
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 87nRODkv504OHCz2XR2SrRKXjyHrqXE5BjCHb623AdE=
Subject key identifier: CF:0F:1F:CC:58:72:BC:F3:08:D0:85:F8:8A:58:B5:3B:A6:38:94:9E
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01A17EBD23A3E0D77A09E90CF3D5575B4B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 1348
Signing time: Tue 27 Oct 2026 19:01:26 +0000
Manifest this update: Tue 27 Oct 2026 19:01:26 +0000
Manifest next update: Wed 28 Oct 2026 19:01:26 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: hxXIuWke82i2FVK68AJRrfcTuJZn10RC3mfr+erNpEo=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:23:a3:e0:d7:7a:09:e9:0c:f3:d5:57:5b:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Oct 27 19:01:26 2026 GMT
Not After : Oct 28 19:01:26 2026 GMT
Subject: CN=cf0f1fcc5872bcf308d085f88a58b53ba638949e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:7a:31:64:1f:69:3f:9a:b2:73:87:18:8d:
19:fa:e6:ef:1f:92:09:b1:74:30:91:72:67:ff:76:
f2:da:34:34:aa:fa:bc:85:b1:9e:6b:38:80:48:3e:
9e:a3:ab:64:f6:c2:bf:d9:fa:4b:90:30:16:f0:3a:
8d:42:62:48:42:80:3e:5c:e6:ea:af:0f:fc:31:2d:
9c:a3:8a:41:0a:06:b9:da:5f:7e:18:ea:99:6d:fd:
c0:0e:fe:14:99:00:d2:07:f0:db:40:fb:f5:4b:90:
0f:16:ec:05:f3:c5:6d:43:df:18:13:f7:fb:68:11:
e8:8d:9a:e7:cc:f9:38:7b:3f:18:88:03:28:91:c0:
50:3f:2c:4f:dc:29:27:93:cd:f8:9e:e1:e9:5d:ba:
21:e7:4c:1a:fb:54:5c:3e:7b:f0:55:2f:1f:53:a8:
35:3e:57:e9:d7:ee:fd:c6:ea:bd:3d:70:49:bb:07:
ac:43:45:72:2e:65:6c:51:f6:fb:a7:d6:5e:75:21:
86:4b:89:cc:94:9d:72:d6:25:09:49:ae:55:80:dd:
d3:6d:6d:c5:2d:07:cb:af:91:4d:ba:1a:fc:c5:f2:
1e:9a:c4:c4:f0:24:eb:a3:13:69:7d:4d:c4:ce:c3:
7a:24:fc:14:6d:55:2e:f3:a7:46:32:20:01:46:9c:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0F:1F:CC:58:72:BC:F3:08:D0:85:F8:8A:58:B5:3B:A6:38:94:9E
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:84:f2:e8:b1:f9:10:bb:b0:05:ae:ef:3b:d9:ed:73:82:
44:3e:92:ff:47:a1:7b:64:65:f2:8e:07:56:61:05:7b:f2:0f:
dd:ba:b0:6a:bd:08:ae:d7:45:92:76:6b:03:ce:fd:8a:03:ad:
56:dc:3e:d4:8c:82:63:6b:87:d5:7e:67:bc:ab:38:d5:a6:44:
90:57:45:5a:5b:c7:a0:bb:4e:be:87:72:10:96:d6:0b:ab:98:
f6:10:13:cd:5f:4e:43:1a:ff:67:72:a4:8a:1c:2b:64:6f:7c:
eb:4c:63:c7:71:89:c3:9c:93:cd:b9:01:3b:63:96:60:3c:c4:
bb:6b:b2:3e:7b:78:5b:8b:7e:b5:82:ac:66:05:a0:74:d8:dc:
0c:90:b7:54:41:ef:58:62:10:d4:66:eb:d9:18:43:32:2b:77:
87:2b:09:a8:65:8f:f6:bc:2c:9a:65:c5:d9:cc:57:99:0b:8a:
aa:47:66:66:ec:13:0b:f5:70:25:a7:ba:fc:0a:18:74:1d:76:
a8:b3:2b:ce:cd:f9:2a:b5:52:ec:fe:a4:5c:af:37:68:3c:63:
9f:4d:0d:91:fc:ab:d0:2e:57:bf:92:92:d6:7a:7a:83:e1:02:
57:1c:b4:31:88:9e:c8:07:82:65:53:41:d1:d8:99:a2:8a:e1:
5e:6c:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:02 2026 by rpki-client