Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File: O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier: UCINP6sF3dv1FveO1+QOdWMhEcxjaPEr+31WrLlFJX0=
Subject key identifier: AD:28:AE:F9:C3:E9:BF:ED:CD:75:D3:EC:B1:4B:68:8B:F8:28:67:AC
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 01A17DAA93558A82397DB6861944050D08EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number: 020B
Signing time: Tue 27 Oct 2026 14:01:33 +0000
Manifest this update: Tue 27 Oct 2026 14:01:33 +0000
Manifest next update: Wed 28 Oct 2026 14:01:33 +0000
Files and hashes: 1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: gTs4hwi064trHPbEvYIMenuFT4zJZsX+0eYOa3baSp4=)
2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:93:55:8a:82:39:7d:b6:86:19:44:05:0d:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Oct 27 14:01:33 2026 GMT
Not After : Oct 28 14:01:33 2026 GMT
Subject: CN=ad28aef9c3e9bfedcd75d3ecb14b688bf82867ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:1f:72:57:46:f3:3d:99:93:28:f5:93:63:
82:aa:37:c2:22:fa:f4:09:1e:aa:96:d5:06:14:ed:
75:90:7f:2c:58:2a:15:c3:10:bd:1f:4f:38:4b:42:
d2:9e:98:9a:51:fa:6d:88:6b:e2:8b:80:49:a2:76:
17:25:9b:22:e7:a6:35:19:42:5f:5a:9b:b5:83:9b:
65:f6:8e:2a:da:21:fd:0f:e6:18:59:18:34:cf:d8:
52:fe:f6:96:5a:28:a4:eb:0c:89:2e:43:93:1a:17:
44:64:8f:fb:be:58:33:18:44:12:b4:e4:19:e7:cb:
ef:1b:87:58:68:52:5b:6c:35:2c:00:8d:27:c7:46:
76:70:18:df:67:bf:05:1e:3a:e4:51:41:56:84:c2:
e6:10:03:39:90:61:85:a5:04:38:4e:78:ba:28:eb:
65:0b:a7:37:81:f2:b5:40:ac:ea:1f:fa:97:a2:71:
63:18:4b:77:58:1f:f8:fb:9e:1c:a8:0f:dd:1e:63:
e9:26:61:37:2d:76:94:3d:11:7a:f2:19:f8:e8:85:
9d:73:25:06:8a:8b:80:c7:41:3a:e6:2e:40:00:be:
4f:b0:02:e4:ba:52:73:ff:6f:a4:8c:1f:da:69:c2:
c2:70:c4:98:88:a5:34:c7:55:21:a1:34:83:c6:ab:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:AE:F9:C3:E9:BF:ED:CD:75:D3:EC:B1:4B:68:8B:F8:28:67:AC
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:45:84:4d:43:4c:3b:50:f2:67:2f:ed:d3:ea:ba:55:52:f2:
24:7a:21:eb:0d:62:6c:b2:bf:4c:95:51:7d:72:ff:0e:6f:2e:
da:29:e4:d9:8a:6a:c2:2b:f2:ca:4d:b8:42:0a:16:66:43:68:
ab:01:28:4c:1d:69:d8:d9:e1:7e:90:cc:38:7d:be:01:92:93:
f5:1b:d6:73:c4:94:4f:f4:1d:b8:f4:07:2a:c6:21:00:7b:08:
99:f3:44:7f:31:49:b7:72:f9:30:7f:9b:53:d3:8b:da:42:02:
e5:28:1f:45:67:df:c2:39:03:cc:eb:71:e9:f9:cd:02:f6:ce:
fc:3b:47:14:c4:a4:3c:50:77:38:db:c9:2b:b7:0d:85:6a:cf:
a7:78:9a:29:36:6d:8c:01:d4:59:34:c5:32:fe:e0:a4:a2:b9:
1d:98:a7:ac:65:60:e5:8a:e5:4d:40:72:fa:74:de:b2:c0:fc:
9f:df:30:e6:2a:77:0c:9a:80:d1:b7:d9:d6:34:60:59:e9:96:
88:b4:e6:9f:82:bb:b5:97:4e:d9:ea:de:a6:63:63:b0:5d:23:
80:28:6a:7f:65:59:c3:9d:ff:e4:78:0a:9e:8f:ae:d3:ff:14:
d9:ec:ec:12:b2:e8:ec:be:9d:9b:d5:a1:dd:65:56:aa:fa:1b:
f0:bd:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:24 2026 by rpki-client