Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: MrHG4lszPAUJoVWqRmVVFaC6GLnhB6X1vxYYl+Kf6W4=
Subject key identifier: 6C:9B:51:C2:10:22:35:C2:65:F1:34:3A:30:CF:50:C1:49:1B:C0:68
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01A08AFAFAEB0203EAE0AD0732BEC4D6282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 11:01:39 +0000
Manifest this update: Thu 10 Sep 2026 11:01:39 +0000
Manifest next update: Fri 11 Sep 2026 11:01:39 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: 4VfDdcldvjo4LmHWFFcCqFb4uYwb9MOB2a45/19ir5w=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:fa:eb:02:03:ea:e0:ad:07:32:be:c4:d6:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Sep 10 11:01:39 2026 GMT
Not After : Sep 11 11:01:39 2026 GMT
Subject: CN=6c9b51c2102235c265f1343a30cf50c1491bc068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:23:ab:ca:09:91:9b:3d:cc:6b:02:1a:75:
ab:64:42:94:c8:e3:f7:98:36:b4:bd:86:85:76:83:
e9:76:c4:73:d6:e5:99:d1:16:fd:17:31:e8:43:f3:
c5:50:17:2f:4c:4b:01:24:f8:e0:a5:4c:5a:53:26:
88:61:f1:8d:05:fe:51:b6:b1:7b:6e:70:30:b7:5d:
78:52:2e:b5:c4:f7:74:43:65:09:15:f4:75:3c:45:
09:88:ea:70:5c:22:39:39:52:f8:d3:e5:f1:95:51:
5d:d6:18:98:40:dc:dc:bf:af:81:97:c1:e8:fd:5a:
ef:3a:e4:9f:88:4e:24:7d:2f:e3:97:5f:1e:69:ab:
9b:24:88:09:e3:ab:d2:51:46:9e:8a:86:60:24:c4:
20:c2:20:1b:03:27:99:f2:a4:e2:09:fc:6e:c9:bb:
0e:e0:1b:55:59:50:13:8c:9b:04:0a:82:15:f8:c3:
1e:21:d4:8c:df:a5:bc:39:a8:0f:15:1e:26:a4:4c:
86:70:82:c6:fc:7f:40:eb:19:8e:a2:1f:1c:2f:02:
02:62:83:73:6f:cc:9d:34:95:0b:e6:7b:a6:b6:f8:
11:cb:4e:fa:4d:ae:b1:09:b7:9d:c9:56:26:a5:83:
e9:3f:6c:c2:7a:d4:f7:e4:e7:9a:85:8d:30:a1:6e:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:51:C2:10:22:35:C2:65:F1:34:3A:30:CF:50:C1:49:1B:C0:68
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f8:93:2c:b7:d2:27:8b:c7:f9:aa:6d:0e:a0:25:c2:fd:61:
62:fe:79:f1:47:7f:d6:96:65:df:2a:17:6d:59:0a:44:ed:35:
64:aa:03:89:fb:52:71:d6:83:68:14:1e:fe:13:07:88:82:8d:
99:91:fa:f0:d3:00:d7:34:56:94:6a:03:6c:1f:be:a8:7f:50:
a0:14:12:f7:d8:c2:f7:7f:07:b5:55:c8:2f:e8:21:e2:36:1f:
2e:05:5c:1b:17:db:6d:48:8c:a6:b2:68:24:04:66:0b:60:38:
bd:2d:96:de:3f:41:d9:72:c9:cf:57:b4:5b:43:0a:90:34:cd:
89:12:b8:db:2f:62:8a:9f:80:4d:54:5d:28:29:8a:23:b5:1d:
11:cc:38:6a:4a:a8:c8:1c:42:14:56:f3:2e:c2:f7:5b:0a:7f:
23:96:76:f8:b9:9d:5e:82:59:b0:21:f9:4b:25:09:b1:ff:8c:
c6:58:24:dd:09:91:09:a6:46:eb:04:af:ba:f8:6f:91:e9:7c:
cb:a4:cd:6f:ff:42:fd:0d:a6:e2:83:fb:3b:fa:0b:db:f2:1f:
9a:50:74:66:7d:4c:4b:cc:10:a2:0a:5a:b2:6c:a9:09:65:19:
a6:9c:d9:22:31:3d:0b:bd:f3:b1:ed:1e:25:e6:a4:5c:7c:3d:
4b:e8:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:55 2026 by rpki-client