Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: tBtEjVqv9Js4GQvVc3SsyUzs0ydkGBuiQD0OeahrV1o=
Subject key identifier: 9F:07:3E:53:44:1C:82:69:51:86:CD:F6:75:05:49:27:F9:97:28:C5
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01A08B6841753DBB247BFEA65253BEFAF8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 12CA
Signing time: Thu 10 Sep 2026 13:01:00 +0000
Manifest this update: Thu 10 Sep 2026 13:01:00 +0000
Manifest next update: Fri 11 Sep 2026 13:01:00 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: t2yRsrBcu7DNPHDQo9i9EpXhRQEh4LCoUDPsgXERRIY=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:41:75:3d:bb:24:7b:fe:a6:52:53:be:fa:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Sep 10 13:01:00 2026 GMT
Not After : Sep 11 13:01:00 2026 GMT
Subject: CN=9f073e53441c82695186cdf675054927f99728c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:e3:61:97:8e:ec:b8:0e:ef:4a:4e:92:cd:
43:5f:bf:15:82:c5:06:1d:2c:a5:96:4e:12:5c:da:
ff:73:a4:4d:92:a2:53:84:50:87:b8:28:26:b5:9b:
df:23:48:7d:71:be:1d:0a:91:ba:76:ce:10:57:fe:
7b:3b:db:93:0d:f7:1c:4e:93:6d:2f:70:8c:74:c7:
21:3b:65:2d:b0:a8:7e:20:d1:19:bf:6b:de:ef:b3:
55:99:a5:9a:d1:a8:07:80:89:54:d9:96:be:a8:ce:
84:bc:03:13:0c:2a:c2:07:7b:c2:22:59:2e:d6:79:
fe:e1:9b:b0:9a:8e:af:a6:21:9d:c5:24:b3:6e:1e:
05:8c:10:d7:1f:03:5e:6b:30:6b:e6:33:56:73:91:
82:ba:fe:e1:56:6e:f5:0f:c7:32:20:6a:d6:de:30:
4d:3a:c8:53:05:94:ee:c5:4c:32:0a:4a:25:4d:5b:
3f:b9:ea:fe:ed:b0:f7:d2:04:a9:19:1c:b2:36:de:
65:e5:63:85:0b:2c:42:97:78:fd:5f:7c:66:52:1a:
ca:6c:4f:4d:79:37:b2:8c:c5:ca:ab:8a:c1:a6:0b:
b0:d1:25:af:41:1d:8a:46:f3:56:0c:0e:68:db:04:
2b:27:5d:01:5c:e7:cb:bb:08:d1:21:38:34:6b:a1:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:3E:53:44:1C:82:69:51:86:CD:F6:75:05:49:27:F9:97:28:C5
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:13:0f:11:89:04:2a:48:29:f8:14:ab:78:d0:2c:00:f2:14:
e3:3f:49:ee:09:73:48:f5:31:a3:e5:88:e5:26:2b:6f:98:13:
09:2d:a9:b5:02:fd:2d:79:7d:08:a0:10:6b:ef:f0:85:4e:04:
85:2d:6a:ae:c6:31:9e:d2:9a:ae:e2:b3:31:ca:5a:9d:3d:d0:
a8:e3:02:18:e4:a1:da:76:32:a4:81:7d:5a:6b:36:c7:c0:90:
5d:7d:cd:f0:60:9e:bd:47:16:27:24:52:cb:fc:a4:c1:6e:65:
90:f7:10:63:c8:8c:34:7f:e5:b2:7b:02:b3:b0:9c:3c:a9:01:
17:90:c3:b3:21:a0:da:f7:c5:2f:d3:8c:38:3e:31:7a:84:7a:
74:17:b1:f2:79:f3:d8:52:bb:43:4e:82:ae:f6:d9:6c:da:28:
fe:1e:e1:5a:5d:5e:d2:07:60:5f:ad:ff:75:54:e1:ee:4c:34:
ef:bd:ec:0e:45:51:a0:b1:11:0e:ce:44:ac:72:96:60:0f:66:
c3:c5:b4:5e:7e:4e:dd:00:82:33:57:93:05:6b:33:16:2b:05:
a8:52:70:81:00:69:65:12:1d:bd:bd:24:4a:4e:4b:c9:95:7c:
a0:ed:e3:bd:01:52:1a:bb:ac:f0:f6:b5:fe:da:05:d3:d1:a4:
23:b3:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:16:26 2026 by rpki-client