Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: ar2FUfK6GvHdCABksIswzfQw5KjqbdViMwdVmMD2/dg=
Subject key identifier: 3D:E6:36:97:A6:26:5B:B6:BA:85:39:11:5F:79:3A:B8:7A:E4:41:45
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01A1AB27F9FAA55297828F1DD0C641E59488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1AE1
Signing time: Thu 05 Nov 2026 10:01:26 +0000
Manifest this update: Thu 05 Nov 2026 10:01:26 +0000
Manifest next update: Fri 06 Nov 2026 10:01:26 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: I0x30kq/A80QdPnf6ZKu4J19b1CHNdLraknaYSkthK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:f9:fa:a5:52:97:82:8f:1d:d0:c6:41:e5:94:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Nov 5 10:01:26 2026 GMT
Not After : Nov 6 10:01:26 2026 GMT
Subject: CN=3de63697a6265bb6ba8539115f793ab87ae44145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:e0:1c:36:5d:75:6f:b4:f6:80:47:9e:51:
e8:8c:35:63:3d:5a:34:4d:5b:53:94:d0:6d:45:86:
31:9a:b2:fa:cb:0b:69:06:6e:2b:2b:9b:9a:19:2d:
da:c0:94:1f:50:02:df:60:f3:f1:8c:e1:c6:89:ce:
3f:00:40:87:2e:70:4e:c5:43:c2:d9:4f:0d:60:d5:
64:63:d2:dc:4b:73:e0:05:e0:8b:34:6a:8f:33:f9:
5b:3d:a6:67:2c:2c:4a:bf:42:80:2d:ef:03:77:61:
2c:19:17:a9:78:11:37:2b:49:50:00:bb:25:bf:f2:
15:ac:9f:f1:58:3d:6f:e9:f2:d4:eb:6b:99:2d:b0:
2c:27:39:db:28:e6:5a:8e:84:22:9a:86:af:e0:40:
19:32:04:ee:4e:29:6c:28:bd:b0:44:8a:b3:aa:d1:
2d:4a:e4:8a:b6:7c:1f:9f:22:07:31:ac:a3:9d:08:
ba:0e:6e:56:b0:c6:4b:ed:da:75:16:70:66:90:a7:
e3:d0:74:a9:09:b4:86:57:62:b1:19:9f:41:80:80:
d8:75:05:5d:9e:8a:b0:30:18:79:2c:ab:cd:73:ed:
a0:73:62:5e:a9:28:ac:9d:53:e9:23:d1:38:19:74:
f4:45:5e:d9:a7:1d:a9:29:ae:7f:b8:40:9a:52:c3:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:36:97:A6:26:5B:B6:BA:85:39:11:5F:79:3A:B8:7A:E4:41:45
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a8:88:96:df:e8:e1:dd:48:2b:2c:4a:fe:d4:bc:db:e3:76:
b0:a4:4d:41:20:dc:a5:51:12:c2:70:68:55:24:6b:18:bc:d5:
5a:d6:b8:2f:ea:90:a1:b6:34:9c:05:88:78:80:a5:3e:23:1e:
77:63:30:4a:f6:b6:7d:e2:7e:e3:0e:44:6f:14:8c:9d:13:d4:
49:95:d8:5f:0e:e5:11:be:c8:09:aa:9c:45:10:ed:eb:75:03:
f1:a7:5c:dc:ff:4a:f8:4a:f7:8c:9b:7b:46:5c:b8:87:c5:98:
7f:a9:c2:79:d3:9c:a9:b3:ac:6b:8a:d5:ae:33:e1:57:0c:81:
50:ee:d3:18:87:e5:1e:08:9c:b3:af:ec:ba:a8:c4:3c:cd:11:
e4:b1:47:fa:18:37:c8:b8:6c:15:d5:82:57:3a:40:67:ba:1c:
2f:6b:9f:0c:d7:d4:61:64:77:cb:06:2a:45:ac:d4:43:fe:19:
8e:51:09:52:7d:a2:93:87:d4:81:ff:89:d7:51:0b:db:5b:6d:
11:7c:7a:18:21:f2:75:83:c4:75:2c:0d:cd:8b:93:16:0c:fe:
d2:fb:6d:a7:fa:90:7f:cd:02:91:75:09:28:6b:4a:45:2f:c6:
5e:ed:06:0d:1b:57:8f:ed:26:e6:82:91:f5:d8:99:00:59:9f:
d7:a3:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:25:02 2026 by rpki-client