Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: OsstTjeLArFCqjvzuE6Q/HsY36WMMaWFAM3pg+NBvoI=
Subject key identifier: D4:AE:37:E8:DC:B6:C5:F6:A7:FB:6D:B6:00:A0:33:A3:72:56:B0:7C
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01A08AFAF4326D4B0F7376879AADB36ACC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1A58
Signing time: Thu 10 Sep 2026 11:01:37 +0000
Manifest this update: Thu 10 Sep 2026 11:01:37 +0000
Manifest next update: Fri 11 Sep 2026 11:01:37 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: zqO6uIZy6s+wx481akbWusfamD/HGpyrYycao2ldsdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:f4:32:6d:4b:0f:73:76:87:9a:ad:b3:6a:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Sep 10 11:01:37 2026 GMT
Not After : Sep 11 11:01:37 2026 GMT
Subject: CN=d4ae37e8dcb6c5f6a7fb6db600a033a37256b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:3b:68:25:59:09:59:8a:a6:97:5c:12:00:
34:91:78:86:7f:5e:1d:af:82:45:33:5f:4d:e2:52:
43:f7:92:cf:55:fd:4f:f3:2f:dd:b8:65:04:c3:37:
fd:a4:46:53:be:87:7f:68:54:4e:0b:dc:61:51:39:
33:b5:14:3f:2c:a5:39:17:24:71:df:25:3f:24:46:
28:17:cf:95:8a:12:74:64:f7:d7:a1:ea:b9:34:b0:
6f:4c:f6:42:52:99:c0:f2:85:e5:2a:c8:0e:2a:ce:
36:c9:dc:de:d5:91:94:d1:ac:1e:a0:ae:5f:c2:e5:
c8:48:d4:97:c2:4b:ac:83:e6:65:a2:87:95:ae:bd:
f2:66:3f:6c:cb:a1:3d:98:44:de:6a:17:52:36:61:
a7:d5:35:49:37:e9:9a:e8:e3:15:26:b6:4c:55:91:
3d:fd:2e:5d:5b:ce:c0:f8:78:d0:9f:40:40:2e:17:
05:9c:53:58:ea:19:ed:c4:bf:fc:e5:e1:fe:16:73:
f1:76:2d:d7:74:f9:47:d6:90:08:14:79:e9:84:11:
e4:fa:ae:b5:d2:d0:13:85:e2:80:1c:d8:08:3e:59:
dd:ac:5d:a3:12:a5:7d:5f:61:78:16:24:cb:13:4f:
35:97:14:6f:0a:4d:d4:b0:6a:cb:90:4e:22:e4:f1:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:37:E8:DC:B6:C5:F6:A7:FB:6D:B6:00:A0:33:A3:72:56:B0:7C
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:be:f8:01:16:8b:86:0f:b5:a5:e1:bd:36:cf:ab:45:2b:c8:
36:82:35:98:f1:cb:c8:a6:68:fd:ec:34:35:9e:ec:b5:ca:1a:
42:22:22:a3:c0:f7:d0:db:eb:a4:b5:0b:8a:60:72:a4:7d:ea:
11:4c:b4:b1:f8:83:f1:1d:56:da:eb:c7:d1:cb:40:2c:d8:f1:
07:6b:37:8f:04:34:f8:12:46:38:15:ab:b7:ec:6d:91:c1:7d:
4e:21:df:23:79:75:b0:f6:ba:d3:9e:09:56:1d:86:31:ad:1c:
4a:0a:78:79:77:1b:57:a3:3e:4b:02:74:5e:7e:08:90:75:41:
4e:87:aa:9e:0f:dd:58:6c:93:a3:af:ea:63:7e:62:a7:c6:00:
0c:2c:47:3d:de:0e:80:32:df:cf:21:1e:08:a2:90:ad:d3:b1:
2e:5e:d4:5f:74:6c:84:77:a5:7b:23:8b:f5:bc:41:d3:c2:f5:
2b:4e:00:d6:b5:a5:81:4a:dc:a6:e4:fb:f0:d5:16:e8:24:a8:
36:cb:13:5c:ea:05:b5:b7:5e:a5:f0:ee:0b:e2:38:00:a3:c1:
cb:ed:5f:85:43:23:a3:f8:56:ea:59:ef:8b:2a:73:19:a8:39:
dd:e2:5e:dd:83:80:ea:5a:bb:b3:8b:94:b2:9b:c6:45:20:02:
3a:b2:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:39:04 2026 by rpki-client