Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: hagUuYO51Z+grnByE5VO0HE1voDeShUyz3GdEFoSspY=
Subject key identifier: C0:D4:C2:A2:F5:7D:C8:CD:87:30:30:1B:E9:35:3E:EC:D8:90:A9:03
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 01A18CAF0779C95AE3CE07395D98C00AB325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1A4C
Signing time: Fri 30 Oct 2026 12:00:43 +0000
Manifest this update: Fri 30 Oct 2026 12:00:43 +0000
Manifest next update: Sat 31 Oct 2026 12:00:43 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: bpL/dIO+Z88ynt3Tnc4N/CL8WbaRX9/u5TbzlbCR1oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:07:79:c9:5a:e3:ce:07:39:5d:98:c0:0a:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Oct 30 12:00:43 2026 GMT
Not After : Oct 31 12:00:43 2026 GMT
Subject: CN=c0d4c2a2f57dc8cd8730301be9353eecd890a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:7f:9e:5a:0f:cd:23:24:73:82:7c:28:50:
75:b2:d5:c7:89:80:ec:49:15:cb:91:ae:75:9e:33:
f2:e0:2f:12:a8:72:82:54:79:84:39:3d:1c:4a:21:
ab:c4:91:1b:cd:c9:96:63:f6:ba:b4:38:22:8a:66:
69:7c:a5:5b:5a:e3:ac:a9:bf:93:6a:c9:ba:1a:57:
cb:e4:bc:9f:1e:a8:90:81:33:ed:96:54:d1:c1:42:
5f:89:9f:0e:ff:0f:69:bf:fb:69:e7:06:44:c1:d1:
0a:86:eb:00:62:bf:62:6a:e1:06:46:de:1c:af:59:
2d:69:d6:44:df:a4:c5:f2:f2:bc:36:f4:f2:4f:96:
ad:1e:fa:0b:b7:75:22:a3:f5:23:d7:0d:58:db:be:
69:55:c5:54:65:21:28:d2:6b:8f:b0:c3:d2:9d:fa:
c5:07:5e:d0:14:d3:e4:8b:ba:d9:e3:c3:c3:d9:5e:
fc:86:6e:3b:a8:7e:b1:58:94:af:c9:69:f0:dc:13:
c6:05:c6:a6:32:93:96:cb:67:aa:ef:81:81:af:29:
45:04:85:0a:f2:f5:9b:e9:fe:f8:91:eb:81:71:93:
d3:ee:a0:d6:17:e2:b0:48:43:2e:95:cd:1a:b3:e6:
bf:9e:4c:57:cf:c8:ea:14:8e:80:47:de:be:73:7c:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:C2:A2:F5:7D:C8:CD:87:30:30:1B:E9:35:3E:EC:D8:90:A9:03
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:b7:c7:98:45:2a:9f:80:51:27:1f:3e:ee:0c:f3:79:bd:
df:b0:4e:1d:4f:5f:01:78:23:81:e5:10:99:3b:65:73:17:2b:
b0:8e:1e:b0:9e:7f:43:cc:08:55:55:25:5f:b1:32:c3:fa:ad:
7c:99:24:17:ce:7c:2e:da:35:6d:8b:77:bb:a9:01:a5:33:9f:
c3:6e:51:70:6e:d6:0f:d2:b8:e4:9a:e6:6c:0f:8d:2e:16:26:
8d:6d:48:e4:be:f6:99:4e:a3:44:2b:00:e6:84:e1:2a:83:ad:
ec:1f:19:d8:46:91:ca:98:ab:92:65:03:90:6d:df:81:22:9a:
00:29:99:88:87:80:ed:f8:34:48:56:37:65:45:8c:58:8c:bd:
f6:f4:e5:aa:42:d1:34:63:dd:f6:66:26:25:cb:99:e1:a6:0b:
dc:35:76:7d:aa:28:c5:d0:ba:62:d0:ca:16:e0:88:e6:fd:6f:
93:bd:49:6b:71:44:7e:4a:3a:e1:cb:6b:e6:44:21:4f:7b:cd:
a0:56:45:84:c6:25:04:9c:57:d2:10:b1:5b:21:12:1a:94:60:
c4:c4:e2:fd:3c:a2:0c:43:44:2f:c0:2b:66:c5:8f:5d:fb:c1:
89:56:ee:5a:03:94:94:22:c9:3f:53:52:1a:43:ce:96:b9:8c:
09:0e:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:29 2026 by rpki-client