Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: vYAaEiTxcMgHPkChZYMo6WmkYWyzhb3pdVg+1Z7LPH4=
Subject key identifier: 45:DD:7C:43:B5:81:0F:2C:7C:A6:DA:D3:08:A9:F8:04:46:BB:83:E7
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A0039445152698EDE2EE9B0CDEE394C759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 1A05
Signing time: Sat 15 Aug 2026 04:00:43 +0000
Manifest this update: Sat 15 Aug 2026 04:00:43 +0000
Manifest next update: Sun 16 Aug 2026 04:00:43 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: ZeOXdeDmtcJTpJTicUg3NHXNbwtssZPFC5NGK5k7TKk=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:45:15:26:98:ed:e2:ee:9b:0c:de:e3:94:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Aug 15 04:00:43 2026 GMT
Not After : Aug 16 04:00:43 2026 GMT
Subject: CN=45dd7c43b5810f2c7ca6dad308a9f80446bb83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:17:d1:44:d0:1d:48:fa:af:fb:f5:19:cf:
87:46:18:6d:4c:22:1d:97:22:b4:9f:b3:f6:4c:95:
34:46:49:f3:89:28:e4:73:74:d1:91:a0:29:f4:2f:
fa:f8:b2:f4:a1:f0:e6:72:b9:ed:31:8a:09:02:10:
7e:90:21:1a:e6:19:81:75:1a:33:98:e3:91:6e:ab:
19:3b:3e:e0:24:1a:98:82:f0:7a:53:0e:a3:4c:91:
e9:db:b2:e7:bd:26:41:84:dc:8e:fd:04:72:0f:bd:
12:f0:91:6b:ad:9b:57:cb:13:e7:31:c9:92:a3:0d:
19:45:37:1c:0a:aa:cf:7b:82:23:7b:de:6a:95:a2:
71:ea:46:28:c6:e4:78:af:1c:e4:ac:7f:2b:59:82:
e0:e0:0f:e9:8e:13:ef:e8:88:86:02:c9:0f:e9:7c:
f3:16:4e:5d:73:8b:8c:96:d9:0b:1a:3b:89:05:0e:
b8:0c:5c:5b:2d:9d:7f:f2:14:c7:3e:ec:a1:db:d8:
ef:e8:fa:84:0d:86:2c:e5:68:99:4a:76:7e:e4:4f:
31:4b:a6:d4:f9:e5:38:c6:bb:a4:5b:65:c0:f2:e5:
65:17:b0:cc:fe:8d:6b:7b:c9:1d:86:bc:20:28:a4:
0b:69:29:f2:80:b9:35:f3:bd:21:90:a4:8f:35:73:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:7C:43:B5:81:0F:2C:7C:A6:DA:D3:08:A9:F8:04:46:BB:83:E7
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ea:e1:00:6a:59:17:27:cd:4b:b8:d6:69:2a:8a:bc:fb:d7:
84:06:61:e8:c9:1d:6a:7c:52:8f:3a:d5:6e:ac:a8:c1:21:3b:
e1:4c:1e:32:97:5f:7d:90:69:c3:6b:ce:75:12:10:ef:7d:89:
1e:6b:8c:15:6a:bd:27:9d:4e:a1:24:96:4f:e7:b4:85:b3:9e:
b1:ba:3e:ff:e2:ee:3f:8e:8f:45:93:f8:07:37:3e:8c:50:86:
42:43:80:bb:e9:1a:81:14:a4:7f:33:6f:9d:09:8b:a2:da:19:
4f:73:ef:13:cc:f1:2d:a1:83:c0:16:b0:38:7a:18:8b:7c:1c:
18:17:da:68:79:76:8f:7b:29:f0:b1:62:17:5d:d1:27:bf:2e:
82:f9:fe:60:d9:0a:f7:63:8e:9e:dd:d7:ab:02:07:81:84:08:
a4:a4:2a:d4:d9:a1:d0:98:ef:6f:61:40:90:84:ef:c4:2a:a1:
e3:eb:84:1b:ee:80:38:1d:05:0b:77:8c:f1:67:e1:f6:37:3a:
21:ee:d8:8f:59:2c:13:f3:91:48:0e:cc:58:42:5e:cd:cd:dd:
51:7f:e7:06:0d:03:27:41:09:23:10:73:ba:e8:f1:1b:5b:ec:
4c:33:55:49:64:8a:bd:6b:9b:9e:a4:b9:93:4f:6c:3f:79:c2:
d3:0a:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:02:01 2026 by rpki-client