Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: mUK4IMIZ+E0ngFnG+g+n2OUW+DxWunuE60L8GCLZtac=
Subject key identifier: AF:10:81:FA:8B:AC:3E:2D:FB:CB:00:81:D2:45:98:96:6A:7B:F7:77
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01A17882F72AD13B028753F8E9561558FAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 14:00:10 +0000
Manifest this update: Mon 26 Oct 2026 14:00:10 +0000
Manifest next update: Tue 27 Oct 2026 14:00:10 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: RSqLtTzu1RiREyf4VpHO4yH036IyD97Jl5l55N2F4w0=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:82:f7:2a:d1:3b:02:87:53:f8:e9:56:15:58:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Oct 26 14:00:10 2026 GMT
Not After : Oct 27 14:00:10 2026 GMT
Subject: CN=af1081fa8bac3e2dfbcb0081d24598966a7bf777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:a3:b1:72:9c:ae:95:f4:b4:32:64:90:be:
d5:1b:00:a6:9e:7f:53:e4:b0:20:ca:f5:5d:6f:6c:
5c:2d:ec:fe:7f:f8:66:02:fc:22:16:0c:91:ff:51:
0b:98:f3:37:b1:39:8b:5b:3e:48:bb:69:af:10:8b:
ee:ab:18:fd:e3:5a:53:f0:43:75:d3:c5:d7:fa:a9:
4b:e1:c2:ac:5a:11:58:45:9e:11:94:1b:67:1b:e7:
7c:ff:b5:78:98:a0:72:c4:40:5a:f1:b5:0c:a8:b9:
5a:eb:a6:8c:69:6c:81:0d:60:71:ea:7f:52:81:5b:
83:81:9f:64:31:48:8b:5f:04:18:1c:09:34:98:a0:
01:66:fe:7c:58:60:d3:ef:76:bc:78:3a:29:d8:ba:
bd:9b:23:f1:d4:d6:ef:47:01:90:54:34:38:41:52:
43:3c:ae:2d:56:0d:3f:0d:51:64:ae:91:43:32:a8:
27:71:72:86:5e:45:eb:e2:28:fd:4a:2b:8b:16:b1:
dc:92:30:37:38:14:31:16:ff:33:db:9b:52:cb:49:
f5:b9:6b:d6:51:e2:61:19:e3:4f:95:45:83:77:ed:
0f:68:2b:4f:00:cf:5b:20:c1:08:8a:d7:61:83:26:
5a:93:92:34:8f:5a:29:02:6f:f5:8a:1d:b9:d0:08:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:81:FA:8B:AC:3E:2D:FB:CB:00:81:D2:45:98:96:6A:7B:F7:77
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d3:30:aa:69:5d:58:44:33:bd:47:f2:f6:cd:c6:fd:0c:72:
9f:1b:59:3e:f9:a8:ab:61:f1:2d:d3:f1:f0:7a:d5:fc:ca:98:
f4:69:17:b4:59:df:91:d3:92:19:1d:1e:5b:81:d7:cb:fe:f8:
a1:41:fd:35:bd:7f:fa:aa:69:c0:6e:87:b2:31:d0:4e:2f:9c:
11:ef:86:9e:d9:1d:33:79:87:11:ff:c9:c1:05:55:70:2f:e0:
13:3a:95:36:16:f0:bc:aa:59:e4:01:fc:e3:de:47:f8:56:ec:
dc:f6:44:8d:f0:00:68:9c:02:cf:fd:80:5a:cd:26:b7:c4:c8:
5e:73:7b:1c:3d:0a:e6:63:af:8e:bc:99:da:40:02:83:08:af:
3e:7c:eb:87:f4:cb:74:8a:e8:4b:22:92:ad:57:8b:03:11:91:
78:ec:62:7e:37:14:5c:55:ee:68:4e:a3:1f:a9:53:5b:c8:4b:
33:c7:bc:a8:01:95:9c:6d:b9:d1:25:e0:60:9a:91:df:54:ac:
eb:4e:b6:46:42:0c:1b:3a:a3:ae:ac:70:be:02:3b:6c:30:4a:
fc:35:ab:ef:42:fd:a0:bd:95:c4:64:16:3b:0f:31:f4:d0:29:
c3:97:e5:80:6d:f7:3f:61:b1:8c:8f:84:79:c6:18:57:1a:dd:
65:57:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:05 2026 by rpki-client