Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: m2hE+lt1tlnw4hxUX3jXm/3Lh6/i94+ek2sMA8MKc1M=
Subject key identifier: 86:8F:1C:1E:60:E8:55:35:CF:17:C3:28:43:97:45:99:AC:6D:E9:3E
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 01A0035DFBE955A0EF0BACC7A0CCCCDE6D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0D17
Signing time: Sat 15 Aug 2026 03:01:25 +0000
Manifest this update: Sat 15 Aug 2026 03:01:25 +0000
Manifest next update: Sun 16 Aug 2026 03:01:25 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: NRnVRckdnnhEM2r8jgZwciOw9AkFKs7tBfo06y3ES0o=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:fb:e9:55:a0:ef:0b:ac:c7:a0:cc:cc:de:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Aug 15 03:01:25 2026 GMT
Not After : Aug 16 03:01:25 2026 GMT
Subject: CN=868f1c1e60e85535cf17c32843974599ac6de93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:26:9e:69:a0:b5:d0:b6:b3:fd:a6:8c:e3:
18:26:4e:66:9b:c8:93:be:81:90:2e:78:a7:1d:f2:
dc:3d:17:2d:43:c5:7c:07:3a:dd:80:b2:1f:68:37:
2a:c0:a7:9e:8e:b0:f0:13:14:34:99:5b:12:e2:1c:
e2:b6:45:78:64:ea:5a:49:82:e3:88:23:a8:34:84:
72:2b:05:a3:c2:5d:15:e5:71:e6:47:22:85:d9:36:
7a:9d:b7:54:fa:49:e4:00:eb:fd:6c:a7:f8:dc:6a:
70:4e:82:bd:0b:42:c6:05:b8:ac:96:6a:59:04:e5:
ae:93:d3:88:1b:78:a8:51:ec:8f:74:f7:e3:50:b5:
84:46:71:14:1c:f8:bc:e4:6d:81:e6:0c:f9:69:9d:
35:24:b1:14:ac:1d:61:f9:37:67:a8:ef:1f:55:78:
76:ab:b2:4d:05:44:48:26:04:6b:e9:76:54:27:d7:
0e:ba:90:11:8f:f7:49:90:64:77:5d:b7:07:04:5f:
7d:3b:f1:7a:79:0f:1a:bc:65:50:c0:9e:d9:4b:a2:
b8:56:33:f9:87:97:3c:ef:24:3a:ce:11:d2:cf:3c:
9f:97:fc:1e:ae:f9:51:2e:73:93:1c:75:85:77:2f:
10:10:7e:fa:18:c2:ae:48:9d:88:54:5d:98:be:3c:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:1C:1E:60:E8:55:35:CF:17:C3:28:43:97:45:99:AC:6D:E9:3E
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:64:49:2f:46:74:c8:f1:a7:4d:a3:02:c2:2c:4d:cb:a8:
20:58:35:f4:e0:40:18:d2:c8:28:cb:4a:b7:28:37:ee:30:0b:
a8:75:d3:18:20:f1:1d:61:ee:e6:6f:60:60:fe:d1:4f:b7:13:
11:23:b3:3c:76:cf:23:e1:d9:4e:95:ce:b6:00:28:bf:62:ba:
ff:bd:5c:37:27:4d:0e:82:c4:5f:ca:82:9e:7e:ad:be:4f:26:
eb:85:8a:df:e3:64:29:9d:fa:2a:da:58:5a:90:ad:45:cb:b7:
e5:2d:9a:93:37:54:50:35:e5:93:9f:67:dc:14:8f:a5:9b:12:
14:3e:3d:67:19:fd:7b:b3:da:71:b1:68:b9:f6:9c:0c:85:7f:
5b:11:1a:eb:44:98:37:3f:fc:ca:0f:42:fc:b1:0e:24:6a:60:
8e:2e:99:90:34:9b:d5:d8:4f:e5:52:ad:d5:96:4f:6e:86:af:
16:f2:3e:7f:7a:3e:bc:91:64:96:99:bd:88:59:00:aa:c9:4a:
91:05:33:fe:a9:e9:f6:bb:42:39:40:6c:f9:40:4c:fb:bc:c4:
e9:c6:21:03:e3:39:94:f4:4f:21:34:08:e8:8c:03:42:b8:cf:
c5:5c:79:1d:84:27:98:2f:93:76:98:54:d4:1c:db:1a:ae:f8:
42:62:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:18 2026 by rpki-client