Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: uCcjDk9DcAzsEPqChGbEIhAS5cnbMJ/GyjmVOVSh5SI=
Subject key identifier: 33:71:DA:04:A4:6A:44:19:F8:94:BC:EB:F0:DE:5B:70:E7:0D:E7:74
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 01A0D8A8B899A06C0A1049CE090C45347B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 06F2
Signing time: Fri 25 Sep 2026 13:02:10 +0000
Manifest this update: Fri 25 Sep 2026 13:02:10 +0000
Manifest next update: Sat 26 Sep 2026 13:02:10 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: CLkwxEurtcsC2JuLTncHJudv9Uzmydf44ug/kXaApy0=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:b8:99:a0:6c:0a:10:49:ce:09:0c:45:34:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Sep 25 13:02:10 2026 GMT
Not After : Sep 26 13:02:10 2026 GMT
Subject: CN=3371da04a46a4419f894bcebf0de5b70e70de774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:bd:ee:45:9b:65:35:29:26:43:96:e1:ba:
96:91:ac:bd:62:f6:f5:ee:92:e7:61:1c:8b:a0:35:
23:30:06:63:2f:45:63:57:16:d3:06:79:23:9c:d4:
e9:60:55:36:27:b4:80:07:e4:b6:80:da:5f:5e:6b:
c1:4f:19:42:79:3e:a1:0e:5c:3b:26:fa:f0:2a:60:
17:ff:b4:8d:d4:f6:18:4d:57:34:e0:b5:9b:90:cf:
d8:fc:23:51:02:50:af:7f:fd:c0:a2:2a:c1:7f:e9:
d1:25:17:0a:06:04:6a:57:c1:8f:08:5b:5b:03:03:
ec:92:98:e1:c3:88:25:bd:71:2c:ed:d8:af:3e:28:
24:37:79:cb:2f:66:e9:f7:a8:dc:fa:8d:a8:cf:9f:
ee:33:a4:84:75:b7:77:9d:27:26:48:a3:68:55:48:
90:51:0d:f2:aa:28:19:9a:5d:c2:be:40:8c:5e:dc:
e7:e2:c1:b8:dc:a7:52:65:dd:f8:88:7d:fc:02:b1:
d1:4d:d1:af:df:6e:9b:71:d9:29:e8:28:d6:2a:ca:
80:c5:ae:96:94:98:9a:b0:91:a7:49:b7:8d:99:04:
08:c4:d3:97:c0:a3:bc:67:30:be:4e:0d:0d:c1:51:
a6:cc:44:8f:bf:ce:1b:65:1e:ad:a3:23:71:74:77:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:DA:04:A4:6A:44:19:F8:94:BC:EB:F0:DE:5B:70:E7:0D:E7:74
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:5a:21:dd:25:11:30:8a:db:be:8d:6b:41:99:89:eb:8a:
0a:0a:45:b0:00:2f:c8:89:c6:48:07:76:17:eb:18:b0:45:88:
f6:33:d0:22:75:97:ba:de:be:6a:cb:50:6d:c6:c9:15:b6:46:
c1:e9:03:f9:81:16:11:e7:0f:8a:11:41:91:fd:de:f8:d7:94:
d3:db:c6:20:42:50:f1:87:cf:d8:7e:37:d8:5f:94:1f:05:8e:
26:ea:4d:52:08:26:90:50:13:ee:7a:a4:8f:0a:bc:d4:1e:b6:
01:86:b1:85:fc:88:f4:fd:ee:0d:6e:5b:bd:f6:1c:f6:13:ba:
68:ce:6e:14:f5:15:61:59:96:48:06:7d:93:19:0c:82:2c:46:
4c:70:df:d9:af:51:e9:87:c8:75:bd:38:6d:9a:ad:5c:e4:50:
8e:35:32:a9:ae:12:b8:d6:6c:00:c6:4e:48:38:29:9b:d1:88:
02:96:35:ea:81:fa:f4:31:cf:c2:8b:f6:da:93:43:eb:d3:ba:
ca:ba:16:df:19:ad:df:6d:d7:53:d1:38:25:68:e9:6a:0e:d6:
17:e5:34:a4:12:0f:aa:7a:22:df:89:e2:2f:c0:e0:96:8f:d1:
22:79:51:4e:3d:e3:cf:ac:7b:0d:7c:f4:dd:1f:83:98:81:df:
8f:35:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:37 2026 by rpki-client