Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: J9QdXtFwKMERFS4IkDJo1YNU7p6Xjw2USbrbDC4Cgzc=
Subject key identifier: F7:E5:12:0A:42:BE:29:80:6A:30:13:8B:AC:C3:F5:35:43:E1:9E:2D
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 01A0B3F68D6D18430750599D09FC01167CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0E50
Signing time: Fri 18 Sep 2026 10:01:14 +0000
Manifest this update: Fri 18 Sep 2026 10:01:14 +0000
Manifest next update: Sat 19 Sep 2026 10:01:14 +0000
Files and hashes: 1: 3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa (hash: hh8lqhzxp65qpWrKmiGr9OM0XCPYC84fwBd1q1LAGsc=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: itXTcPuWSWlzMDqi9h+5Faagk7D9W5qBEE1oF98gRv8=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f6:8d:6d:18:43:07:50:59:9d:09:fc:01:16:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Sep 18 10:01:14 2026 GMT
Not After : Sep 19 10:01:14 2026 GMT
Subject: CN=f7e5120a42be29806a30138bacc3f53543e19e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:0b:24:28:92:6b:f1:1a:fd:6e:e9:27:c3:
2a:91:4e:8a:a0:82:fd:4e:56:37:8a:aa:e9:95:89:
c7:a8:aa:fc:a7:a3:47:72:8f:e9:0a:ff:85:06:62:
c7:bd:3e:1c:a3:82:b9:f4:7d:ac:84:c9:87:70:ce:
9a:98:e4:0a:d9:4f:1e:19:a2:a4:76:7a:b3:e1:4e:
7e:d6:62:98:13:4b:e2:f0:00:9d:cf:5b:15:3d:27:
73:a0:2f:61:d6:ac:cb:f7:b2:a6:b9:4f:f6:a3:94:
58:79:a1:6b:10:d4:2a:33:e2:3e:31:73:d1:ff:47:
a7:b6:c9:c7:d0:d8:07:90:5b:a8:3d:dd:53:b1:1c:
5a:16:aa:34:53:bd:94:60:3e:40:83:83:10:8c:a4:
60:fe:77:a2:7f:f5:c0:c6:74:1d:45:d2:24:e1:d2:
bf:17:fa:04:f2:78:3d:cf:45:0e:7c:da:08:bd:c2:
5d:d4:e0:0e:43:32:e3:74:29:f7:74:8d:a2:10:c5:
e7:77:b8:99:c2:4c:20:9f:10:11:87:34:8c:36:ab:
d0:ed:e7:7a:25:ef:e4:bd:0f:c0:b3:60:f2:c0:b6:
e9:a1:ff:94:b3:51:e2:5a:db:1a:02:c0:65:38:01:
d3:a8:a1:70:42:b2:2d:ea:55:7b:75:71:c5:75:c0:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:12:0A:42:BE:29:80:6A:30:13:8B:AC:C3:F5:35:43:E1:9E:2D
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:e4:0b:bd:7b:e8:6b:54:19:23:e8:22:0f:18:1a:20:7c:
88:32:b0:de:ae:a6:77:5f:65:cb:64:70:47:1b:26:61:46:df:
41:8d:b1:68:10:2d:3b:03:3e:88:f9:bc:2c:09:de:49:54:8b:
91:94:c7:28:8e:49:d5:52:d1:a1:eb:21:80:ca:7f:7c:43:11:
b7:9e:7e:47:74:b0:83:bc:f7:1c:f9:fb:fa:89:9b:f5:7e:42:
68:16:9c:a0:4d:a0:19:c2:4e:c4:61:b6:65:4b:fa:ff:2a:35:
c3:f3:84:8d:cf:76:65:c7:2b:d7:34:71:62:ae:cc:68:a6:40:
e2:8a:9f:2c:de:5d:63:00:4f:c4:f7:2b:00:94:8e:66:1a:ac:
86:db:58:b0:60:71:51:72:7c:a0:ff:f9:33:ec:7d:a4:24:4b:
6e:d4:df:4f:5e:93:3d:03:82:eb:f5:5d:2a:77:60:e6:fe:e6:
d0:21:b6:d5:22:26:5f:07:3a:a1:86:a0:09:4d:b1:1c:6e:38:
b6:2a:44:4d:ac:75:f3:e2:60:1c:da:1a:82:6b:b7:44:a3:ee:
8c:79:87:fb:92:86:d6:3e:b4:9f:a2:ce:dd:e1:6d:f9:49:dc:
a0:9d:93:7e:89:4b:b5:59:cf:b3:1b:49:6c:c6:74:7c:a1:dd:
61:df:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:55:59 2026 by rpki-client