Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: 7U8G2bBsNYXYWnBcU2x/qVXQ/hpJ7MZk982NsEKkJsE=
Subject key identifier: 7F:4D:0B:E7:01:5E:94:EB:4B:D4:C3:6D:77:53:53:48:5C:26:9E:1E
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 01A0AECFD37A5C33901405760B7CE453BDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: 06F5
Signing time: Thu 17 Sep 2026 10:00:50 +0000
Manifest this update: Thu 17 Sep 2026 10:00:50 +0000
Manifest next update: Fri 18 Sep 2026 10:00:50 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: tdJgk8n5Dmalblfq+H9CjcCaATDDfTO+FaulW9X2alc=)
2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:cf:d3:7a:5c:33:90:14:05:76:0b:7c:e4:53:bd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Sep 17 10:00:50 2026 GMT
Not After : Sep 18 10:00:50 2026 GMT
Subject: CN=7f4d0be7015e94eb4bd4c36d775353485c269e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:b9:04:e7:7d:c3:62:cf:c3:d1:a6:23:97:
ee:f1:36:20:b5:39:bf:5c:27:f8:e1:8f:22:17:07:
26:d2:70:86:3c:6f:4d:e3:c5:13:61:38:9f:62:c1:
fa:8b:45:9b:b1:67:68:dc:63:86:85:05:14:03:1e:
fa:1d:d9:29:c3:8c:1c:72:db:ad:29:7d:c5:c0:6e:
6b:14:88:7a:f9:89:0d:8a:8a:1d:b0:4d:35:9d:2b:
0e:6e:e6:b7:16:21:5b:84:c0:55:81:25:2f:a2:2e:
7b:bc:32:35:6f:7c:a5:2f:0d:5b:c4:5d:bd:5a:96:
14:e0:53:0a:a3:da:41:61:ee:24:23:e8:ac:17:f5:
d0:e8:d1:da:8b:2c:f3:8e:79:4e:11:32:25:ba:d7:
ab:c1:76:f1:d5:ea:1f:43:46:ec:0a:87:ef:26:f1:
c6:5c:43:86:a5:80:41:cc:e9:0e:3f:12:10:b6:7e:
b1:b0:a4:af:44:5c:9e:51:94:b9:36:97:73:18:ed:
a9:6e:85:ac:aa:85:5f:a2:d6:94:20:e4:b2:74:5e:
89:71:6e:35:b8:61:5b:2c:f4:86:5a:3e:68:0e:53:
b8:89:5f:25:05:19:4e:f9:1a:0a:e1:07:01:65:c6:
92:ba:87:3f:86:3b:78:d3:26:c2:35:c5:92:c1:fd:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:0B:E7:01:5E:94:EB:4B:D4:C3:6D:77:53:53:48:5C:26:9E:1E
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ad:05:fd:8b:a4:2d:fe:36:e9:fa:d8:df:09:d1:fb:8d:c2:
13:bd:57:b3:b5:c1:ba:2b:35:fa:47:49:88:ac:8a:cf:21:e7:
a1:a0:0c:7a:2b:3d:2e:07:f9:ed:85:43:5d:34:5f:11:79:3f:
aa:30:20:58:c6:5b:6e:b2:06:f4:26:25:3e:cc:2c:57:7e:a1:
23:62:2d:59:33:ef:68:96:89:3d:2c:b8:84:24:c4:de:6f:18:
22:7f:dd:33:5c:8d:2d:0e:87:7c:e0:4f:fc:cf:ef:fa:57:10:
1d:50:56:ea:a3:a2:0f:3e:eb:aa:6b:9c:e9:83:ac:91:45:c1:
15:6f:c5:03:2b:2a:4b:7e:be:32:e2:b1:c9:82:18:85:67:20:
dd:49:b8:07:26:08:12:0f:83:bc:6e:a9:00:eb:20:dd:12:dc:
c0:09:52:7e:94:da:2b:a4:1d:4c:a4:9c:80:51:12:f9:9f:f3:
cd:ae:9a:15:7b:bd:02:3f:f6:20:13:74:60:bd:02:bf:71:88:
34:f1:45:44:82:f8:d4:a1:0e:eb:4a:33:e3:fc:25:c5:31:01:
5d:12:91:3b:82:8a:ec:4c:bb:4a:58:a1:ce:75:c5:66:db:75:
bb:06:5e:de:6a:cf:d5:d2:36:b0:10:f0:0b:7a:2b:5a:71:fe:
ad:70:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:48:54 2026 by rpki-client