Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
File: O3S5CBUT135Tof8iWzNAD7s5E1U.mft (raw, json)
Hash identifier: K4XnlO3wteTvWwNgMSEzq8V3fGQMlMAz8GXtUKgvtTE=
Subject key identifier: 53:A8:3E:41:66:FF:BC:2E:87:C7:81:5C:B0:AD:8A:0E:6E:3C:30:3F
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Certificate issuer: /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial: 01A0EF671B29C344C8198D00D14CAB6F44FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
Manifest number: D0
Signing time: Tue 29 Sep 2026 23:01:46 +0000
Manifest this update: Tue 29 Sep 2026 23:01:46 +0000
Manifest next update: Wed 30 Sep 2026 23:01:46 +0000
Files and hashes: 1: O3S5CBUT135Tof8iWzNAD7s5E1U.crl (hash: nIrFDZ8QpzvBn/3Rml7zYBv8Vo1aQRVpJLKJlNTqH1g=)
2: TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (hash: V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:1b:29:c3:44:c8:19:8d:00:d1:4c:ab:6f:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
Validity
Not Before: Sep 29 23:01:46 2026 GMT
Not After : Sep 30 23:01:46 2026 GMT
Subject: CN=53a83e4166ffbc2e87c7815cb0ad8a0e6e3c303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:a6:f4:2b:eb:dd:fc:b3:34:a3:82:70:74:
f0:22:bd:c1:9e:4d:d9:4b:ca:f7:b2:10:64:40:dc:
92:99:25:5d:ed:2e:5b:52:03:10:11:ed:fd:11:f6:
58:2d:23:6e:4f:1c:1c:44:01:18:33:77:bb:bb:ef:
56:99:0e:d0:f1:d0:00:30:b9:8d:ec:c8:b5:75:53:
e4:49:90:21:c9:ae:ec:e6:27:dd:42:6b:37:5b:88:
6e:f3:c2:b9:44:47:d7:c8:fe:ae:b5:22:4e:84:fa:
b6:f7:7a:32:53:c6:94:eb:9a:9e:55:83:3c:80:fa:
6b:4b:6d:10:25:c4:84:cf:ab:04:d2:fe:a9:ca:40:
05:d5:43:e0:a1:d5:18:6d:f4:84:e4:c0:19:df:e2:
4c:bd:87:f3:a2:09:e9:92:db:17:ec:0f:41:dc:4e:
25:ea:aa:39:45:50:1a:bc:7c:8d:7c:59:88:6f:8b:
64:e9:eb:b0:e2:8f:4f:d1:10:a7:98:49:3f:b8:d2:
a1:f5:4c:a9:10:1e:a5:f3:bc:9e:c6:db:4a:41:d6:
04:9e:8f:26:6e:e8:8f:e3:d6:95:1c:cf:95:b1:e3:
db:1c:d7:fa:26:69:d2:bf:bf:52:61:95:c1:8f:c6:
58:68:e8:57:48:df:65:07:f0:0a:dd:74:6d:1c:8d:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:3E:41:66:FF:BC:2E:87:C7:81:5C:B0:AD:8A:0E:6E:3C:30:3F
X509v3 Authority Key Identifier:
keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ff:59:ec:3d:98:24:fa:da:dd:b1:ce:74:da:ab:f5:00:ff:
4f:f8:de:fd:9b:55:fe:39:0c:71:4b:27:26:79:f1:20:33:16:
16:f3:d6:78:d4:18:73:b0:f0:70:0f:94:f4:d7:3e:3f:a1:cd:
79:fc:00:e2:09:16:87:02:96:c8:df:29:f0:40:55:fa:14:18:
1b:31:45:e6:58:de:7d:7d:e1:b5:2b:1f:fd:37:6d:bc:c2:8c:
e9:8d:59:75:f9:0d:77:57:44:12:7b:36:13:0b:86:48:48:55:
d1:ad:11:1b:ad:21:de:c1:a4:d3:fc:2f:58:67:f1:49:21:20:
ec:ce:4f:38:22:4f:17:20:4b:11:28:66:9d:c4:a1:44:f5:b5:
ae:d4:b7:55:84:cb:ae:f9:71:5d:04:50:3f:ff:8b:76:32:d7:
7e:93:63:ca:e1:a3:ae:0d:da:01:36:6d:23:49:90:24:e6:5b:
5a:16:9e:24:85:89:3d:93:c9:96:eb:03:25:e5:55:73:a4:e7:
5b:6d:2e:59:c5:e5:2c:b7:9f:b1:94:02:91:12:61:2e:a4:1c:
0d:b9:77:cc:41:f4:63:84:2f:94:a6:8e:8e:95:09:67:d9:54:
7c:68:f7:ec:94:01:e9:9e:39:85:c0:06:ca:f2:9d:66:2a:88:
11:52:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:50:02 2026 by rpki-client