:d3:ed:b9:de:23:69:67:73:7e:
53:26:f9:32:17:df:90:f4:b0:7c:d5:85:c1:91:69:
02:15:8c:2d:e6:a4:c8:13:40:01:ef:29:23:c8:5d:
8e:bb:58:13:86:88:62:a9:ea:56:a7:db:32:d3:43:
fb:c2:f9:89:ae:3c:9d:28:32:81:68:57:32:7c:2f:
76:a3:53:51:c1:5d:1b:b4:7e:cb:88:d0:cc:12:52:
15:01:b9:34:68:66:4c:6a:7f:18:43:61:1b:50:c2:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:B7:43:DE:A1:59:D8:06:69:DD:59:86:3D:1E:2D:06:D7:11:31
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:86:3c:ab:b4:f7:22:83:62:5e:5f:d3:d4:14:4c:3b:ec:
56:6c:25:3a:e4:cd:ad:63:13:f8:5b:99:8e:43:d2:fa:3f:ab:
f8:00:d5:38:e6:5f:46:c4:20:29:ea:0e:37:c4:77:25:57:d4:
be:96:c0:71:e2:10:4c:40:84:fc:ca:33:79:ff:9d:34:19:e4:
85:ca:06:74:f9:16:ed:bb:03:e3:03:b5:2c:1d:b8:f6:25:17:
cb:4e:31:ae:a6:c8:60:dc:40:b8:9a:cb:00:53:ee:5c:cd:b8:
d8:df:52:54:00:d2:5a:8c:fb:cc:d4:4e:f1:74:e7:09:e3:1b:
6f:d4:bd:04:91:ff:4b:3d:1f:05:17:cd:ec:76:34:9c:77:33:
30:15:8a:ac:0e:83:94:50:70:b7:72:b0:ca:10:4d:d1:3b:49:
c5:66:64:3f:08:fb:2b:92:46:3f:e2:0c:d7:8f:56:7d:72:90:
c0:45:9d:01:c2:93:a9:52:57:e0:0e:60:e5:2d:1d:e7:29:6c:
6d:28:96:f1:3a:6b:4c:16:ae:65:c3:86:a1:6c:b1:85:5d:9c:
ca:36:a3:88:47:99:32:93:fa:64:c9:f6:ec:33:44:4c:ed:da:
e7:5a:67:e7:30:78:82:b8:01:5d:d8:b8:57:b4:84:96:87:35:
95:0f:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:51 2026 by rpki-client