Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: 5s4dPIjKyJnwqX6An03DxNlKGhUk2P8+kzgvIwHuoa0=
Subject key identifier: 6A:07:BD:67:1B:E6:6A:98:6F:32:99:C9:7A:9B:2C:3A:9F:F4:9C:AD
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 01A1A4EEA1AF525FC98DEF4B0368A3886D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0ECD
Signing time: Wed 04 Nov 2026 05:01:04 +0000
Manifest this update: Wed 04 Nov 2026 05:01:04 +0000
Manifest next update: Thu 05 Nov 2026 05:01:04 +0000
Files and hashes: 1: 3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa (hash: hh8lqhzxp65qpWrKmiGr9OM0XCPYC84fwBd1q1LAGsc=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: DrfKTDA5Du5yq6jcl1Z5k91liPdjFOGzSywRiIZu13M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:ee:a1:af:52:5f:c9:8d:ef:4b:03:68:a3:88:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Nov 4 05:01:04 2026 GMT
Not After : Nov 5 05:01:04 2026 GMT
Subject: CN=6a07bd671be66a986f3299c97a9b2c3a9ff49cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:5a:3b:aa:3f:0b:81:a5:db:86:1c:b6:60:
21:23:33:bb:a2:7b:b3:11:b2:c3:40:d5:61:73:99:
4a:f1:64:25:f0:43:90:f0:d7:81:ad:2f:8a:e9:29:
d1:bc:ad:98:49:91:8f:dd:52:6f:47:a9:34:3b:c4:
37:8b:fe:72:f5:98:60:ee:8b:5d:6a:45:19:a2:af:
69:99:8e:9c:dd:c5:2b:e8:23:71:a6:f9:80:06:54:
bf:2e:1a:1d:09:f6:8f:df:a9:b5:37:58:34:83:c3:
88:9d:a2:1f:ce:b7:50:a6:0f:ba:26:88:90:ab:5c:
54:95:f0:3b:3e:ff:2d:15:72:18:a4:61:e5:3d:33:
f8:a8:c1:e0:01:3a:3d:03:34:59:43:62:23:24:92:
27:78:bf:56:62:64:5d:77:1a:97:67:58:a2:a2:a5:
92:a1:63:72:ed:46:3d:19:f2:31:dd:a7:b1:5c:f6:
a7:81:14:08:51:03:83:94:31:0d:e4:ea:47:6f:78:
61:41:15:76:59:23:07:55:cb:1a:ae:92:c2:39:a2:
f0:5d:6a:d1:ce:a4:87:da:bf:9b:e0:67:75:92:46:
4b:6f:fd:a3:13:e7:95:27:49:a2:12:be:8c:45:f3:
dc:dc:c0:b0:87:97:0d:4c:aa:ad:f7:0b:de:84:4b:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:BD:67:1B:E6:6A:98:6F:32:99:C9:7A:9B:2C:3A:9F:F4:9C:AD
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:9c:c8:ce:21:22:22:00:b1:33:89:b1:95:77:42:86:87:
60:f2:43:9e:6e:c1:e1:24:b9:9a:5d:63:7d:e1:4e:96:09:d2:
00:29:9f:53:c7:0a:8d:6a:1d:9c:e3:c0:96:9d:45:5e:3f:0c:
0b:75:be:68:fa:c5:f9:61:9a:69:87:eb:74:54:27:7b:76:85:
d3:dd:0f:81:7c:71:37:e7:ea:c1:95:ea:c3:ed:47:33:03:c2:
97:72:84:11:1b:69:bd:2b:1b:54:4f:05:40:7a:99:74:d3:61:
7f:fc:bc:f9:51:2c:06:a8:61:49:1d:4c:38:65:e8:6c:31:36:
8c:a3:e4:25:49:66:fe:04:74:26:f9:7e:a9:eb:43:de:17:2b:
d7:41:30:d8:91:23:a2:34:04:55:00:26:92:b3:d9:21:08:05:
67:5c:70:b7:3e:54:34:a8:53:b8:20:c0:08:34:5e:46:0b:f4:
1f:cb:67:e2:9b:66:7c:25:dd:00:b7:25:44:22:28:a5:1b:6d:
ac:f1:2f:f5:49:96:e2:e3:83:be:8a:e6:8d:7b:de:b1:45:3f:
d1:96:bc:42:dc:b7:ba:d8:9b:33:20:d9:92:45:18:04:af:5f:
9d:de:0c:80:47:ea:c7:e0:30:36:5e:3a:83:ff:ca:b5:3b:57:
c1:65:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:26 2026 by rpki-client