Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: rTOTkgBtqT03b0hLHQ5cetCYN0HhJH0G+KJ9UyA0Z8c=
Subject key identifier: 1E:29:5F:6A:ED:54:A4:99:63:12:26:B4:76:DB:FB:28:77:55:5D:3C
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 01A181BD8945E6DC067095AE00BECCD43E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: 037B
Signing time: Wed 28 Oct 2026 09:00:44 +0000
Manifest this update: Wed 28 Oct 2026 09:00:44 +0000
Manifest next update: Thu 29 Oct 2026 09:00:44 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: N74CDl5cFB3dVt6U9yaal6rUkTJNxDAu3izFc9kj7UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:89:45:e6:dc:06:70:95:ae:00:be:cc:d4:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: Oct 28 09:00:44 2026 GMT
Not After : Oct 29 09:00:44 2026 GMT
Subject: CN=1e295f6aed54a499631226b476dbfb2877555d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:e9:5a:c8:df:6d:08:f7:96:e8:ac:ca:8d:
64:eb:2e:b8:71:c8:a3:9e:28:03:b9:bc:7e:ea:70:
1d:c7:43:c0:b8:49:4e:b0:0b:41:15:2a:64:5e:e7:
f4:07:35:5a:e7:7f:0d:33:9e:6e:37:c0:5a:3e:a2:
cd:b6:b2:f2:00:d5:f5:15:77:9b:09:8a:2c:15:28:
47:0b:03:1b:88:3d:11:8e:63:c6:a6:b7:d9:39:98:
e6:78:5f:29:ae:d2:72:62:47:5c:ce:b9:c0:72:31:
2a:d2:c6:b3:71:ae:8b:ac:96:f3:e1:37:ce:ae:eb:
3a:02:0d:46:34:66:71:d2:bc:d6:00:66:12:74:55:
bd:35:e4:e0:08:f4:00:f1:74:8e:25:70:8a:c2:48:
94:5b:c8:63:a5:29:60:b6:14:a2:a9:ca:e5:f3:75:
a5:21:bf:a6:0d:9e:b9:76:13:89:86:d5:43:9f:03:
d6:6f:45:9c:5e:0d:8a:bd:fc:0e:4f:1a:2c:12:39:
42:2e:d0:f0:db:0a:7f:9d:cc:ee:3c:cf:cb:8f:54:
40:2b:ea:38:7c:ed:cd:9b:6b:92:43:e1:72:26:ea:
89:76:8a:f2:d5:f4:7f:e2:08:c1:db:a2:92:38:2a:
ae:7b:72:bd:c5:83:c8:0b:e6:66:4e:a5:3b:8d:e6:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:5F:6A:ED:54:A4:99:63:12:26:B4:76:DB:FB:28:77:55:5D:3C
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:90:ed:11:36:b8:c9:cf:9e:33:f3:5b:a6:2d:b4:2d:a6:
9e:b5:28:ea:db:f1:20:ba:4b:5b:31:98:b3:ea:8b:a0:75:bb:
ba:c5:09:84:59:46:65:7e:a2:24:fa:4c:c6:1e:fd:6e:86:9d:
c1:a9:d2:4e:ca:4e:e8:4a:37:74:2e:78:6a:8c:2a:7f:25:82:
8e:07:91:92:96:46:fa:8e:95:8c:6e:d4:48:57:36:cd:71:e8:
8e:53:7f:a5:7b:17:ba:51:2e:fa:ab:4c:cb:bd:9b:e4:07:b8:
d7:46:ff:a9:52:ba:c5:b7:6e:b2:73:f4:ca:f5:c3:e8:70:46:
ae:cd:02:5d:b6:51:a1:81:da:35:16:f8:70:e0:06:03:c6:85:
f9:2f:e0:d9:73:5a:d0:ab:9c:da:d6:9d:ee:f0:2d:db:80:27:
b3:49:72:42:9d:5f:fb:c0:99:f2:d7:92:fb:b6:82:36:fa:90:
8f:74:33:c0:71:8e:df:39:91:c5:de:62:dc:f0:6e:dd:65:71:
ee:02:8e:97:33:8c:e2:e4:7b:42:94:f0:5f:bc:4f:ac:3c:bc:
c3:63:8c:00:75:9e:20:bd:25:29:c7:c7:df:d2:14:f3:3f:e0:
e3:55:cf:90:4d:b9:18:09:41:7b:f5:5e:07:b4:da:d0:88:9e:
34:41:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:53 2026 by rpki-client