Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier: UVj9sfYhT3sLBUXko8Xm4AISgwHfZaNWqsI6Bn0dOew=
Subject key identifier: C5:10:6F:53:DD:A1:10:27:13:27:74:7C:05:47:85:14:6A:D3:2A:4F
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A10248BCD737C759C5DC24115FE1D4A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number: 028F
Signing time: Sat 03 Oct 2026 15:01:23 +0000
Manifest this update: Sat 03 Oct 2026 15:01:23 +0000
Manifest next update: Sun 04 Oct 2026 15:01:23 +0000
Files and hashes: 1: 17iDKnMCPzF4M2zO_EMSp433meI.asa (hash: IN8ZKdhOHTTTwuLE4YUbOHesEFUMPKZ5d6iCYuk1AHk=)
2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: B2kvaflhttM8lZNRE5E7aMX6HgCM66kMCRfuQLhTB5g=)
4: UmhoW5VfIZWn13lemnKnlkHqPAs.roa (hash: DGzNzZVpk2iVMIiaSeZ6GUmQLgsZVVAd5WcJYRZRIwU=)
5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
7: xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa (hash: ujOmUW3uo+zC741aDRMzurWVfgMAgyR64bWgpanO+zs=)
8: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:bc:d7:37:c7:59:c5:dc:24:11:5f:e1:d4:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Oct 3 15:01:23 2026 GMT
Not After : Oct 4 15:01:23 2026 GMT
Subject: CN=c5106f53dda110271327747c054785146ad32a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:30:bd:06:9b:5a:1a:49:ce:15:f9:f8:14:
a4:20:54:60:28:ca:a6:44:67:62:49:71:32:d8:71:
e9:b7:99:4c:f1:dc:6f:5a:33:ec:a5:bc:40:1e:af:
85:ee:8f:1e:e3:43:a7:9b:d1:51:b3:05:3a:59:cc:
18:bc:0a:ba:68:b1:c8:0f:89:be:b9:56:62:19:b4:
da:da:e6:25:8c:48:76:72:5e:30:d7:94:83:9c:d8:
12:c8:6b:e8:0b:17:63:c8:45:09:9f:f8:45:5a:98:
d1:c6:c2:ba:9b:15:e6:89:b5:d7:c2:92:56:07:de:
a6:03:92:fa:bc:6a:d3:d0:4d:5c:97:76:02:a9:0e:
9d:b5:91:0d:6b:9c:db:4e:47:13:ef:a6:bd:c0:30:
51:ff:18:8c:33:51:1f:7f:06:c4:f7:7e:3b:80:d1:
45:34:5f:94:ec:78:de:cd:77:93:a3:df:a3:a1:e3:
dd:4d:b9:2e:47:3f:c3:58:0d:a0:ee:18:38:b9:d0:
aa:15:c2:66:17:9d:8a:35:12:14:a0:e9:5d:72:33:
58:45:60:ca:cc:ca:b3:8b:a8:b2:ee:47:aa:ed:ac:
a9:81:bf:a5:c0:ea:18:a7:f5:1a:96:a1:23:b6:19:
ed:76:89:76:6e:22:7a:d3:22:9d:31:dd:d7:7e:12:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:10:6F:53:DD:A1:10:27:13:27:74:7C:05:47:85:14:6A:D3:2A:4F
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:d7:07:63:17:68:42:41:20:5e:69:6d:c3:a9:a9:9c:d9:
79:30:7a:1b:6d:02:86:aa:75:31:aa:2b:7f:b4:9a:3b:96:d6:
84:75:bb:1d:06:21:5a:20:e5:8e:89:6a:23:fd:38:1d:34:a5:
c5:0d:90:bb:01:89:c2:7a:1a:21:ee:1f:73:67:bf:31:ac:73:
35:1d:b8:f0:fe:54:58:42:bb:f1:6c:a2:12:65:0c:d5:b5:1c:
0b:21:83:9d:b8:38:78:c5:01:22:73:05:01:6a:b2:ec:fb:45:
b1:4c:cc:ad:56:ce:6b:db:0f:03:c8:1c:10:75:1f:5a:4b:50:
a5:07:60:7b:f3:b2:ec:70:a0:32:d4:90:a2:99:8a:45:32:8b:
e5:89:56:ca:38:03:78:a9:e9:d4:c0:89:72:2e:11:ad:96:42:
66:4b:44:c5:b4:77:a3:ad:82:67:4b:2a:5a:cb:41:23:c3:e4:
83:f1:78:d4:0e:be:60:da:62:96:15:9c:49:97:f2:3f:07:62:
93:6e:16:57:ec:c7:87:b6:51:3d:4c:7a:e3:01:7e:43:e6:17:
c8:cc:03:f2:01:7a:3e:cb:71:e1:ab:32:1d:ca:6e:48:81:89:
9c:42:2c:6d:b4:b1:f6:7e:16:14:ce:e0:76:f3:38:61:bc:2c:
7d:fa:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:40 2026 by rpki-client