Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: 0ojlLxLQd0gxiRhX3o8CEsComb21oDoD6UeXtdBBgqg=
Subject key identifier: A4:FF:C3:95:E5:B0:A2:83:28:2B:E8:4D:A0:47:8C:BE:9C:70:B0:B0
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 01A10625DF66EC02401627D0238622412015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0D9D
Signing time: Sun 04 Oct 2026 09:01:47 +0000
Manifest this update: Sun 04 Oct 2026 09:01:47 +0000
Manifest next update: Mon 05 Oct 2026 09:01:47 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: lkTMhaggiI3He261DWU4iyQ44p0rjGbI9AG41i3E+vw=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:df:66:ec:02:40:16:27:d0:23:86:22:41:20:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Oct 4 09:01:47 2026 GMT
Not After : Oct 5 09:01:47 2026 GMT
Subject: CN=a4ffc395e5b0a283282be84da0478cbe9c70b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:a0:b8:d6:27:62:dd:56:6d:08:da:b9:2d:
61:7c:6c:e0:bc:d4:61:8b:c8:1e:a3:c9:2e:88:0c:
37:22:a5:4d:2c:9d:1b:64:9a:0c:d4:43:4b:64:5c:
15:d7:a1:26:bb:3d:4a:12:4e:3f:69:62:87:ae:c0:
16:e9:a7:0e:da:43:13:ad:86:a7:07:fe:6a:32:d3:
eb:1c:61:50:cb:f5:f0:a2:2d:40:9d:53:d1:93:7f:
51:27:83:9d:fd:85:60:db:ef:ee:cb:8a:7a:91:1b:
23:dc:bf:48:64:68:e7:d7:60:83:da:1d:4a:ec:28:
a3:ad:d1:b0:43:10:99:ec:2c:f7:b7:d6:7c:58:c2:
6d:ee:41:cf:26:33:c1:ee:a1:38:98:8b:d1:04:c3:
21:0c:7b:0b:0b:ce:db:70:b6:8d:18:64:5f:9a:ee:
b3:6d:5b:43:69:a9:b3:6b:db:bc:58:32:11:a4:35:
77:48:85:2d:27:f4:df:c8:8e:32:bf:72:65:01:36:
3f:1b:72:7f:96:ce:c3:eb:50:50:95:22:01:13:e3:
6a:88:f9:6a:38:9c:ee:16:03:6a:5f:86:59:84:cf:
31:3f:ad:15:7f:1f:8f:d8:76:b3:0e:ad:26:0c:61:
56:dd:58:9a:d2:ce:95:ea:45:ec:e0:17:d3:2d:5a:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:C3:95:E5:B0:A2:83:28:2B:E8:4D:A0:47:8C:BE:9C:70:B0:B0
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:a6:13:f5:93:bc:6e:6c:66:25:5a:91:e8:fa:d4:4b:cd:
5a:03:83:7a:49:18:a3:ca:8a:a9:8b:2a:be:66:c2:41:62:f3:
67:31:93:9d:e1:76:cd:3a:d4:27:b1:4f:75:b8:29:6b:c4:d8:
fb:97:32:fa:7c:dd:58:6a:b7:9e:f1:c6:7d:b7:ab:9a:c1:03:
af:6b:e8:b3:ac:06:04:94:7f:b2:d3:61:ae:f2:63:0d:da:c2:
7c:ec:07:a0:4d:93:83:0b:78:4d:3b:75:44:c5:5b:25:2b:4c:
2a:95:02:53:d9:5b:50:ec:d0:30:5f:06:9f:25:51:55:c5:a3:
d4:70:3a:1a:c6:af:e4:21:cc:60:de:16:ce:73:1d:88:96:8b:
7f:be:ad:38:35:75:e3:6a:86:14:fb:d6:44:a5:43:af:37:a7:
03:25:8a:4c:6d:73:fe:61:69:29:c4:4e:48:43:60:19:34:23:
e9:ea:6e:57:69:c3:71:59:a8:ce:63:81:70:6a:d1:29:82:09:
26:5d:81:0d:8a:c3:75:25:fd:b4:96:eb:09:26:9c:28:af:a4:
9b:1d:aa:bc:4b:3c:14:e7:c1:59:65:4c:a7:8f:c5:df:76:e5:
db:cd:89:7c:78:08:76:d9:e3:eb:2c:fc:ea:fa:d7:67:09:3d:
16:00:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:25 2026 by rpki-client