Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: nknOuMieO0/YtSJqJ+kB/xI88OsNLYRW9OFbFGbEu8w=
Subject key identifier: 62:C5:80:DF:F5:6B:A6:4F:3D:AB:13:4F:9A:90:5C:CE:66:FE:4C:B2
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A0908E81C2F24C9373548CB86245FA0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 169C
Signing time: Fri 11 Sep 2026 13:00:53 +0000
Manifest this update: Fri 11 Sep 2026 13:00:53 +0000
Manifest next update: Sat 12 Sep 2026 13:00:53 +0000
Files and hashes: 1: 3Syky4yOCo3qDL_v87W0XXnjMBs.roa (hash: rVVfCK/lYLgRQ/yYoY1Ru32nhxPk3RhCah+dnUuCF+A=)
2: fpbYi3rtMLHttdhXIl5tKygkn9A.roa (hash: 6e5xUY60XkL7jAdgf7b6GKl/1XwNQ1TV9RcAiw3kAzc=)
3: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: T7dnr4xHC1t6ytiLOVvqb4+fES1AmqqOafHcy+LqWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8e:81:c2:f2:4c:93:73:54:8c:b8:62:45:fa:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Sep 11 13:00:53 2026 GMT
Not After : Sep 12 13:00:53 2026 GMT
Subject: CN=62c580dff56ba64f3dab134f9a905cce66fe4cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:93:1e:b4:b8:0c:5f:64:f7:0f:cf:a1:bd:
f7:a1:1e:34:fd:52:c4:14:3b:93:78:c7:0d:6a:cc:
98:10:c5:3f:93:01:31:7d:58:90:c7:e8:20:26:dd:
a2:91:4e:61:d1:f8:0d:e1:54:18:5d:97:d5:ce:0e:
25:d9:9a:bb:38:f3:2e:ca:de:c7:ed:f6:dc:c3:ce:
f8:29:1b:d3:60:82:45:06:a7:d4:72:9a:87:03:89:
5c:4c:79:43:d3:8e:26:c8:d6:32:90:61:ac:d3:83:
bc:81:51:d8:fb:3c:64:d2:28:6d:30:a3:fb:f9:65:
d6:31:2b:8d:0f:e9:56:87:c3:12:f6:36:8f:52:9f:
06:3e:6a:8a:73:cd:c7:3a:48:3d:28:70:46:3f:c2:
a0:77:c2:42:3c:ff:96:ba:28:2d:1e:fb:e1:af:73:
16:62:7d:97:f1:c5:62:64:81:46:ee:fb:b5:3c:62:
1e:ff:75:e0:70:12:c0:c9:a7:57:bf:8d:31:33:d5:
2c:72:92:07:a2:11:87:fd:e1:98:1a:01:80:73:32:
9b:0f:af:1e:67:b2:85:17:df:8e:0d:d5:d1:09:79:
1d:5b:06:e4:af:32:34:9b:51:28:71:ee:fe:ba:9e:
44:f9:3f:0d:fa:9b:28:1e:5f:b8:e2:2c:82:2c:51:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:80:DF:F5:6B:A6:4F:3D:AB:13:4F:9A:90:5C:CE:66:FE:4C:B2
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4e:dd:39:44:fc:35:8e:71:ac:99:5a:f1:24:8c:e0:a8:9b:
e5:68:49:a2:a6:a2:18:3b:e9:62:ef:c7:bc:7e:58:41:fc:75:
20:91:7b:d5:f6:25:8e:44:bf:11:62:a7:16:0d:c7:81:84:75:
39:b8:55:17:25:a4:fc:8e:47:7e:98:13:0a:d8:8b:bd:c6:56:
e8:d6:cb:70:a8:74:48:80:ab:c2:17:1d:99:b7:e4:5e:45:ce:
13:3b:0c:9a:7d:81:69:64:23:e3:d5:7e:c4:f2:57:2a:af:7e:
8c:84:b3:a8:5e:34:18:7c:0e:07:c3:28:83:b6:4d:d3:4d:b8:
58:f0:02:be:14:69:ca:cc:fa:56:92:e4:82:34:ed:d6:e2:34:
7c:be:f6:1a:94:80:40:5c:e5:40:c2:73:6a:6e:c4:b7:85:64:
9b:17:70:2b:ca:6f:5d:fd:7d:20:ff:ca:4b:02:50:bd:95:c0:
15:4e:ea:a5:01:7a:ee:8e:5a:f8:39:6a:c3:5f:81:e2:12:11:
92:e0:84:6d:77:2f:7d:c9:15:2f:e7:83:17:ef:8f:ea:35:b5:
60:8a:3e:18:59:0b:54:eb:7f:98:bf:46:c4:8e:f6:d0:68:21:
06:5a:0c:24:27:af:e5:89:d1:da:07:5b:9d:6e:94:cf:01:bc:
52:12:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:43:46 2026 by rpki-client