Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json)
Hash identifier: cf+ugSP/ZHLdsqOZ79E7gpjsbEWsJ17X2aLIYy6CeLA=
Subject key identifier: 06:AA:2C:2A:12:97:07:4F:58:C3:33:49:A9:B0:BB:D2:FA:64:53:FA
Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Certificate serial: 01A17FCF39EED871F0F5C2F0BC6E5A2BAFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
Manifest number: 1AC3
Signing time: Wed 28 Oct 2026 00:00:49 +0000
Manifest this update: Wed 28 Oct 2026 00:00:49 +0000
Manifest next update: Thu 29 Oct 2026 00:00:49 +0000
Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: pGGM5XxVxkUvk4yIRQKfOUnjG5PxIMVg1HUeGiYzbY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:39:ee:d8:71:f0:f5:c2:f0:bc:6e:5a:2b:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Validity
Not Before: Oct 28 00:00:49 2026 GMT
Not After : Oct 29 00:00:49 2026 GMT
Subject: CN=06aa2c2a1297074f58c33349a9b0bbd2fa6453fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:74:4b:79:5c:31:3e:7b:96:66:e3:a0:4e:
c3:ad:b9:6c:4b:f2:00:8d:ce:97:73:7f:60:c4:b9:
dd:12:80:7d:de:a4:6b:a7:c0:f4:f0:9a:7a:ae:47:
3c:82:fb:ec:a0:ff:86:ad:77:f4:f6:5b:6c:0d:c2:
75:df:82:bd:9b:61:64:4d:56:0c:5e:b6:23:96:e9:
e2:84:0c:a7:0e:20:2d:2e:3c:83:79:15:2c:57:32:
64:c5:99:2d:3c:ce:fb:18:13:00:79:12:79:58:aa:
b0:f3:d5:50:dc:c1:38:e7:21:0f:f8:8d:58:a0:c1:
7c:b2:a0:da:26:5b:22:25:81:43:b3:d6:f0:14:15:
0d:19:ca:b4:58:1d:c3:a2:94:10:c0:de:5a:f9:49:
a8:58:9f:35:e1:59:a9:5d:1a:e2:ba:fb:c1:27:d1:
c0:41:d7:cf:5b:c8:59:7f:c1:cc:a9:c7:97:72:fb:
7d:c5:1a:08:c4:32:c1:78:3f:94:40:a3:83:14:74:
30:70:3d:18:3c:3a:36:46:39:8c:79:f2:ea:a8:dc:
3a:92:d8:86:58:1a:5e:dc:f0:e9:14:c8:4a:73:0e:
ce:24:48:c3:ba:0d:ee:79:2e:6b:e4:73:c2:6d:6a:
cd:fb:4e:7a:db:44:20:fa:6f:e9:77:10:fc:f5:42:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AA:2C:2A:12:97:07:4F:58:C3:33:49:A9:B0:BB:D2:FA:64:53:FA
X509v3 Authority Key Identifier:
keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:63:55:97:b4:6c:6f:05:83:2b:45:a5:a0:5b:3b:cb:10:
7b:82:71:d4:99:d3:89:c2:4c:64:8f:e2:52:ee:a1:e9:e3:d8:
5e:a6:03:75:3f:3a:94:f1:67:a6:ef:f6:51:aa:d6:57:75:5e:
6c:d1:ac:c7:49:b9:8b:53:ac:2b:12:23:a6:f8:ab:cb:96:72:
9d:ab:6d:1d:05:f9:50:90:79:48:ba:35:08:96:0e:ba:0a:f8:
c3:d3:72:d3:80:d1:46:20:7c:b2:0a:0a:52:5a:06:a6:9e:f8:
a0:9a:d8:79:bc:0a:d2:9d:58:fc:28:b1:b2:96:5b:85:fe:b0:
48:91:5c:ba:43:82:42:91:bd:86:e8:94:a8:26:37:f5:25:a8:
0f:62:03:01:94:32:cb:a8:01:85:7b:73:43:42:ef:58:45:64:
0a:34:06:8e:82:c6:23:b5:95:43:43:9c:13:bd:b1:06:4a:bc:
aa:d8:ca:a3:dd:a5:25:04:fc:09:a0:0b:47:b0:2a:3a:8d:65:
b2:8b:4e:76:64:22:4d:53:7f:16:63:e4:9d:11:57:c6:0f:37:
41:ce:6c:1c:bf:09:99:92:e2:85:e1:22:d4:f8:86:bf:9c:85:
b2:2c:10:3d:af:b8:76:b9:cc:37:60:d1:39:1b:87:bb:7b:23:
43:a1:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:19:16 2026 by rpki-client