Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: 75dQTRELnIC5PGDDcdneJHB3VOgtZwB7jlLspCOkv2w=
Subject key identifier: 42:E2:DC:FE:E6:26:E2:53:03:41:11:E6:1F:5A:E1:99:5B:FD:DB:1A
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 01A0E92DD79D99B7C18A65EDEA83C713F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:30 +0000
Manifest this update: Mon 28 Sep 2026 18:01:30 +0000
Manifest next update: Tue 29 Sep 2026 18:01:30 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: Rwg7LO8eUSTk1uStQGjP7ig+O2Qu69bHlIOYP4zziA4=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:d7:9d:99:b7:c1:8a:65:ed:ea:83:c7:13:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Sep 28 18:01:30 2026 GMT
Not After : Sep 29 18:01:30 2026 GMT
Subject: CN=42e2dcfee626e253034111e61f5ae1995bfddb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:26:36:f6:22:a8:28:47:98:a2:02:e1:42:
54:d1:83:4d:5e:c4:f2:54:3a:66:6e:4d:89:42:f7:
c1:be:7f:22:ab:3c:85:79:c6:66:bd:29:54:70:e9:
c7:96:72:fa:da:65:98:e0:6e:5e:d5:bb:25:86:92:
7b:35:87:7d:0e:49:6c:29:52:03:33:f3:9e:b0:41:
32:81:9b:4e:2a:22:4c:91:02:f0:06:24:b4:b0:d3:
55:5f:e3:1e:44:2d:44:83:37:54:60:48:d4:d2:4c:
db:af:e5:5a:51:6d:ed:8f:fd:8e:e8:a0:f6:c5:6d:
a5:ab:d0:81:67:b7:74:76:4c:ad:96:7f:4a:39:4f:
f5:8d:16:8d:65:3c:9d:8f:d9:b1:32:16:c9:bb:7a:
4d:e9:5c:2f:c4:b2:15:5a:70:be:d0:26:25:93:f1:
1b:5e:93:ce:51:ce:f0:cb:c2:83:7c:d7:4d:64:61:
d0:7c:47:c3:23:87:af:59:79:1d:34:f3:e9:e4:9c:
cd:94:28:9d:27:b3:12:e2:87:84:7a:a1:50:4d:1c:
8e:ec:0a:33:03:22:b1:22:5c:02:9d:d3:b9:ae:d9:
0b:01:44:ed:fc:d2:88:0e:20:66:de:f9:2c:52:7c:
63:04:01:95:8b:06:d7:f0:b1:15:7a:a4:2e:09:26:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:DC:FE:E6:26:E2:53:03:41:11:E6:1F:5A:E1:99:5B:FD:DB:1A
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:30:7c:9e:23:19:38:66:e7:87:ab:e3:1c:75:b2:c1:09:
0e:ec:74:82:e8:51:60:21:31:a7:67:02:ea:b3:ba:28:ac:11:
e7:d7:20:19:3c:7b:e6:68:1f:e3:67:60:b3:34:ca:d2:90:3d:
57:02:12:63:c5:9f:80:ab:62:9b:f2:28:63:d2:86:d5:fe:9c:
7c:9e:6f:d5:3d:8d:6c:35:46:73:d7:78:06:a7:36:80:72:ae:
23:48:b3:31:0f:56:f4:c3:ea:d6:06:3d:fa:e4:7e:99:32:85:
f4:b9:81:ef:20:bc:96:00:17:80:bc:42:26:e6:0b:79:b7:a7:
61:a6:df:5b:5f:e7:2c:22:2f:69:6a:3c:4a:da:44:ba:ad:20:
bb:75:64:27:a7:b2:73:8b:8c:ef:f1:03:da:aa:6f:a1:fb:55:
be:ac:24:67:de:69:42:8d:35:ba:98:48:8f:d2:f5:07:6c:e1:
a9:2e:6a:40:59:bf:76:5e:df:a9:0b:04:b3:46:7e:24:a0:18:
6e:ac:a0:3a:c3:77:1a:74:83:aa:5e:26:3b:30:81:c9:60:20:
d5:e3:f5:ce:23:86:05:1b:72:b8:eb:31:4c:fd:6a:a4:54:55:
88:02:4a:be:f6:c3:d3:85:ee:f5:1d:24:00:52:0e:24:07:7a:
a4:0b:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:39 2026 by rpki-client