Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: aM9g630/k8+6LVBEP1G+CpQswoLzONfpXOKErmVMzy0=
Subject key identifier: 47:CC:91:49:71:B6:F5:BA:62:D5:D1:20:67:0D:92:04:C5:F1:00:5F
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01A10FCCDA6C57EBCC8CF7E9534E9D64DAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 1019
Signing time: Tue 06 Oct 2026 06:00:45 +0000
Manifest this update: Tue 06 Oct 2026 06:00:45 +0000
Manifest next update: Wed 07 Oct 2026 06:00:45 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: Pabs563BltXrMhNUJBuQqiJOCwnxNeT/ZVCcDi01oEQ=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:da:6c:57:eb:cc:8c:f7:e9:53:4e:9d:64:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Oct 6 06:00:45 2026 GMT
Not After : Oct 7 06:00:45 2026 GMT
Subject: CN=47cc914971b6f5ba62d5d120670d9204c5f1005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:f3:ae:b2:fa:3c:cb:9e:11:06:b5:52:14:
7d:22:a1:b5:47:b2:bf:67:7b:8d:44:b2:ec:55:a4:
31:76:df:4d:3a:0a:c0:7d:31:65:78:2f:a7:2e:5f:
c0:d1:7a:ca:f1:bd:b1:83:eb:d6:b1:ca:da:c1:1f:
f6:bf:4a:b3:3e:6c:8c:5a:74:aa:ad:77:54:23:aa:
5c:62:54:25:10:9c:0c:04:4e:06:81:c3:3e:fa:ac:
bb:54:a5:b2:52:8f:70:ce:26:b2:7e:31:96:3c:a9:
9d:e7:5a:e5:a5:a1:0a:49:be:a5:26:2e:c3:fc:84:
e6:25:33:3b:53:c4:a9:f1:8a:c7:ac:5d:4d:f6:1a:
cb:48:91:0f:b8:c0:b6:ed:53:03:87:57:8c:e6:7d:
07:7b:f4:d6:f8:bb:3b:b3:7b:11:91:79:a6:5e:50:
7b:a8:7b:74:06:f3:9d:75:e4:0b:04:36:76:76:16:
7a:9c:ad:d5:4a:d1:08:ad:2a:8b:6f:f3:b5:02:49:
2c:bc:e7:c2:61:2f:9d:d7:86:b5:a6:04:58:45:b7:
c7:76:9c:d3:68:7f:d4:bd:5a:46:c1:b3:c4:9c:d1:
a4:17:65:10:de:8b:81:fd:a7:52:14:27:05:ca:4f:
80:bb:2c:b3:54:56:2f:63:78:3d:21:47:3d:9f:23:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CC:91:49:71:B6:F5:BA:62:D5:D1:20:67:0D:92:04:C5:F1:00:5F
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:b1:36:2e:94:d9:1d:4c:7d:fc:30:ad:91:16:33:14:e6:
5e:0d:21:b4:74:e6:17:84:d2:c1:3b:a4:f4:ed:10:ba:c7:e7:
3b:84:3d:eb:ba:cf:2d:49:a4:72:f1:1f:de:09:a7:15:9c:12:
bc:b0:eb:84:60:84:3b:fe:44:8a:16:cf:ca:04:f5:6c:9c:3d:
e4:a3:d1:cd:02:94:ab:ec:80:2d:46:6b:ed:34:1f:4f:fe:4f:
c4:3d:82:03:d7:38:5e:a1:fd:42:1a:30:e0:e8:e6:3a:60:2f:
70:ec:95:ab:ea:9f:b8:4c:a9:0c:5a:0c:b1:09:d5:0f:7a:00:
92:ad:9f:bd:2d:82:2d:f5:8c:3b:ec:fc:2c:e7:91:b2:d7:63:
72:d3:b8:b0:60:55:e0:5e:32:43:c0:b6:21:80:3e:96:36:da:
27:39:6d:b5:85:db:08:01:8b:d4:ff:38:48:0d:c6:83:89:00:
c7:4d:75:05:59:ea:5b:fa:8f:33:13:a8:f9:c7:b1:34:63:20:
7d:c6:ef:f7:ef:7c:c0:06:35:26:7a:02:0b:e8:0c:a0:3b:57:
a8:d1:08:81:eb:fd:04:c1:9b:bd:8d:d4:93:36:5c:f5:36:81:
e6:d4:8f:28:79:0b:e6:9b:fb:de:0d:2f:b3:59:40:e3:07:12:
6e:f6:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:07:26 2026 by rpki-client