Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: xCeZ4kE8HrHmda+dTV8dmS+WSEcq7FaImaZsc5LJWGw=
Subject key identifier: F0:9F:1A:EA:9B:7F:DB:3B:D2:84:10:40:64:3A:72:C7:62:4A:DC:16
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01A17CCEAC1E61862B3605D2809E36131DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 10:01:21 +0000
Manifest this update: Tue 27 Oct 2026 10:01:21 +0000
Manifest next update: Wed 28 Oct 2026 10:01:21 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: jVwQtVWNY7wrzLS6iy6cChZ33CeCQsIcfk7VImNkxCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:ac:1e:61:86:2b:36:05:d2:80:9e:36:13:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Oct 27 10:01:21 2026 GMT
Not After : Oct 28 10:01:21 2026 GMT
Subject: CN=f09f1aea9b7fdb3bd2841040643a72c7624adc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:27:ef:44:87:e8:c6:0c:d7:ed:02:45:67:
01:00:a9:91:53:66:94:fa:62:de:c7:7f:e7:33:6f:
dd:73:9a:15:7a:e6:5a:b6:78:24:c5:a7:ab:bc:de:
00:4d:bd:99:99:d7:08:07:da:c2:a7:11:a7:8c:0e:
de:53:a5:24:b1:2f:6c:a7:5e:ea:98:dd:ca:23:2a:
7a:af:5d:0c:6a:1e:91:9d:b8:74:b7:01:c2:ff:5e:
44:55:af:14:cd:c7:68:be:49:bc:c0:c2:9d:ad:32:
8b:1b:17:ad:74:67:25:75:78:af:2e:1c:37:ae:28:
1d:69:78:ba:d3:dd:2b:ce:ed:95:23:65:3c:a1:39:
df:4f:f0:ad:fa:16:ec:94:6e:c3:36:35:c4:59:ee:
03:d0:7d:74:6a:93:85:a4:d0:86:8c:ce:d0:90:e1:
23:ad:ea:24:26:1c:5c:17:9f:a7:68:83:29:0f:d7:
f9:64:62:09:8f:c3:b9:2e:25:d6:c8:73:54:a0:a7:
31:95:c8:1d:41:d6:88:2f:9c:42:a9:49:02:29:09:
a9:67:d6:1f:3e:5a:cb:36:4b:0b:66:2b:27:85:46:
35:8c:4e:e1:96:57:c4:f4:94:95:c5:9c:09:92:ec:
3c:0b:1f:78:c4:83:c2:1f:15:8f:81:f9:49:27:e4:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:1A:EA:9B:7F:DB:3B:D2:84:10:40:64:3A:72:C7:62:4A:DC:16
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:02:cb:2a:9b:2b:9b:58:f9:de:f7:72:1d:23:cb:77:43:d4:
ed:dd:ac:05:32:28:b3:89:06:1f:cc:a1:b2:df:12:a2:97:ce:
d1:02:81:30:75:1f:6c:f6:e7:17:82:8b:8c:fe:e9:f0:b6:ec:
66:27:6c:08:b9:1a:d5:85:86:01:52:4e:2d:f0:e9:84:61:55:
ad:54:c8:48:4a:ce:27:4e:e7:d0:ab:9e:2e:a6:0f:7c:6e:64:
90:0a:07:0c:8c:aa:33:95:81:a8:a8:65:cc:78:1a:17:72:15:
b1:23:48:e1:ed:c9:88:ec:16:ea:e0:86:12:f8:f9:ad:cf:69:
ba:a9:27:9d:08:7d:57:99:e9:66:6d:01:c2:bd:7f:cf:ac:e4:
5f:a8:48:8d:0d:3a:4b:43:32:a1:7b:1c:a8:e7:3a:41:71:3e:
4e:67:fe:dc:4d:28:bf:53:4e:40:d8:fa:83:96:0b:c8:12:3d:
bc:e4:09:82:c2:19:26:7c:42:ea:c6:0b:d3:99:a9:dc:82:8a:
0e:bb:fd:28:f6:41:8a:44:a2:72:28:5a:06:3d:06:58:7c:09:
ee:2e:3d:10:56:cb:59:86:f9:bf:73:15:a9:66:a0:1d:7c:90:
f6:c2:c1:bb:e6:93:51:f3:b5:08:c9:ad:ac:c0:76:0f:1d:d3:
b8:ca:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:52 2026 by rpki-client