Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: xgyFiZaAMCiLGPI8wyOaQyMY/2wLjs0LiwMhZbQLrqE=
Subject key identifier: 83:3A:82:7B:3B:59:1B:61:56:7A:FA:77:6A:00:CB:FF:48:22:79:FC
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01A08AFAA77605ED146273428D819D7CF3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 19CF
Signing time: Thu 10 Sep 2026 11:01:17 +0000
Manifest this update: Thu 10 Sep 2026 11:01:17 +0000
Manifest next update: Fri 11 Sep 2026 11:01:17 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: cDGKRdcxNfli3/19dHy8OXgdItPGkpbT9bzW301Y+6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a7:76:05:ed:14:62:73:42:8d:81:9d:7c:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Sep 10 11:01:17 2026 GMT
Not After : Sep 11 11:01:17 2026 GMT
Subject: CN=833a827b3b591b61567afa776a00cbff482279fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:da:a7:42:44:04:fc:95:f4:f3:52:da:19:
a7:0b:18:22:11:50:c0:8f:a3:5a:c1:63:59:8f:51:
50:a8:07:04:e4:d8:b6:62:e9:81:e8:fd:4c:ef:16:
29:7f:75:5f:19:51:06:a0:d1:73:34:2e:b4:67:36:
f8:9a:b5:56:2e:51:21:25:62:fe:ed:7c:04:f8:c3:
a4:92:f6:e3:77:fe:b4:b8:3d:2d:90:6d:6d:12:cf:
5a:ba:c3:b1:a4:df:37:83:14:77:5b:79:c9:93:fb:
db:51:fc:69:1e:e0:06:fc:55:55:0e:ec:18:d5:ce:
8c:3b:5e:90:57:60:c8:bb:ec:c7:d3:f5:7c:fd:2b:
74:d7:73:84:11:3a:88:60:35:ab:1f:7a:1d:40:cd:
c1:33:73:33:12:7d:de:a8:2a:b2:f8:a6:5a:26:1b:
de:ba:31:b5:13:f1:63:73:e6:93:c6:a4:13:8f:59:
71:9a:97:94:86:a4:9b:84:81:15:db:23:02:b6:51:
94:91:09:d5:f1:90:ca:03:8e:d0:d7:1d:9f:99:65:
34:5f:c7:6c:1c:b3:94:11:65:a3:2b:ec:33:cf:dd:
bd:9d:30:c5:9c:52:c6:99:5f:5b:5c:6e:c6:2a:a4:
42:9c:f6:e5:2d:f0:36:81:e0:5c:9e:84:b7:af:70:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:82:7B:3B:59:1B:61:56:7A:FA:77:6A:00:CB:FF:48:22:79:FC
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:d1:02:3a:49:3f:2d:7c:20:1b:91:d5:56:eb:af:2f:11:
61:2e:f5:46:09:e8:78:5f:04:bf:0a:e8:2c:ed:22:e4:ba:33:
d0:0d:95:a9:e1:34:58:3b:e3:bc:dd:02:38:a4:09:2e:fb:00:
d0:d6:5a:4e:c0:54:e9:af:d4:86:a8:67:d6:d2:62:02:b2:55:
aa:b0:ea:7a:a5:06:b0:b4:1f:d1:bc:97:6f:36:ad:47:3a:42:
c3:27:93:5e:d9:3f:fe:3a:03:dc:44:44:6c:8f:67:b4:60:0c:
e8:08:15:14:0a:7a:2c:4e:5d:c9:fe:94:7a:ab:2c:c0:9a:49:
ad:0b:7e:9a:ad:d7:79:14:10:38:ba:dd:86:73:54:eb:97:7e:
4e:24:34:f9:bd:cc:ab:bb:06:ba:8d:1f:cb:70:93:ef:c5:67:
53:1f:17:a6:f2:fe:8a:a3:f5:6e:a4:66:8f:8c:dc:92:77:8f:
c7:cb:b1:8b:9c:2d:0c:b3:a3:8b:5c:a7:b4:6c:3c:1d:9a:53:
06:79:ca:fe:4e:85:76:2b:89:7f:9b:c2:0b:03:cf:46:2c:9a:
e0:f3:36:8b:a9:d4:72:95:75:2d:c5:1a:3e:95:b1:ed:77:fb:
d9:01:1f:d4:39:90:c8:87:22:de:b4:a4:2b:98:0b:d1:c4:6e:
77:fe:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:07:35 2026 by rpki-client