Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: qRaJh+5JKeKQh3uTexpV0EEjWx5tyqDUriJKoVO4pxk=
Subject key identifier: 3E:B5:FC:60:83:21:72:92:C5:3A:B9:04:1E:6F:70:6A:E4:48:42:96
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 01A177DE825FC7C7D53DD6FF63B53FD12099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 11:00:33 +0000
Manifest this update: Mon 26 Oct 2026 11:00:33 +0000
Manifest next update: Tue 27 Oct 2026 11:00:33 +0000
Files and hashes: 1: 1-DKuT0Y95446hJar0aywH5NXXto.roa (hash: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8=)
2: 6M-8u5qByP1ggl6JEnWWtX94ybY.roa (hash: l+WD+P0RUvIhdtRWjkkKIzP6RPO3rfOXr22R2FZ6eyo=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: u5NNFM8LLdtwBFKPltpNkELHfx0SGDlLkrAvim+ws38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:82:5f:c7:c7:d5:3d:d6:ff:63:b5:3f:d1:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Oct 26 11:00:33 2026 GMT
Not After : Oct 27 11:00:33 2026 GMT
Subject: CN=3eb5fc6083217292c53ab9041e6f706ae4484296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:ab:17:5b:f8:56:74:24:13:3c:d5:fe:7c:
43:e6:75:14:da:39:62:7b:8e:eb:51:c3:b8:bb:70:
2d:bc:ec:38:90:11:97:75:68:4c:2f:93:b7:d9:d4:
43:63:97:d8:05:c8:93:cc:67:5b:c6:83:cb:88:26:
f1:dc:fa:9e:51:0c:68:6b:1c:34:a4:74:52:09:af:
ae:08:fd:70:70:57:18:7d:c5:d3:e9:f1:a4:e7:ef:
61:7f:2f:5d:61:29:e3:2d:be:cf:0f:9a:57:da:e4:
f5:79:27:52:d4:31:be:c5:fb:e8:13:65:61:09:38:
dd:04:a1:3c:75:80:88:8e:58:e1:e9:58:35:2e:cb:
1f:ca:8a:73:62:8f:3f:8d:e7:50:5a:8b:fd:36:05:
29:60:dc:1e:1e:99:28:21:64:4f:ef:98:84:c5:c7:
2a:f3:e4:6a:39:f9:63:20:d9:af:0f:c4:d4:72:b3:
b8:17:37:a7:c6:1e:6b:2f:69:52:6e:05:8d:7a:8e:
93:cf:ef:ab:10:e8:4d:77:45:61:e3:42:63:95:21:
cb:08:b0:40:fc:86:38:10:b4:ca:ca:fe:00:5b:92:
9a:d4:ff:5d:a4:42:21:aa:db:6a:54:54:34:37:92:
8f:0a:39:64:6f:b9:be:16:9e:ad:8e:9e:d0:3d:94:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:FC:60:83:21:72:92:C5:3A:B9:04:1E:6F:70:6A:E4:48:42:96
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:0f:16:19:c6:98:37:2c:55:3a:45:e4:d2:82:da:fe:70:
81:e1:38:30:98:15:ad:3e:f2:c6:4e:3f:66:e6:20:c3:46:c1:
74:5b:26:11:b0:c8:ff:36:08:a9:9b:ad:dd:d1:28:fe:0c:3c:
14:0c:fb:05:7c:07:1f:3c:27:75:3b:4d:cf:d9:7d:74:3a:c2:
08:61:79:ec:fd:ec:ce:22:f9:17:ea:17:f7:6b:92:73:76:a9:
35:db:65:38:4c:2f:e6:c6:0c:27:93:71:63:e5:5b:7c:95:42:
5d:1d:6f:01:a4:24:72:37:46:7e:3c:f8:de:05:d1:6a:85:95:
95:89:e8:e2:f0:2e:cc:83:ff:1e:39:30:08:9e:05:f3:73:58:
31:a9:cc:ff:69:4e:b3:26:45:bc:c9:e1:a7:32:94:cf:07:3f:
e2:3c:e9:ff:c5:ab:3d:11:6a:3b:f2:26:ae:53:33:69:6e:a8:
dd:40:31:42:af:2d:f6:2f:b8:b6:72:df:80:cc:a6:c0:6c:47:
f4:25:72:21:fa:dd:75:ce:41:fa:f8:d2:9a:5f:cd:50:41:39:
5a:9a:dc:48:64:d6:e7:1c:7e:b6:62:1f:b6:22:0b:9b:51:34:
56:d5:c4:2b:42:4c:b5:de:74:d0:bd:07:67:32:6d:44:a7:65:
c5:12:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:01 2026 by rpki-client